Lucene search
+L

632 matches found

NVD
NVD
•added 2025/08/28 1:16 p.m.•24 views

CVE-2025-54725

Authentication Bypass Using an Alternate Path or Channel vulnerability in uxper Golo golo allows Authentication Abuse.This issue affects Golo: from n/a through = 1.7.0...

9.8CVSS0.00422EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/28 12:37 p.m.•29 views

CVE-2025-54738 WordPress Jobmonster Theme <= 4.7.9 - Broken Authentication Vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in NooTheme Jobmonster noo-jobmonster allows Authentication Abuse.This issue affects Jobmonster: from n/a through = 4.7.9...

9.8CVSS0.00422EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/28 12:37 p.m.•10 views

CVE-2025-54738 WordPress Jobmonster Theme <= 4.7.9 - Broken Authentication Vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in NooTheme Jobmonster allows Authentication Abuse. This issue affects Jobmonster: from n/a through 4.7.9...

9.8CVSS6.5AI score0.00422EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/28 12:37 p.m.•43 views

CVE-2025-54738

CVE-2025-54738 describes an authentication bypass in the WordPress plugin/theme NooTheme Jobmonster (WordPress JobMonster). The vulnerability allows authentication abuse via an alternate path or channel, affecting Jobmonster versions from n/a up to and including 4.7.9. Evidence from multiple sour...

9.8CVSS5.9AI score0.00422EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/28 12:37 p.m.•8 views

CVE-2025-54725 WordPress Golo Theme <= 1.7.0 - Broken Authentication Vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in uxper Golo allows Authentication Abuse. This issue affects Golo: from n/a through 1.7.0...

9.8CVSS6.5AI score0.00422EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/28 12:00 a.m.•28 views

PT-2025-35073

Name of the Vulnerable Software and Affected Versions uxper Golo versions through 1.7.0 Description An Authentication Bypass Using an Alternate Path or Channel vulnerability exists in uxper Golo, allowing Authentication Abuse. Recommendations Update uxper Golo to a version later than 1.7.0...

9.8CVSS6.4AI score0.00422EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
•added 2025/08/22 8:31 a.m.•17 views

CVE-2025-54713

Authentication Bypass Using an Alternate Path or Channel vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Authentication Abuse.This issue affects Taxi Booking Manager for WooCommerce: from n/a through = 1.3.0...

9.8CVSS5.9AI score0.00561EPSS
SaveExploits0References1
Redos
Redos
•added 2025/08/22 12:00 a.m.•11 views

ROS-20250822-04

Apache Tomcat application server vulnerability related to bypassing the authentication procedure through the use of an alternate path or channel. using an alternate path or channel. Exploitation of the vulnerability could allow an attacker, acting remotely, to affect the confidentiality of...

7.5CVSS7.8AI score0.03437EPSS
SaveExploits0
Redos
Redos
•added 2025/08/22 12:00 a.m.•11 views

ROS-20250822-05

Apache Tomcat application server vulnerability related to bypassing the authentication procedure through the use of an alternate path or channel. using an alternate path or channel. Exploitation of the vulnerability could allow an attacker, acting remotely, to affect the confidentiality of...

7.5CVSS7.8AI score0.03437EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/08/21 12:00 a.m.•22 views

PT-2025-35077

Name of the Vulnerable Software and Affected Versions NooTheme Jobmonster versions through 4.7.9 Description An Authentication Bypass Using an Alternate Path or Channel vulnerability exists in NooTheme Jobmonster, allowing Authentication Abuse. Recommendations Update NooTheme Jobmonster to a...

9.8CVSS6.4AI score0.00422EPSS
SaveExploits0References10
NVD
NVD
•added 2025/08/20 8:15 a.m.•15 views

CVE-2025-54713

Authentication Bypass Using an Alternate Path or Channel vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Authentication Abuse.This issue affects Taxi Booking Manager for WooCommerce: from n/a through = 1.3.0...

9.8CVSS0.00561EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/20 8:02 a.m.•6 views

CVE-2025-54713 WordPress Taxi Booking Manager for WooCommerce plugin <= 1.3.0 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Authentication Abuse.This issue affects Taxi Booking Manager for WooCommerce: from n/a through = 1.3.0...

9.8CVSS5.2AI score0.00561EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/20 8:02 a.m.•44 views

CVE-2025-54713

CVE-2025-54713 : Affected product is WordPress Taxi Booking Manager for WooCommerce (versions through 1.3.0). The entry describes an authentication bypass via an alternate path/channel that enables authentication abuse for the plugin. Affected component is the authentication mechanism; root cause...

9.8CVSS5.9AI score0.00561EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•21 views

PT-2025-34021

Name of the Vulnerable Software and Affected Versions: Taxi Booking Manager for WooCommerce versions through 1.3.0 Description: An authentication bypass vulnerability exists due to an alternate path or channel, allowing authentication abuse. Recommendations: At the moment, there is no information...

9.8CVSS6.5AI score0.00561EPSS
SaveExploits0References9
Snyk
Snyk
•added 2025/08/18 6:30 p.m.•17 views

Authentication Bypass Using an Alternate Path or Channel

Overview Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel via the login process when multi-factor authentication is enabled. An attacker can gain unauthorized access by submitting valid credentials and changing the HTTP method from POST ...

5.1CVSS7AI score0.00503EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/08/17 5:25 p.m.•43 views

CVE-2025-8995

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4...

9.8CVSS7.3AI score0.00523EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/15 5:15 p.m.•21 views

CVE-2025-8995

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4...

9.8CVSS0.00523EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/15 4:27 p.m.•49 views

CVE-2025-8995

The Drupal Authenticator Login module (versions 0.0.0 through 2.1.3 ) is vulnerable to an Authentication Bypass Using an Alternate Path or Channel . The root cause is that the module fails to sufficiently validate authentication under specific conditions when using AJAX callbacks to handle the au...

9.8CVSS6.6AI score0.00523EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/08/15 4:27 p.m.•7 views

CVE-2025-8995 Authenticator Login - Highly critical - Access bypass - SA-CONTRIB-2025-096

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4...

6.6AI score0.00523EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/08/15 4:27 p.m.•9 views

CVE-2025-8995

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4...

9.8CVSS5.8AI score0.00523EPSS
SaveExploits0References2
Rows per page
Query Builder