Lucene search
+L

4132 matches found

Vulnrichment
Vulnrichment
added 2023/05/17 7:10 a.m.10 views

CVE-2023-0863 Authentication to access the AC wallbox via its Bluetooth Low Energy (BLE) channel can be bypassed,

Improper Authentication vulnerability in ABB Terra AC wallbox UL40/80A, ABB Terra AC wallbox UL32A, ABB Terra AC wallbox CE Terra AC MID, ABB Terra AC wallbox CE Terra AC Juno CE, ABB Terra AC wallbox CE Terra AC PTB, ABB Terra AC wallbox CE Symbiosis, ABB Terra AC wallbox JP.This issue affects...

8.8CVSS8.8AI score0.00347EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/05/17 12:0 a.m.26 views

Linux Kernel ksmbd Multichannel Improper Authentication Session Hijack Vulnerability

This vulnerability allows remote attackers to hijack a session on affected installations of Linux Kernel. Authentication is not required to exploit this vulnerability, but only systems with ksmbd enabled are vulnerable. The specific flaw exists within the handling of Session ID within Multichanne...

6.5CVSS6.7AI score0.00162EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/05/17 12:0 a.m.8 views

PT-2023-3357 · Abb · Abb Terra Ac Wallbox

Name of the Vulnerable Software and Affected Versions: ABB Terra AC wallbox UL40/80A versions 1.0;0 through 1.5.5 ABB Terra AC wallbox UL32A versions 1.0;0 through 1.6.5 ABB Terra AC wallbox CE Terra AC MID versions 1.0;0 through 1.6.5 ABB Terra AC wallbox CE Terra AC Juno CE versions 1.0;0 throu...

8.8CVSS8.7AI score0.00347EPSS
SaveExploits0References5
Veracode
Veracode
added 2023/05/16 11:32 p.m.28 views

Improper Authentication

org.apache.openmeetings:openmeetings-web is vulnerable to Improper Authentication. An authenticated attacker that has gained access to certain private information is able to use this to impersonate another user because permissions can be incorrectly set during an invitation hash check...

8.1CVSS6.6AI score0.01093EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
added 2023/05/15 12:11 p.m.22 views

Improper Authentication

mageai is vulnerable to Improper Authentication. The vulnerability exists due to missing user permission authentication which allows an attacker to gain access and make changes in the system...

9.8CVSS7.1AI score0.00659EPSS
SaveExploits0References3Affected Software1
GithubExploit
GithubExploit
added 2023/05/15 9:39 a.m.619 views

Exploit for Improper Authentication in Wpdeveloper Essential_Addons_For_Elementor

CVE-2023-32243. Essential Addons for Elementor 5.4.0-5.7.1 - U...

9.8CVSS9.8AI score0.75531EPSS
SaveExploits8
GithubExploit
GithubExploit
added 2023/05/14 7:32 p.m.245 views

Exploit for Improper Authentication in Wpdeveloper Essential_Addons_For_Elementor

CVE-2023-32243 Essential Addons for Elementor - Unauthorized...

9.8CVSS9.7AI score0.75531EPSS
SaveExploits8
NVD
NVD
added 2023/05/12 8:15 a.m.22 views

CVE-2023-32243

Improper Authentication vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation. This issue affects Essential Addons for Elementor: from 5.4.0 through 5.7.1...

9.8CVSS9.6AI score0.75531EPSS
SaveExploits8References3
OSV
OSV
added 2023/05/12 8:15 a.m.5 views

CVE-2023-32243

Improper Authentication vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation. This issue affects Essential Addons for Elementor: from 5.4.0 through 5.7.1...

9.8CVSS7.5AI score0.75531EPSS
SaveExploits8References3
Vulnrichment
Vulnrichment
added 2023/05/12 7:23 a.m.13 views

CVE-2023-32243 WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation

Improper Authentication vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation. This issue affects Essential Addons for Elementor: from 5.4.0 through 5.7.1...

9.8CVSS6.9AI score0.75531EPSS
SaveExploits8References3
CVE
CVE
added 2023/05/12 7:23 a.m.660 views

CVE-2023-32243

CVE-2023-32243 affects the WordPress plugin Essential Addons for Elementor Lite (versions 5.4.0–5.7.1). The root cause is improper authentication that enables unauthenticated privilege escalation by abusing the password reset flow, allowing an attacker to reset an administrator’s password and tak...

9.8CVSS9.6AI score0.75531EPSS
SaveIn wildExploits8References3Affected Software1
CNNVD
CNNVD
added 2023/05/12 12:0 a.m.34 views

WordPress plugin Essential Addons for Elementor 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. An authorization issue vulnerabilit...

9.8CVSS8.6AI score0.75531EPSS
SaveExploits8References5
NVD
NVD
added 2023/05/11 1:15 p.m.35 views

CVE-2023-0858

Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger unauthorized access to the product. :Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier...

5.3CVSS4.4AI score0.0057EPSS
SaveExploits0References4
Prion
Prion
added 2023/05/11 1:15 p.m.25 views

Authentication flaw

Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger unauthorized access to the product. :Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier...

5CVSS5.3AI score0.0057EPSS
SaveExploits0References4Affected Software45
ICS
ICS
added 2023/05/11 6:0 a.m.106 views

Teltonika Remote Management System and RUT Model Routers

1. EXECUTIVE SUMMARY CVSS v3 9.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Teltonika Equipment: Remote Management System and RUT model routers Vulnerabilities: Observable Response Discrepancy, Improper Authentication, Server-Side Request Forgery, Cross-site Scripting, Inclusio...

9.8CVSS9.5AI score0.0148EPSS
SaveExploits0References10
Vulnrichment
Vulnrichment
added 2023/05/11 12:0 a.m.12 views

CVE-2023-0858

Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger unauthorized access to the product. :Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier...

3.1CVSS7.2AI score0.0057EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/05/11 12:0 a.m.12 views

多款Canon产品授权问题漏洞

Canon imageCLASS MF644Cdw is a smart and efficient 3-in-1 color multifunctional printer from Canon Japan. A security vulnerability exists in Canon Laser Printer, Inkjet Printer, and Small Office Multifunctional Printers that stems from improper authentication and allows an attacker to gain...

5.3CVSS5.8AI score0.0057EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2023/05/11 12:0 a.m.39 views

CVE-2023-0858

Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger unauthorized access to the product. :Satera LBP660C Series/LBP620C Series/MF740C Series/MF640C Series firmware Ver.11.04 and earlier...

3.1CVSS5.6AI score0.0057EPSS
SaveExploits0References4
CVE
CVE
added 2023/05/11 12:0 a.m.60 views

CVE-2023-0858

CVE-2023-0858 corresponds to an improper authentication flaw in the RemoteUI of Canon Office/Small Office/MFD printers. Affected firmware: 11.04 and earlier across multiple model lines and regions (e.g., Satera LBP660C/LBP620C/MF740C/MF640C; Color imageCLASS LBP660C/LBP620C/X LBP1127C/MF740C/MF64...

5.3CVSS5.3AI score0.0057EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2023/05/10 2:15 p.m.6 views

CVE-2022-44610

Improper authentication in the IntelR DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via network access...

8.8CVSS5.8AI score0.00551EPSS
SaveExploits0References1
Rows per page
Query Builder