Lucene search
+L

519 matches found

OSV
OSV
added 2025/02/04 8:15 a.m.9 views

CVE-2025-20895

Authentication Bypass Using an Alternate Path in Galaxy Store prior to version 4.5.87.6 allows physical attackers to install arbitrary applications to bypass restrictions of Setupwizard...

4.6CVSS5.9AI score0.00204EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/04 12:00 a.m.11 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices, which stems from a Galaxy Store contains an issue with bypassing authentication using an...

4.6CVSS6.8AI score0.00204EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/01/13 12:00 a.m.23 views

The vulnerability of the embedded software of NETGEAR DGN1000 lies in the ability to bypass the authentication process by using an alternative path or channel, allowing a hacker to execute arbitrary code.

The vulnerability of the embedded software of NETGEAR DGN1000 lies in the ability to bypass the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HTTP requests remotely...

10CVSS8.4AI score0.29939EPSS
SaveExploits2References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/12/31 12:00 a.m.11 views

PT-2024-36679 · Vibethemes · Wplms

Name of the Vulnerable Software and Affected Versions: VibeThemes WPLMS versions 1.9.9 and earlier Description: The issue is related to an authentication bypass using an alternate path or channel, allowing unauthorized access. This problem lets a user bypass authentication using another path...

9.8CVSS9.6AI score0.00812EPSS
SaveExploits0References7
OSV
OSV
added 2024/12/16 4:15 p.m.12 views

CVE-2024-43234

Authentication Bypass Using an Alternate Path or Channel vulnerability in WofficeIO Woffice allows Authentication Bypass.This issue affects Woffice: from n/a through 5.4.14...

9.8CVSS5.8AI score0.0066EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/16 12:00 a.m.14 views

PT-2024-36667 · Wovax · Wovax Idx

Name of the Vulnerable Software and Affected Versions: Wovax IDX versions 1.2.2 and earlier Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel, which allows unauthorized access. This problem affects Wovax IDX, enabling authentication bypass...

8.8CVSS7.1AI score0.00645EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/12/14 12:00 a.m.12 views

PT-2024-30397 · Woffice · Office

Name of the Vulnerable Software and Affected Versions: Woffice versions through 5.4.14 Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel vulnerability in Woffice, which allows authentication bypass. Recommendations: For versions through 5.4.14, updat...

9.8CVSS9.5AI score0.0066EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/12/13 12:00 a.m.12 views

PT-2024-36176 · Inspireui · Inspireui Listapp Mobile Manager

Name of the Vulnerable Software and Affected Versions: InspireUI ListApp Mobile Manager versions 1.7.7 and earlier Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel, which allows unauthorized access. Recommendations: For versions 1.7.7 and earlier,...

9.8CVSS6.9AI score0.0073EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/12/13 12:00 a.m.14 views

PT-2024-36220 · Unknown · Projectopia

Name of the Vulnerable Software and Affected Versions: Projectopia versions through 5.1.7 Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel vulnerability. This vulnerability allows attackers to bypass authentication using an alternate path. There is ...

8.8CVSS7.2AI score0.00645EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/12/13 12:00 a.m.8 views

WordPress plugin CoSchool LMS 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS8.7AI score0.0073EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/13 12:00 a.m.9 views

WordPress plugin vBSSO-lite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

9.8CVSS8.5AI score0.0073EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/03 6:15 a.m.11 views

CVE-2024-49414

Authentication Bypass Using an Alternate Path in Dex Mode prior to SMR Dec-2024 Release 1 allows physical attackers to temporarily access to recent app list...

2.4CVSS5.8AI score0.00226EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/03 12:00 a.m.14 views

PT-2024-33525 · Samsung · Samsung Mobile Devices +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue allows physical attackers to temporarily access the recent app list through an authentication bypass using an alternate path in Dex Mode. This is possible prior to the SMR Dec-20...

2.4CVSS6.9AI score0.00226EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/12/03 12:00 a.m.11 views

SAMSUNG mobile 安全漏洞

SAMSUNG mobile is a cell phone from Samsung South Korea. A security vulnerability exists in SAMSUNG mobile prior to SMR-Dec-2024 Release 1, which originates from the use of an alternate path to bypass authentication and allow a physical attacker to temporarily access the recent applications list...

2.4CVSS6.5AI score0.00226EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/28 11:15 a.m.30 views

CVE-2024-52475

Authentication Bypass Using an Alternate Path or Channel vulnerability in Information Technology Wawp automation-web-platform allows Authentication Bypass.This issue affects Wawp: from n/a through 3.0.18...

9.8CVSS0.01877EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/28 12:00 a.m.7 views

WordPress plugin Wawp 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

9.8CVSS8.3AI score0.01877EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2024/11/18 2:15 p.m.10 views

CVE-2024-8781

Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in TR7 Application Security Platform ASP allows Privilege Escalation, -Privilege Abuse. This issue affects Application Security Platform ASP: v1.4.25.188...

8.7CVSS5.8AI score0.00193EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2024/11/18 2:15 p.m.36 views

CVE-2024-8781

Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in TR7 Application Security Platform ASP allows Privilege Escalation, -Privilege Abuse. This issue affects Application Security Platform ASP: v1.4.25.188...

8.7CVSS0.00193EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/11/18 2:00 p.m.41 views

CVE-2024-8781 Container Escape Vulnerability in TR7's Application Security Platform (ASP)

Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in TR7 Application Security Platform ASP allows Privilege Escalation, -Privilege Abuse. This issue affects Application Security Platform ASP: v1.4.25.188...

8.7CVSS0.00193EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/11/18 12:00 a.m.12 views

TR7 Application Security Platform 安全漏洞

TR7 Application Security Platform is an application from TR7, Inc. A security vulnerability exists in TR7 Application Security Platform version 1.4.25.188 that stems from improper protection of an alternate path vulnerability that allows elevation of privilege and privilege abuse...

8.7CVSS7AI score0.00193EPSS
SaveExploits0References1
Rows per page
Query Builder