Lucene search
+L

2894 matches found

RedhatCVE
RedhatCVE
added 2025/10/24 10:38 p.m.5 views

CVE-2025-61977

A weak password recovery mechanism for forgotten password vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an attacker to decrypt an encrypted project by answering just one recovery question...

7.3CVSS7AI score0.00133EPSS
Exploits0References1
NVD
NVD
added 2025/10/24 9:16 p.m.5 views

CVE-2025-60954

Microweber CMS 2.0 has Weak Password Requirements. The application does not enforce minimum password length or complexity during password resets. Users can set extremely weak passwords, including single-character passwords, which can lead to account compromise, including administrative accounts...

8.3CVSS0.00427EPSS
Exploits1References3
Snyk
Snyk
added 2025/10/24 8:44 p.m.5 views

Weak Password Requirements

Overview microweber/microweber is a new generation CMS with drag and drop. Affected versions of this package are vulnerable to Weak Password Requirements in the password reset process. An attacker can gain unauthorized access to user or administrative accounts using weak passwords that are easily...

8.3CVSS7.1AI score0.00427EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/24 12:30 a.m.7 views

EUVD-2025-35742

A weak password recovery mechanism for forgotten password vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an attacker to decrypt an encrypted project by answering just one recovery question...

7.3CVSS6.5AI score0.00133EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/10/24 12:0 a.m.13 views

CVE-2025-60954

Microweber CMS 2.0 has Weak Password Requirements. The application does not enforce minimum password length or complexity during password resets. Users can set extremely weak passwords, including single-character passwords, which can lead to account compromise, including administrative accounts...

0.00427EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/10/24 12:0 a.m.6 views

PT-2025-43670

Name of the Vulnerable Software and Affected Versions Microweber CMS version 2.0 Description The application does not enforce minimum password length or complexity during password resets. This allows users to set weak passwords, including single-character passwords, potentially leading to account...

8.3CVSS6.6AI score0.00427EPSS
Exploits1References9
CVE
CVE
added 2025/10/24 12:0 a.m.21 views

CVE-2025-60954

CVE-2025-60954 affects Microweber CMS 2.0, where the password reset flow enforces no minimum length or complexity, allowing extremely weak (even single-character) passwords and risking account compromise, including admin accounts. The vulnerability surface is the password reset process in Microwe...

8.3CVSS6.5AI score0.00427EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2025/10/24 12:0 a.m.5 views

CVE-2025-60954

Microweber CMS 2.0 has Weak Password Requirements. The application does not enforce minimum password length or complexity during password resets. Users can set extremely weak passwords, including single-character passwords, which can lead to account compromise, including administrative accounts...

8.3CVSS6.9AI score0.00427EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/10/23 9:51 p.m.7 views

CVE-2025-61977 AutomationDirect Productivity Suite Weak Password Recovery Mechanism for Forgotten Password

A weak password recovery mechanism for forgotten password vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an attacker to decrypt an encrypted project by answering just one recovery question...

7.3CVSS0.00133EPSS
Exploits0References4
CNVD
CNVD
added 2025/10/21 12:0 a.m.3 views

IBM Transformation Extender Advanced Weak Password Vulnerability

IBM Transformation Extender Advanced A data transformation, validation and standardization tool software from International Business Machines Corporation. IBM Transformation Extender Advanced suffers from a weak password vulnerability that stems from not requiring users to use strong passwords by...

7.5CVSS6.9AI score0.00255EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/10/09 12:0 a.m.7 views

Barco ClickShare Devices Weak Password Requirements (CVE-2019-18828)

Barco ClickShare Button R9861500D01 devices before 1.9.0 have Insufficiently Protected Credentials. The root account present for access via debug interfaces, which are by default not enabled on production devices of the embedded Linux on the ClickShare Button is using a weak password. This plugin...

7.2CVSS6.6AI score0.00393EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2008-4853

Malware in sbrugna...

5CVSS6.3AI score0.03548EPSS
Exploits1References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2021-20055

Malware in sbrugna...

5.4CVSS5.6AI score0.00545EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2010-2607

Malware in sbrugna...

2.1CVSS6.4AI score0.00359EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2019-16525

Malware in sbrugna...

7.5CVSS7.6AI score0.01114EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-28617

Malware in sbrugna...

6.5CVSS6.5AI score0.01145EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2020-17844

Malware in sbrugna...

9.8CVSS7.5AI score0.01237EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2021-22598

Malware in sbrugna...

10CVSS9.2AI score0.02378EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2019-4019

Malware in sbrugna...

8.8CVSS8.6AI score0.01634EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2021-12789

Malware in sbrugna...

8.1CVSS8AI score0.01338EPSS
Exploits1References3
Rows per page
Query Builder