CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

27 matches found

Circl•added 2023/02/06 10:29 p.m.•8 views

CVE-2023-23944

creationtimestamp| type| source ---|---|--- 2023-02-06 22:29:47+00:00| seen| https://t.me/cibsecurity/57607...

6.5CVSS6.3AI score0.00475EPSS

Exploits0References1

CVE•added 2023/02/06 7:35 p.m.•62 views

CVE-2023-23944

Nextcloud Mail app (for Nextcloud server) stored user passwords in cleartext in the database during the OAuth2 setup procedure in versions prior to 2.2.2. An attacker with database access could read these passwords until OAuth setup completes. Remediation: upgrade the Nextcloud Mail app to versio...

6.5CVSS5AI score0.00475EPSS

Exploits0References3Affected Software1

Circl•added 2022/01/25 4:18 p.m.•7 views

CVE-2022-23944

creationtimestamp| type| source ---|---|--- 2022-01-25 16:18:52+00:00| seen| https://t.me/cibsecurity/36217...

9.1CVSS8.6AI score0.79007EPSS

Exploits0References1

Cvelist•added 2022/01/25 1:0 p.m.•35 views

CVE-2022-23944 Apache ShenYu 2.4.1 Improper access control

User can access /plugin api without authentication. This issue affected Apache ShenYu 2.4.0 and 2.4.1...

9.5AI score0.79007EPSS

Exploits0References4

CVE•added 2022/01/25 1:0 p.m.•114 views

CVE-2022-23944

CVE-2022-23944 affects Apache ShenYu 2.4.0 and 2.4.1, introducing an unauthenticated access flaw where the /plugin API can be reached without credentials. Impact described across sources includes unauthorized access to sensitive information and potential admin-panel compromise. The issue originat...

9.1CVSS9.2AI score0.79007EPSS

Exploits0References4Affected Software1