Lucene search
+L

2139 matches found

Positive Technologies
Positive Technologies
added 2025/11/10 12:0 a.m.5 views

PT-2025-45591

Name of the Vulnerable Software and Affected Versions Hundred Plus EIP Plus affected versions not specified Description The software contains a Weak Password Recovery Mechanism, allowing unauthenticated remote attackers to predict or brute-force the 'forgot password' link or token. Successful...

9.8CVSS7.1AI score0.00508EPSS
SaveExploits0References17
RedhatCVE
RedhatCVE
added 2025/11/07 5:32 p.m.8 views

CVE-2025-62064

Authentication Bypass Using an Alternate Path or Channel vulnerability in Elated-Themes Search & Go search-and-go allows Password Recovery Exploitation.This issue affects Search & Go: from n/a through = 2.7...

9.8CVSS7AI score0.00402EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/11/06 6:32 p.m.22 views

EUVD-2025-38069

Authentication Bypass Using an Alternate Path or Channel vulnerability in Elated-Themes Search & Go search-and-go allows Password Recovery Exploitation.This issue affects Search & Go: from n/a through = 2.7...

9.8CVSS6.5AI score0.00402EPSS
SaveExploits0References2
NVD
NVD
added 2025/11/06 4:16 p.m.8 views

CVE-2025-62064

Authentication Bypass Using an Alternate Path or Channel vulnerability in Elated-Themes Search & Go search-and-go allows Password Recovery Exploitation.This issue affects Search & Go: from n/a through = 2.7...

9.8CVSS0.00402EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/11/06 3:55 p.m.4 views

CVE-2025-62064 WordPress Search & Go theme <= 2.7 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Elated-Themes Search & Go search-and-go allows Password Recovery Exploitation.This issue affects Search & Go: from n/a through = 2.7...

9.8CVSS6.6AI score0.00402EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/06 3:55 p.m.25 views

CVE-2025-62064

The CVE-2025-62064 entry concerns WordPress Search & Go theme (WordPress plugin) versions up to 2.7. The issue is an Authentication Bypass Using an Alternate Path or Channel that could enable Password Recovery Exploitation. Affected component: Search & Go theme; root cause described as broken aut...

9.8CVSS6.7AI score0.00402EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/11/06 3:55 p.m.15 views

CVE-2025-62064 WordPress Search & Go theme <= 2.7 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Elated-Themes Search & Go search-and-go allows Password Recovery Exploitation.This issue affects Search & Go: from n/a through = 2.7...

9.8CVSS0.00402EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.5 views

WordPress plugin Search & Go 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

9.8CVSS6.9AI score0.00402EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.9 views

PT-2025-45319

Authentication Bypass Using an Alternate Path or Channel vulnerability in Elated-Themes Search & Go search-and-go allows Password Recovery Exploitation.This issue affects Search & Go: from n/a through = 2.7...

9.8CVSS7AI score0.00402EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/10/24 10:38 p.m.5 views

CVE-2025-61977

A weak password recovery mechanism for forgotten password vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an attacker to decrypt an encrypted project by answering just one recovery question...

7.3CVSS7AI score0.00133EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/24 12:30 a.m.7 views

EUVD-2025-35742

A weak password recovery mechanism for forgotten password vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an attacker to decrypt an encrypted project by answering just one recovery question...

7.3CVSS6.5AI score0.00133EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/10/23 9:51 p.m.9 views

CVE-2025-61977 AutomationDirect Productivity Suite Weak Password Recovery Mechanism for Forgotten Password

A weak password recovery mechanism for forgotten password vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an attacker to decrypt an encrypted project by answering just one recovery question...

7.3CVSS0.00133EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/10/23 3:13 p.m.8 views

CVE-2025-60041

Authentication Bypass Using an Alternate Path or Channel vulnerability in Iulia Cazan Emails Catch All emails-catch-all allows Password Recovery Exploitation.This issue affects Emails Catch All: from n/a through = 3.5.3...

8.8CVSS7AI score0.00443EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/23 12:0 a.m.6 views

AutomationDirect Productivity Suite 授权问题漏洞

AutomationDirect Productivity Suite is a programmable logic controller programming software from AutomationDirect. An authorization issue vulnerability exists in AutomationDirect Productivity Suite version v4.4.1.19, which stems from a weak password recovery mechanism that allows an attacker to...

7.3CVSS6.8AI score0.00133EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/22 3:31 p.m.7 views

EUVD-2025-35427

Authentication Bypass Using an Alternate Path or Channel vulnerability in Iulia Cazan Emails Catch All emails-catch-all allows Password Recovery Exploitation.This issue affects Emails Catch All: from n/a through = 3.5.3...

6.5AI score0.00443EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/22 3:15 p.m.6 views

CVE-2025-60041

Authentication Bypass Using an Alternate Path or Channel vulnerability in Iulia Cazan Emails Catch All emails-catch-all allows Password Recovery Exploitation.This issue affects Emails Catch All: from n/a through = 3.5.3...

8.8CVSS0.00443EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/22 2:32 p.m.14 views

CVE-2025-60041 WordPress Emails Catch All plugin <= 3.5.3 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Iulia Cazan Emails Catch All emails-catch-all allows Password Recovery Exploitation.This issue affects Emails Catch All: from n/a through = 3.5.3...

8.8CVSS0.00443EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/22 2:32 p.m.5 views

CVE-2025-60041 WordPress Emails Catch All plugin <= 3.5.3 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Iulia Cazan Emails Catch All emails-catch-all allows Password Recovery Exploitation.This issue affects Emails Catch All: from n/a through = 3.5.3...

8.8CVSS6.6AI score0.00443EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/22 2:32 p.m.17 views

CVE-2025-60041

CVE-2025-60041 is a publicly disclosed vulnerability in the WordPress plugin Emails Catch All (versions

8.8CVSS6.6AI score0.00443EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.6 views

WordPress plugin Emails Catch All Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

8.8CVSS5.8AI score0.00443EPSS
SaveExploits0References1
Rows per page
Query Builder