Lucene search
+L

2043 matches found

Prion
Prion
added 2023/05/25 9:15 a.m.25 views

Authorization

Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass.This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7...

6.5CVSS8.7AI score0.00683EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2023/05/25 8:20 a.m.27 views

CVE-2023-2883 IDOR in CBOT's Chatbot

Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7...

8.8CVSS8.9AI score0.00683EPSS
SaveExploits0References2
CVE
CVE
added 2023/05/25 8:20 a.m.56 views

CVE-2023-2883

The CVE-2023-2883 issue affects CBOT Chatbot Core prior to v4.0.3.4 and Panel prior to v4.0.3.7, described as an Authorization Bypass through a User-Controlled Key that enables Authentication Abuse. The vulnerability is documented across sources (NVD entry and CVE records) with a CVSS v3.1 base s...

8.8CVSS7.3AI score0.00683EPSS
SaveExploits0References2Affected Software2
ATTACKERKB
ATTACKERKB
added 2023/05/24 1:15 p.m.6 views

CVE-2023-2065

Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking System allows Authentication Abuse, Authentication Bypass. This issue affects Cargo Tracking System: before 3558f28...

8.8CVSS7.3AI score0.00852EPSS
SaveExploits0References4
OSV
OSV
added 2023/05/24 1:15 p.m.8 views

CVE-2023-2065

Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking System allows Authentication Abuse, Authentication Bypass.This issue affects Cargo Tracking System: before 3558f28...

8.8CVSS7.3AI score0.00852EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/24 1:15 p.m.18 views

Authorization

Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking System allows Authentication Abuse, Authentication Bypass.This issue affects Cargo Tracking System: before 3558f28...

6.5CVSS8.7AI score0.00852EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/05/24 12:04 p.m.54 views

CVE-2023-2065

CVE-2023-2065 concerns Armoli Technology Cargo Tracking System. Affected: Cargo Tracking System versions before 3558f28. Root cause: Authorization Bypass via a user-controlled key, enabling authentication abuse. Impact: high confidentiality, integrity, and availability (per CVSS 3.1, base score 8...

8.8CVSS7.3AI score0.00852EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/05/24 12:04 p.m.32 views

CVE-2023-2065 IDOR in Armoli Technology's Cargo Tracking System

Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking System allows Authentication Abuse, Authentication Bypass. This issue affects Cargo Tracking System: before 3558f28...

8.8CVSS8.9AI score0.00852EPSS
SaveExploits0References2
NVD
NVD
added 2023/05/23 8:15 p.m.18 views

CVE-2023-2702

Authorization Bypass Through User-Controlled Key vulnerability in Finex Media Competition Management System allows Authentication Abuse, Authentication Bypass. This issue affects Competition Management System: before 23.07...

8.8CVSS8.8AI score0.00683EPSS
SaveExploits0References2
OSV
OSV
added 2023/05/23 8:15 p.m.9 views

CVE-2023-2702

Authorization Bypass Through User-Controlled Key vulnerability in Finex Media Competition Management System allows Authentication Abuse, Authentication Bypass.This issue affects Competition Management System: before 23.07...

8.8CVSS7.3AI score0.00683EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/05/23 8:15 p.m.6 views

CVE-2023-2702

Authorization Bypass Through User-Controlled Key vulnerability in Finex Media Competition Management System allows Authentication Abuse, Authentication Bypass. This issue affects Competition Management System: before 23.07...

8.8CVSS7.3AI score0.00683EPSS
SaveExploits0References3
Prion
Prion
added 2023/05/23 8:15 p.m.19 views

Authorization

Authorization Bypass Through User-Controlled Key vulnerability in Finex Media Competition Management System allows Authentication Abuse, Authentication Bypass.This issue affects Competition Management System: before 23.07...

6.5CVSS8.7AI score0.00683EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/05/23 4:15 a.m.28 views

Authorization

Authorization Bypass Through User-Controlled Key in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v1.1.0...

5.8CVSS5.1AI score0.00676EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2023/05/23 12:00 a.m.42 views

CVE-2023-2844 Authorization Bypass Through User-Controlled Key in cloudexplorer-dev/cloudexplorer-lite

Authorization Bypass Through User-Controlled Key in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v1.1.0...

7.2CVSS5.4AI score0.00676EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/05/23 12:00 a.m.15 views

PT-2023-21722 · Unknown · Cloudexplorer Lite

Name of the Vulnerable Software and Affected Versions: cloudexplorer-lite versions prior to 1.1.0 Description: The issue concerns a missing authorization in the cloudexplorer-lite GitHub repository. This allows for an authorization bypass through a user-controlled key. Recommendations: For versio...

7.2CVSS5.9AI score0.00676EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2023/05/20 10:15 a.m.9 views

CVE-2023-2713

Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Authentication Abuse, Authentication Bypass. This issue affects Rental Module: before 23.05.15...

9.8CVSS7.3AI score0.00765EPSS
SaveExploits0References3
NVD
NVD
added 2023/05/20 10:15 a.m.24 views

CVE-2023-2713

Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Authentication Abuse, Authentication Bypass. This issue affects Rental Module: before 23.05.15...

9.8CVSS9.6AI score0.00765EPSS
SaveExploits0References2
OSV
OSV
added 2023/05/20 10:15 a.m.10 views

CVE-2023-2713

Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Authentication Abuse, Authentication Bypass.This issue affects Rental Module: before 23.05.15...

9.8CVSS7.3AI score0.00765EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/20 10:15 a.m.18 views

Authorization

Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform allows Authentication Abuse, Authentication Bypass.This issue affects Rental Module: before 23.05.15...

7.5CVSS9.5AI score0.00765EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/05/20 9:52 a.m.56 views

CVE-2023-2713

CVE-2023-2713 describes an Authorization Bypass Through a User-Controlled Key in the Rental Module of Ideasoft’s E‑commerce Platform. The vulnerability allows Authentication Bypass in Rental Module versions prior to 23.05.15 due to misuse of a user-controlled key, enabling unauthorized access. Pu...

9.8CVSS7.3AI score0.00765EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder