Lucene search
+L

4126 matches found

NVD
NVD
added 2022/08/11 10:15 a.m.25 views

CVE-2022-2765

A vulnerability was found in SourceCodester Company Website CMS 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/settings. The manipulation leads to improper authentication. The attack can be launched remotely. The exploit ha...

9.8CVSS0.00876EPSS
SaveExploits1References2
OSV
OSV
added 2022/08/11 10:15 a.m.5 views

CVE-2022-2765

A vulnerability was found in SourceCodester Company Website CMS 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/settings. The manipulation leads to improper authentication. The attack can be launched remotely. The exploit ha...

9.8CVSS5.4AI score0.00876EPSS
SaveExploits1References2
Prion
Prion
added 2022/08/11 10:15 a.m.25 views

Authentication flaw

A vulnerability was found in SourceCodester Company Website CMS 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/settings. The manipulation leads to improper authentication. The attack can be launched remotely. The exploit ha...

7.5CVSS9.5AI score0.00876EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2022/08/09 9:15 p.m.13 views

CVE-2022-29083

Prior Dell BIOS versions contain an Improper Authentication vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability by bypassing drive security mechanisms in order to gain access to the system...

6.8CVSS0.00362EPSS
SaveExploits0References1
OSV
OSV
added 2022/08/09 9:15 p.m.6 views

CVE-2022-29083

Prior Dell BIOS versions contain an Improper Authentication vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability by bypassing drive security mechanisms in order to gain access to the system...

6.8CVSS6.7AI score0.00362EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/08/09 8:15 p.m.26 views

CVE-2022-29083

Prior Dell BIOS versions contain an Improper Authentication vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability by bypassing drive security mechanisms in order to gain access to the system...

6.8CVSS6.9AI score0.00362EPSS
SaveExploits0References1
CVE
CVE
added 2022/08/09 8:15 p.m.74 views

CVE-2022-29083

The CVE-2022-29083 entry describes an Improper Authentication vulnerability in Dell BIOS. An unauthenticated attacker with physical access could bypass drive security mechanisms to gain system access. Documented impact indicates confidentiality, integrity, and availability could be High. Exploita...

6.8CVSS6.7AI score0.00362EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/08/09 8:15 p.m.5 views

CVE-2022-29083

Prior Dell BIOS versions contain an Improper Authentication vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability by bypassing drive security mechanisms in order to gain access to the system...

6.8CVSS6.7AI score0.00362EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/08/09 12:0 a.m.6 views

PT-2022-19402 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to an Improper Authentication vulnerability. An attacker with physical access to the system could potentially exploit this by bypassing drive security mechanisms to...

6.8CVSS6.5AI score0.00362EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/08/06 12:0 a.m.50 views

AlmaLinux 8 : 389-ds:1.4 (5823) (ALSA-2022:5823)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:5823 advisory. 389-ds-base: sending crafted message could result in DoS CVE-2022-0918 389-ds-base: expired password was still allowed to access the database CVE-2022-099...

7.5CVSS6.9AI score0.05914EPSS
SaveExploits3References3
NVD
NVD
added 2022/08/05 4:15 p.m.20 views

CVE-2022-33720

Improper authentication vulnerability in AppLock prior to SMR Aug-2022 Release 1 allows physical attacker to access Chrome locked by AppLock via new tap shortcut...

2.4CVSS0.00136EPSS
SaveExploits0References1
OSV
OSV
added 2022/08/05 4:15 p.m.3 views

CVE-2022-33720

Improper authentication vulnerability in AppLock prior to SMR Aug-2022 Release 1 allows physical attacker to access Chrome locked by AppLock via new tap shortcut...

2.4CVSS5.8AI score0.00136EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/08/05 4:15 p.m.10 views

CVE-2022-33720

Improper authentication vulnerability in AppLock prior to SMR Aug-2022 Release 1 allows physical attacker to access Chrome locked by AppLock via new tap shortcut...

2.4CVSS5.8AI score0.00136EPSS
SaveExploits0References2
Prion
Prion
added 2022/08/05 4:15 p.m.16 views

Authentication flaw

Improper authentication vulnerability in AppLock prior to SMR Aug-2022 Release 1 allows physical attacker to access Chrome locked by AppLock via new tap shortcut...

2.1CVSS3.9AI score0.00136EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/08/05 3:21 p.m.18 views

CVE-2022-33720

Improper authentication vulnerability in AppLock prior to SMR Aug-2022 Release 1 allows physical attacker to access Chrome locked by AppLock via new tap shortcut...

2.4CVSS3.9AI score0.00136EPSS
SaveExploits0References1
CVE
CVE
added 2022/08/05 3:21 p.m.74 views

CVE-2022-33720

CVE-2022-33720 concerns Samsung AppLock. The vulnerability is an improper authentication issue in AppLock prior to SMR Aug-2022 Release 1, which could let a physical attacker bypass the lock and access Chrome secured by AppLock via a new tap shortcut. Affected component: AppLock’s Chrome access c...

2.4CVSS3.9AI score0.00136EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/08/05 10:45 a.m.4 views

CVE-2022-2664 Private Cloud Management Platform POST Request global_config_query improper authentication

A vulnerability classified as critical has been found in Private Cloud Management Platform. Affected is an unknown function of the file /management/api/rcxmanagement/globalconfigquery of the component POST Request Handler. The manipulation leads to improper authentication. It is possible to launc...

7.3CVSS7AI score0.0059EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/08/05 12:0 a.m.6 views

PT-2022-21837 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: AppLock versions prior to SMR Aug-2022 Release 1 Description: The issue is related to improper authentication, allowing a physical attacker to bypass the lock and access Chrome when it is locked by AppLock. This can be achieved via a new tap...

2.4CVSS3.3AI score0.00136EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/08/04 12:0 a.m.1 views

CVE-2022-26858

Dell BIOS versions contain an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls...

7.8CVSS5.9AI score0.00165EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/08/04 12:0 a.m.52 views

Oracle Linux 8 : 389-ds:1.4 (ELSA-2022-5823)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5823 advisory. - Resolves: Bug 2081008 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database Tenable has extracted the...

7.5CVSS7AI score0.05914EPSS
SaveExploits3References3
Rows per page
Query Builder