Lucene search
+L

1912 matches found

Cvelist
Cvelist
added 2023/06/23 2:21 p.m.31 views

CVE-2023-23679 WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.7 is vulnerable to Insecure Direct Object References (IDOR)

Authorization Bypass Through User-Controlled Key vulnerability in JS Help Desk js-support-ticket allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk: from n/a through 2.7.7...

4.6CVSS8.9AI score0.00472EPSS
SaveExploits0References1
WPVulnDB
WPVulnDB
added 2023/06/23 12:0 a.m.19 views

JS Help Desk – Best Help Desk & Support <= 2.7.7 - Ticket Manipulation via IDOR

Submission imported from CVE-2023-23679. Authorization Bypass Through User-Controlled Key vulnerability in JS Help Desk js-support-ticket allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JS Help Desk: from n/a through 2.7.7...

8.8CVSS6.8AI score0.00472EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2023/06/13 12:15 p.m.6 views

CVE-2023-3048

Authorization Bypass Through User-Controlled Key vulnerability in TMT Lockcell allows Authentication Abuse, Authentication Bypass.This issue affects Lockcell: before 15...

9.8CVSS7.3AI score0.01306EPSS
SaveExploits1References2
NVD
NVD
added 2023/06/13 12:15 p.m.21 views

CVE-2023-3048

Authorization Bypass Through User-Controlled Key vulnerability in TMT Lockcell allows Authentication Abuse, Authentication Bypass. This issue affects Lockcell: before 15...

9.8CVSS9.6AI score0.01306EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2023/06/13 12:15 p.m.9 views

CVE-2023-3048

Authorization Bypass Through User-Controlled Key vulnerability in TMT Lockcell allows Authentication Abuse, Authentication Bypass. This issue affects Lockcell: before 15...

9.8CVSS7.3AI score0.01306EPSS
SaveExploits1References4
Prion
Prion
added 2023/06/13 12:15 p.m.21 views

Authorization

Authorization Bypass Through User-Controlled Key vulnerability in TMT Lockcell allows Authentication Abuse, Authentication Bypass.This issue affects Lockcell: before 15...

7.5CVSS9.4AI score0.01306EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2023/06/13 11:44 a.m.44 views

CVE-2023-3048

CVE-2023-3048 affects TMT Lockcell prior to version 15, where an authorization bypass is possible via a user-controlled key, enabling authentication abuse. The core issue is an IDOR-style authorization bypass that, according to the CVE entry, affects Lockcell versions before 15. Publicly availabl...

9.8CVSS7.3AI score0.01306EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/05/25 9:15 a.m.5 views

CVE-2023-2883

Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7...

8.8CVSS7.3AI score0.00683EPSS
SaveExploits0References3
OSV
OSV
added 2023/05/25 9:15 a.m.8 views

CVE-2023-2883

Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass.This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7...

8.8CVSS5.8AI score0.00683EPSS
SaveExploits0References1
NVD
NVD
added 2023/05/25 9:15 a.m.15 views

CVE-2023-2883

Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7...

8.8CVSS8.8AI score0.00683EPSS
SaveExploits0References2
Prion
Prion
added 2023/05/25 9:15 a.m.22 views

Authorization

Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass.This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7...

6.5CVSS8.7AI score0.00683EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2023/05/25 8:20 a.m.22 views

CVE-2023-2883 IDOR in CBOT's Chatbot

Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7...

8.8CVSS8.9AI score0.00683EPSS
SaveExploits0References2
CVE
CVE
added 2023/05/25 8:20 a.m.49 views

CVE-2023-2883

The CVE-2023-2883 issue affects CBOT Chatbot Core prior to v4.0.3.4 and Panel prior to v4.0.3.7, described as an Authorization Bypass through a User-Controlled Key that enables Authentication Abuse. The vulnerability is documented across sources (NVD entry and CVE records) with a CVSS v3.1 base s...

8.8CVSS7.3AI score0.00683EPSS
SaveExploits0References2Affected Software2
ATTACKERKB
ATTACKERKB
added 2023/05/24 1:15 p.m.5 views

CVE-2023-2065

Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking System allows Authentication Abuse, Authentication Bypass. This issue affects Cargo Tracking System: before 3558f28...

8.8CVSS7.3AI score0.00852EPSS
SaveExploits0References4
OSV
OSV
added 2023/05/24 1:15 p.m.6 views

CVE-2023-2065

Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking System allows Authentication Abuse, Authentication Bypass.This issue affects Cargo Tracking System: before 3558f28...

8.8CVSS7.3AI score0.00852EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/24 1:15 p.m.16 views

Authorization

Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking System allows Authentication Abuse, Authentication Bypass.This issue affects Cargo Tracking System: before 3558f28...

6.5CVSS8.7AI score0.00852EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/05/24 12:4 p.m.48 views

CVE-2023-2065

CVE-2023-2065 concerns Armoli Technology Cargo Tracking System. Affected: Cargo Tracking System versions before 3558f28. Root cause: Authorization Bypass via a user-controlled key, enabling authentication abuse. Impact: high confidentiality, integrity, and availability (per CVSS 3.1, base score 8...

8.8CVSS7.3AI score0.00852EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/05/24 12:4 p.m.28 views

CVE-2023-2065 IDOR in Armoli Technology's Cargo Tracking System

Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking System allows Authentication Abuse, Authentication Bypass. This issue affects Cargo Tracking System: before 3558f28...

8.8CVSS8.9AI score0.00852EPSS
SaveExploits0References2
NVD
NVD
added 2023/05/23 8:15 p.m.14 views

CVE-2023-2702

Authorization Bypass Through User-Controlled Key vulnerability in Finex Media Competition Management System allows Authentication Abuse, Authentication Bypass. This issue affects Competition Management System: before 23.07...

8.8CVSS8.8AI score0.00683EPSS
SaveExploits0References2
OSV
OSV
added 2023/05/23 8:15 p.m.5 views

CVE-2023-2702

Authorization Bypass Through User-Controlled Key vulnerability in Finex Media Competition Management System allows Authentication Abuse, Authentication Bypass.This issue affects Competition Management System: before 23.07...

8.8CVSS7.3AI score0.00683EPSS
SaveExploits0References1
Rows per page
Query Builder