Lucene search
+L

364 matches found

EUVD
EUVD
added 2026/01/29 11:45 a.m.4 views

EUVD-2025-206549

Improper Access Control vulnerability in Akın Software Computer Import Export Industry and Trade Ltd. QR Menu allows Authentication Abuse.This issue affects QR Menu: before s1.05.12...

8CVSS5.9AI score0.003EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/29 11:45 a.m.38 views

CVE-2025-7016 Improper Access Control in Akinsoft's QR Menu

Improper Access Control vulnerability in Akın Software Computer Import Export Industry and Trade Ltd. QR Menu allows Authentication Abuse. This issue affects QR Menu: before s1.05.12...

8CVSS0.003EPSS
SaveExploits0References2
NVD
NVD
added 2026/01/22 5:16 p.m.10 views

CVE-2025-69101

Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Workreap Core workreapcore allows Authentication Abuse.This issue affects Workreap Core: from n/a through = 3.4.1...

9.8CVSS0.00547EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.9 views

PT-2026-4171

Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Workreap Core workreap core allows Authentication Abuse.This issue affects Workreap Core: from n/a through = 3.4.0...

5.4AI score0.00547EPSS
SaveExploits0References2
OSV
OSV
added 2026/01/12 3:16 p.m.4 views

CVE-2025-41077

IDOR vulnerability has been found in Viafirma Inbox v4.5.13 that allows any authenticated user without privileges in the application to list all users, access and modify their data. This allows the user's email addresses to be modified and, subsequently, using the password recovery functionality ...

8.1CVSS5.6AI score0.00205EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:11 a.m.13 views

CVE-2022-26388

A use of hard-coded password vulnerability may allow authentication abuse.This issue affects ELI 380 Resting Electrocardiograph: Versions 2.6.0 and prior; ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph: Versions 2.3.1 and prior; ELI 250c/BUR 250c Resting Electrocardiograph: Versions 2.1.2 an...

6.4CVSS7.2AI score0.00266EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.7 views

WordPress plugin Felan Framework 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

9.8CVSS6.8AI score0.00429EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/30 6:3 a.m.10 views

CVE-2025-15070

Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization vulnerability in Gmission Web Fax allows Authentication Abuse. This issue affects Web Fax: from 3.0 before 3.0.1...

6.8CVSS5.8AI score0.00294EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/29 6:15 a.m.7 views

CVE-2025-15070

Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization vulnerability in Gmission Web Fax allows Authentication Abuse.This issue affects Web Fax: from 3.0 before 3.0.1...

6.5CVSS5.8AI score0.00294EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/29 6:15 a.m.7 views

CVE-2025-15068

Missing Authorization vulnerability in Gmission Web Fax allows Authentication Abuse, Session Credential Falsification through Manipulation.This issue affects Web Fax: from 3.0 before 3.0.1...

9.8CVSS5.8AI score0.00352EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/29 6:15 a.m.11 views

CVE-2025-15070

Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization vulnerability in Gmission Web Fax allows Authentication Abuse. This issue affects Web Fax: from 3.0 before 3.0.1...

6.8CVSS0.00294EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/12/29 5:6 a.m.7 views

CVE-2025-15070

Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization vulnerability in Gmission Web Fax allows Authentication Abuse. This issue affects Web Fax: from 3.0 before 3.0.1...

6.8CVSS5.8AI score0.00294EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/12/29 5:6 a.m.34 views

CVE-2025-15070 Data Exposure in Gmission Web FAX

Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization vulnerability in Gmission Web Fax allows Authentication Abuse. This issue affects Web Fax: from 3.0 before 3.0.1...

6.8CVSS0.00294EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/29 5:6 a.m.4 views

CVE-2025-15070 Data Exposure in Gmission Web FAX

Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization vulnerability in Gmission Web Fax allows Authentication Abuse. This issue affects Web Fax: from 3.0 before 3.0.1...

6.8CVSS5.8AI score0.00294EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/29 5:6 a.m.5 views

EUVD-2025-205556

Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization vulnerability in Gmission Web Fax allows Authentication Abuse.This issue affects Web Fax: from 3.0 before 4.0...

6.8CVSS6.3AI score0.00294EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/29 12:0 a.m.9 views

Gmission Web Fax 安全漏洞

Gmission Web Fax is a web-based fax management system from the Korean company Gmission. A security vulnerability exists in Gmission Web Fax version 3.0 prior to version 4.0, which stems from the exposure of sensitive information and lack of authorization, and could lead to authentication abuse...

6.8CVSS5.8AI score0.00294EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.11 views

PT-2025-53693

Name of the Vulnerable Software and Affected Versions Gmission Web Fax versions 3.0 through 3.9 Description A missing authorization check in Gmission Web Fax can allow an unauthorized actor to access sensitive information through authentication abuse. Recommendations Update Gmission Web Fax to...

6.8CVSS6.5AI score0.00294EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
added 2025/12/19 3:16 p.m.5 views

CVE-2025-7358

Use of Hard-coded Credentials vulnerability in Utarit Informatics Services Inc. SoliClub allows Authentication Abuse.This issue affects SoliClub: before 5.3.7...

7.5CVSS7AI score0.00335EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2025/12/19 12:8 p.m.9 views

CVE-2025-1928

Improper Restriction of Excessive Authentication Attempts vulnerability in Restajet Information Technologies Inc. Online Food Delivery System allows Password Recovery Exploitation. This issue affects Online Food Delivery System: through 19122025. NOTE: The vendor was contacted early about this...

9.1CVSS5.4AI score0.00327EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/18 4:21 p.m.27 views

CVE-2025-64236 WordPress Tuturn plugin < 3.6 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Tuturn allows Authentication Abuse.This issue affects Tuturn: from n/a before 3.6...

9.8CVSS0.0038EPSS
SaveExploits0References1
Rows per page
Query Builder