Lucene search
+L

519 matches found

NVD
NVD
added 2025/12/29 10:15 p.m.17 views

CVE-2025-68860

Authentication Bypass Using an Alternate Path or Channel vulnerability in Mobile Builder Mobile builder mobile-builder allows Authentication Abuse.This issue affects Mobile builder: from n/a through = 1.4.2...

9.8CVSS0.00546EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/12/29 12:00 a.m.9 views

WordPress plugin Mobile builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

9.8CVSS5.8AI score0.00546EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/12/26 3:30 a.m.1 views

Improper Protection of Alternate Path

Overview Affected versions of this package are vulnerable to Improper Protection of Alternate Path due to insufficient validation in attachment editing APIs. An attacker can upload files with restricted extensions by modifying the attachment name, leading to unauthorized file uploads and further...

8.5CVSS6.9AI score0.00337EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/12/26 3:30 a.m.4 views

Improper Protection of Alternate Path

Overview Affected versions of this package are vulnerable to Improper Protection of Alternate Path due to insufficient validation in attachment editing APIs. An attacker can upload files with restricted extensions by modifying the attachment name, leading to unauthorized file uploads and further...

8.5CVSS6.9AI score0.00337EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/12/26 3:30 a.m.3 views

Improper Protection of Alternate Path

Overview Affected versions of this package are vulnerable to Improper Protection of Alternate Path due to insufficient validation in attachment editing APIs. An attacker can upload files with restricted extensions by modifying the attachment name, leading to unauthorized file uploads and further...

8.5CVSS6.9AI score0.00337EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/12/26 3:30 a.m.2 views

Improper Protection of Alternate Path

Overview Affected versions of this package are vulnerable to Improper Protection of Alternate Path due to insufficient validation in attachment editing APIs. An attacker can upload files with restricted extensions by modifying the attachment name, leading to unauthorized file uploads and further...

8.5CVSS6.9AI score0.00337EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/12/19 4:23 p.m.20 views

CVE-2025-64236

Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Tuturn allows Authentication Abuse.This issue affects Tuturn: from n/a before 3.6...

9.8CVSS5.2AI score0.00419EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/18 6:30 p.m.12 views

EUVD-2025-204294

Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Tuturn allows Authentication Abuse.This issue affects Tuturn: from n/a before 3.6...

9.8CVSS6.5AI score0.00419EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/18 5:15 p.m.12 views

CVE-2025-64236

Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Tuturn allows Authentication Abuse.This issue affects Tuturn: from n/a before 3.6...

9.8CVSS0.00419EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/18 4:21 p.m.36 views

CVE-2025-64236 WordPress Tuturn plugin < 3.6 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Tuturn allows Authentication Abuse.This issue affects Tuturn: from n/a before 3.6...

9.8CVSS0.00419EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/18 4:21 p.m.32 views

CVE-2025-64236

CVE-2025-64236 affects the WordPress Tuturn plugin (versions before 3.6). The issue is a broken authentication vulnerability allowing authentication bypass via an alternate path or channel, enabling authentication abuse. Remediation: update to Tuturn 3.6 or later. If exploitation details are not ...

9.8CVSS5.2AI score0.00419EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/18 12:00 a.m.15 views

PT-2025-52264

Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Tuturn allows Authentication Abuse.This issue affects Tuturn: from n/a before 3.6...

9.8CVSS7AI score0.00419EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/04 9:10 p.m.8 views

CVE-2025-66238 Sunbird DCIM dcTrack and Power IQ Authentication Bypass Using an Alternate Path or Channel

DCIM dcTrack allows an attacker to misuse certain remote access features. An authenticated user with access to the appliance's virtual console could exploit these features to redirect network traffic, potentially accessing restricted services or data on the host machine...

7.4CVSS6.5AI score0.00342EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/04 9:10 p.m.31 views

CVE-2025-66238 Sunbird DCIM dcTrack and Power IQ Authentication Bypass Using an Alternate Path or Channel

DCIM dcTrack allows an attacker to misuse certain remote access features. An authenticated user with access to the appliance's virtual console could exploit these features to redirect network traffic, potentially accessing restricted services or data on the host machine...

7.4CVSS0.00342EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/11/28 5:11 p.m.18 views

CVE-2025-12760

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email TFA allows Functionality Bypass.This issue affects Email TFA: from 0.0.0 before 2.0.6...

5.4CVSS7AI score0.00198EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/11/26 4:56 p.m.9 views

CVE-2025-10571

Authentication Bypass Using an Alternate Path or Channel vulnerability in ABB ABB Ability Edgenius.This issue affects ABB Ability Edgenius: 3.2.0.0, 3.2.1.1...

9.6CVSS7AI score0.0031EPSS
SaveExploits0References1
NVD
NVD
added 2025/11/20 7:16 p.m.11 views

CVE-2025-10571

Authentication Bypass Using an Alternate Path or Channel vulnerability in ABB ABB Ability Edgenius.This issue affects ABB Ability Edgenius: 3.2.0.0, 3.2.1.1...

9.6CVSS0.0031EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/11/20 6:06 p.m.4 views

CVE-2025-10571 ABB Ability Edgenius Authentication Bypass

Authentication Bypass Using an Alternate Path or Channel vulnerability in ABB ABB Ability Edgenius.This issue affects ABB Ability Edgenius: 3.2.0.0, 3.2.1.1...

9.6CVSS6.7AI score0.0031EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/20 6:06 p.m.20 views

CVE-2025-10571

The CVE-2025-10571 entry concerns ABB Ability Edgenius, affected in versions 3.2.0.0 and 3.2.1.1. The connected sources describe an authentication bypass via an alternate path or channel, enabling unauthorized access to the system. The vulnerability is characterized as CRITICAL with near-total im...

9.6CVSS6.7AI score0.0031EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/11/20 6:06 p.m.23 views

CVE-2025-10571 ABB Ability Edgenius Authentication Bypass

Authentication Bypass Using an Alternate Path or Channel vulnerability in ABB ABB Ability Edgenius.This issue affects ABB Ability Edgenius: 3.2.0.0, 3.2.1.1...

9.6CVSS0.0031EPSS
SaveExploits0References1
Rows per page
Query Builder