Lucene search
K

7 matches found

Cvelist
Cvelist
added 2026/04/30 3:6 p.m.31 views

CVE-2026-4670 Improper Authentication vulnerability in Progress MOVEit Automation

Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automation allows Authentication Bypass. This issue affects MOVEit Automation: from 2025.0.0 before 2025.0.9, from 2024.0.0 before 2024.1.8, versions prior to 2024.0.0...

9.8CVSS0.05633EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/30 3:6 p.m.1 views

CVE-2026-4670

Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automation allows Authentication Bypass. This issue affects MOVEit Automation: from 2025.0.0 before 2025.0.9, from 2024.0.0 before 2024.1.8, versions prior to 2024.0.0...

9.8CVSS5.2AI score0.05633EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/30 12:0 a.m.4 views

PT-2026-36123

Name of the Vulnerable Software and Affected Versions MOVEit Automation versions prior to 2024.1.8 MOVEit Automation versions 2024.0.0 through 2024.1.7 MOVEit Automation versions 2025.0.0 through 2025.0.8 Description An improper authentication flaw allows attackers to bypass authentication...

9.8CVSS6AI score0.05633EPSS
Exploits0References47
CNNVD
CNNVD
added 2025/10/29 12:0 a.m.1 views

Progress MOVEit Transfer 资源管理错误漏洞

Progress MOVEit Transfer is a secure hosted file transfer application from Progress. A resource management error vulnerability exists in Progress MOVEit Transfer that stems from an uncontrolled resource consumption issue in the AS2 module. The following versions are affected: versions 2025.0.0...

8.2CVSS9.1AI score0.00472EPSS
Exploits0References2
OSV
OSV
added 2025/08/23 3:30 a.m.3 views

GHSA-RVMF-JW8G-R35R Liferay Portal vulnerable to Stored XSS in Components portlet

Stored cross-site scripting XSS vulnerability in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows remote attackers to execute arbitrary web script or HTML via...

4.6CVSS5.4AI score0.00209EPSS
Exploits0References5
CVE
CVE
added 2025/08/21 5:10 p.m.12 views

CVE-2025-43754

CVE-2025-43754 describes a timing-based username-enumeration flaw in Liferay Portal/DXP. Affected: Liferay Portal 7.4.0–7.4.3.132 and Liferay DXP 2024.Qx.0–2024.Qx.7, various 2024 Q releases, and 7.4 GA through update 92. Root cause: differences in server processing time during login requests dis...

6.9CVSS7.1AI score0.00234EPSS
Exploits0References1Affected Software2
Positive Technologies
Positive Technologies
added 2024/06/10 12:0 a.m.7 views

PT-2024-4040 · Jetbrains · Mps +12

Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions 2023.1 through 2023.1.7 JetBrains IntelliJ IDEA versions 2023.2 through 2023.2.7 JetBrains IntelliJ IDEA versions 2023.3 through 2023.3.7 JetBrains IntelliJ IDEA version 2024.1.3 JetBrains IntelliJ IDEA versio...

9.4CVSS7.4AI score0.03837EPSS
Exploits1References19
Rows per page
Query Builder