Lucene search
+L

8639 matches found

Vulnrichment
Vulnrichment
•added 2022/07/16 6:15 a.m.•18 views

CVE-2017-20133 Itech Job Portal Script admin improper authentication

A vulnerability, which was classified as critical, was found in Itech Job Portal Script 9.13. This affects an unknown part of the file /admin. The manipulation leads to improper authentication. It is possible to initiate the attack remotely...

7.3CVSS6.9AI score0.00736EPSS
SaveExploits0References1
CVE
CVE
•added 2022/07/16 6:15 a.m.•71 views

CVE-2017-20133

Affected product: Itech Job Portal Script 9.13. The CVE concerns an unspecified part of the /admin area where input handling leads to improper authentication. Descriptions across multiple sources indicate a critical vulnerability that can be triggered remotely, enabling an attacker to bypass auth...

9.8CVSS8.5AI score0.00736EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/16 12:00 a.m.•7 views

CVE-2017-20133: Improper Authentication

A vulnerability, which was classified as critical, was found in Itech Job Portal Script 9.13. This affects an unknown part of the file /admin. The manipulation leads to improper authentication. It is possible to initiate the attack remotely...

9.8CVSS7.9AI score0.00736EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/07/16 12:00 a.m.•3 views

PT-2022-8000

Name of the Vulnerable Software and Affected Versions Itech Job Portal Script version 9.13 Description A critical issue was found in the software, affecting an unknown part of the file /admin, leading to improper authentication. The manipulation can be initiated remotely. Recommendations For Itec...

9.8CVSS0.00736EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2022/07/15 12:00 a.m.•72 views

EulerOS Virtualization 2.10.0 : curl (EulerOS-SA-2022-2087)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated...

8.1CVSS6.7AI score0.03777EPSS
SaveExploits4References5
Tenable Nessus
Tenable Nessus
•added 2022/07/15 12:00 a.m.•28 views

EulerOS Virtualization 2.10.1 : curl (EulerOS-SA-2022-2107)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated...

8.1CVSS6.7AI score0.03777EPSS
SaveExploits4References5
attackerkb
attackerkb
•added 2022/07/13 12:00 a.m.•12 views

CVE-2022-29083

Prior Dell BIOS versions contain an Improper Authentication vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability by bypassing drive security mechanisms in order to gain access to the system...

6.8CVSS6.7AI score0.00372EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/07/13 12:00 a.m.•19 views

PT-2022-7165 · Unknown · Avalanche Premise

Name of the Vulnerable Software and Affected Versions: Avalanche Premise versions 6.3.x and below Description: The issue is related to an improper authentication procedure in the Avalanche system, which can be exploited by an attacker to bypass security restrictions. This can be achieved by...

5.9CVSS5.8AI score0.02252EPSS
SaveExploits0References8
attackerkb
attackerkb
•added 2022/07/12 2:15 p.m.•8 views

CVE-2022-30755

Improper authentication vulnerability in AppLock prior to SMR Jul-2022 Release 1 allows attacker to bypass password confirm activity by hijacking the implicit intent...

7.8CVSS5.8AI score0.00104EPSS
SaveExploits0References2
OSV
OSV
•added 2022/07/12 2:15 p.m.•15 views

CVE-2022-30755

Improper authentication vulnerability in AppLock prior to SMR Jul-2022 Release 1 allows attacker to bypass password confirm activity by hijacking the implicit intent...

7.8CVSS5.8AI score0.00104EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/07/11 1:32 p.m.•40 views

CVE-2022-30755

Improper authentication vulnerability in AppLock prior to SMR Jul-2022 Release 1 allows attacker to bypass password confirm activity by hijacking the implicit intent...

7.3CVSS8AI score0.00104EPSS
SaveExploits0References1
CVE
CVE
•added 2022/07/11 1:32 p.m.•67 views

CVE-2022-30755

CVE-2022-30755 affects Samsung AppLock prior to the SMR July 2022 Release 1. The issue is improper authentication resulting from insufficient authentication logic, enabling an attacker to bypass password confirmation by hijacking an implicit intent. The vulnerability is documented across multiple...

7.8CVSS7.8AI score0.00104EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/07/11 12:00 a.m.•1 views

PT-2022-20294

Name of the Vulnerable Software and Affected Versions AppLock versions prior to SMR Jul-2022 Release 1 Description The issue allows an attacker to bypass the password confirm activity by hijacking the implicit intent, due to an improper authentication vulnerability. Recommendations For versions...

7.8CVSS0.00104EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/11 12:00 a.m.•8 views

CVE-2022-30755: Improper Authentication

Improper authentication vulnerability in AppLock prior to SMR Jul-2022 Release 1 allows attacker to bypass password confirm activity by hijacking the implicit intent...

7.8CVSS7.3AI score0.00104EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/11 12:00 a.m.•5 views

CVE-2022-33689: Improper Authentication

Improper access control vulnerability in TelephonyUI prior to SMR Jul-2022 Release 1 allows attackers to change preferred network type by unprotected binder call...

6.2CVSS5.5AI score0.00094EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/07/08 12:00 a.m.•30 views

Atlassian Jira < 8.19.1 Improper Authentication

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is 8.5.x prior to 8.19.1. It is, therefore, affected by a vulnerability allowing a remote attacker who has had their access revoked from Jira Service Management to enable and disable Issu...

7.5CVSS7.4AI score0.01211EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2022/07/08 12:00 a.m.•70 views

Rocky Linux 8 : curl (RLSA-2022:5313)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:5313 advisory. - An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections withou...

8.1CVSS6.9AI score0.03777EPSS
SaveExploits4References9
Tenable Nessus
Tenable Nessus
•added 2022/07/08 12:00 a.m.•56 views

EulerOS 2.0 SP9 : curl (EulerOS-SA-2022-1991)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections...

8.1CVSS6.8AI score0.03777EPSS
SaveExploits4References5
Tenable Nessus
Tenable Nessus
•added 2022/07/08 12:00 a.m.•64 views

EulerOS 2.0 SP9 : curl (EulerOS-SA-2022-1961)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections...

8.1CVSS6.8AI score0.03777EPSS
SaveExploits4References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/07 12:00 a.m.•10 views

CVE-2015-5298: Improper Authentication

The Google Login Plugin versions 1.0 and 1.1 allows malicious anonymous users to authenticate successfully against Jenkins instances that are supposed to be locked down to a particular Google Apps domain through client-side request modification...

6.5CVSS6.7AI score0.00691EPSS
SaveExploits0References3
Rows per page
Query Builder