Lucene search
+L

490 matches found

CNNVD
CNNVD
added 2024/12/13 12:0 a.m.6 views

WordPress plugin CoSchool LMS 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS8.7AI score0.0073EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/13 12:0 a.m.8 views

WordPress plugin vBSSO-lite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

9.8CVSS8.5AI score0.0073EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/03 6:15 a.m.9 views

CVE-2024-49414

Authentication Bypass Using an Alternate Path in Dex Mode prior to SMR Dec-2024 Release 1 allows physical attackers to temporarily access to recent app list...

2.4CVSS5.8AI score0.0022EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/03 12:0 a.m.11 views

PT-2024-33525 · Samsung · Samsung Mobile Devices +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue allows physical attackers to temporarily access the recent app list through an authentication bypass using an alternate path in Dex Mode. This is possible prior to the SMR Dec-20...

2.4CVSS6.9AI score0.0022EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/12/03 12:0 a.m.8 views

SAMSUNG mobile 安全漏洞

SAMSUNG mobile is a cell phone from Samsung South Korea. A security vulnerability exists in SAMSUNG mobile prior to SMR-Dec-2024 Release 1, which originates from the use of an alternate path to bypass authentication and allow a physical attacker to temporarily access the recent applications list...

2.4CVSS6.5AI score0.0022EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/28 11:15 a.m.29 views

CVE-2024-52475

Authentication Bypass Using an Alternate Path or Channel vulnerability in Information Technology Wawp automation-web-platform allows Authentication Bypass.This issue affects Wawp: from n/a through 3.0.18...

9.8CVSS0.01825EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/28 12:0 a.m.6 views

WordPress plugin Wawp 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

9.8CVSS8.3AI score0.01825EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2024/11/18 2:15 p.m.9 views

CVE-2024-8781

Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in TR7 Application Security Platform ASP allows Privilege Escalation, -Privilege Abuse. This issue affects Application Security Platform ASP: v1.4.25.188...

8.7CVSS5.8AI score0.00192EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2024/11/18 2:15 p.m.34 views

CVE-2024-8781

Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in TR7 Application Security Platform ASP allows Privilege Escalation, -Privilege Abuse. This issue affects Application Security Platform ASP: v1.4.25.188...

8.7CVSS0.00192EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/11/18 2:0 p.m.38 views

CVE-2024-8781 Container Escape Vulnerability in TR7's Application Security Platform (ASP)

Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in TR7 Application Security Platform ASP allows Privilege Escalation, -Privilege Abuse. This issue affects Application Security Platform ASP: v1.4.25.188...

8.7CVSS0.00192EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/11/18 12:0 a.m.8 views

TR7 Application Security Platform 安全漏洞

TR7 Application Security Platform is an application from TR7, Inc. A security vulnerability exists in TR7 Application Security Platform version 1.4.25.188 that stems from improper protection of an alternate path vulnerability that allows elevation of privilege and privilege abuse...

8.7CVSS7AI score0.00192EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/18 12:0 a.m.8 views

PT-2024-39247 · Unknown · Tr7 Application Security Platform

Name of the Vulnerable Software and Affected Versions: TR7 Application Security Platform ASP version 1.4.25.188 Description: The issue affects the TR7 Application Security Platform ASP due to an Improper Protection of Alternate Path vulnerability, allowing Privilege Escalation and Privilege Abuse...

8.7CVSS7.3AI score0.00192EPSS
SaveExploits0References5
Snyk
Snyk
added 2024/11/06 2:43 p.m.1 views

Authentication Bypass Using an Alternate Path or Channel

Overview codechecker is an analyzer tooling, defect database and viewer extension Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel due to improperly parsing the endpoint path, which allows bypassing authentication on all but the...

10CVSS7.3AI score0.39122EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/10/30 12:0 a.m.6 views

PT-2024-34280 · Unknown · Deryck Oñate User Toolkit

Name of the Vulnerable Software and Affected Versions: Deryck Oñate User Toolkit versions 1.2.3 and earlier Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel, allowing unauthorized access. This is a significant security concern as it potentially...

9.8CVSS7AI score0.0051EPSS
SaveExploits0References5
OSV
OSV
added 2024/10/28 1:15 p.m.7 views

CVE-2024-50488

Authentication Bypass Using an Alternate Path or Channel vulnerability in Priyabrata Sarkar Token Login allows Authentication Bypass.This issue affects Token Login: from n/a through 1.0.3...

8.8CVSS5.8AI score0.00926EPSS
SaveExploits1References1
NVD
NVD
added 2024/10/28 1:15 p.m.30 views

CVE-2024-50488

Authentication Bypass Using an Alternate Path or Channel vulnerability in yespbs Token Login token-login allows Authentication Bypass.This issue affects Token Login: from n/a through = 1.0.3...

8.8CVSS0.00926EPSS
SaveExploits1References1
OSV
OSV
added 2024/10/28 12:15 p.m.7 views

CVE-2024-50487

Authentication Bypass Using an Alternate Path or Channel vulnerability in MaanTheme MaanStore API allows Authentication Bypass.This issue affects MaanStore API: from n/a through 1.0.1...

9.8CVSS5.8AI score0.0054EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/28 12:15 p.m.9 views

CVE-2024-50486

Authentication Bypass Using an Alternate Path or Channel vulnerability in Acnoo Acnoo Flutter API allows Authentication Bypass.This issue affects Acnoo Flutter API: from n/a through 1.0.5...

9.8CVSS5.8AI score0.0054EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/28 12:15 p.m.6 views

CVE-2024-50489

Authentication Bypass Using an Alternate Path or Channel vulnerability in Realty Workstation allows Authentication Bypass.This issue affects Realty Workstation: from n/a through 1.0.45...

9.8CVSS5.8AI score0.0054EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/28 12:15 p.m.5 views

CVE-2024-50477

Authentication Bypass Using an Alternate Path or Channel vulnerability in Stacks Stacks Mobile App Builder stacks-mobile-app-builder allows Authentication Bypass.This issue affects Stacks Mobile App Builder: from n/a through 5.2.3...

9.8CVSS5.8AI score0.08184EPSS
SaveExploits3References1
Rows per page
Query Builder