Lucene search
+L

1139 matches found

Microsoft CVE
Microsoft CVE
added 2024/12/12 8:00 a.m.11 views

usb: typec: altmode should keep reference to parent

...

7.8CVSS6.8AI score0.00244EPSS
SaveExploits0
CNNVD
CNNVD
added 2024/12/05 12:00 a.m.11 views

STMicroelectronics SPC58 安全漏洞

The STMicroelectronics SPC58 is a family of automotive microcontrollers from STMicroelectronics, USA. A security vulnerability exists in the STMicroelectronics SPC58 that stems from susceptibility to an alternate hardware interface missing protection mechanism...

9.8CVSS6.6AI score0.00458EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/05 12:00 a.m.27 views

PT-2024-13538

Name of the Vulnerable Software and Affected Versions STMicroelectronics SPC58 affected versions not specified Description The STMicroelectronics SPC58 PowerPC microcontrollers are affected by a missing protection mechanism for an alternate hardware interface. Code executing with supervisor...

9.8CVSS6.4AI score0.00458EPSS
SaveExploits0References8
OSV
OSV
added 2024/12/03 6:15 a.m.12 views

CVE-2024-49414

Authentication Bypass Using an Alternate Path in Dex Mode prior to SMR Dec-2024 Release 1 allows physical attackers to temporarily access to recent app list...

2.4CVSS5.8AI score0.00226EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/03 12:00 a.m.16 views

PT-2024-33525 · Samsung · Samsung Mobile Devices +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue allows physical attackers to temporarily access the recent app list through an authentication bypass using an alternate path in Dex Mode. This is possible prior to the SMR Dec-20...

2.4CVSS6.9AI score0.00226EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/12/03 12:00 a.m.11 views

SAMSUNG mobile 安全漏洞

SAMSUNG mobile is a cell phone from Samsung South Korea. A security vulnerability exists in SAMSUNG mobile prior to SMR-Dec-2024 Release 1, which originates from the use of an alternate path to bypass authentication and allow a physical attacker to temporarily access the recent applications list...

2.4CVSS6.5AI score0.00226EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/28 11:15 a.m.31 views

CVE-2024-52475

Authentication Bypass Using an Alternate Path or Channel vulnerability in Information Technology Wawp automation-web-platform allows Authentication Bypass.This issue affects Wawp: from n/a through 3.0.18...

9.8CVSS0.01877EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/28 12:00 a.m.7 views

WordPress plugin Wawp 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

9.8CVSS8.3AI score0.01877EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2024/11/18 2:15 p.m.10 views

CVE-2024-8781

Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in TR7 Application Security Platform ASP allows Privilege Escalation, -Privilege Abuse. This issue affects Application Security Platform ASP: v1.4.25.188...

8.7CVSS5.8AI score0.00193EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2024/11/18 2:15 p.m.37 views

CVE-2024-8781

Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in TR7 Application Security Platform ASP allows Privilege Escalation, -Privilege Abuse. This issue affects Application Security Platform ASP: v1.4.25.188...

8.7CVSS0.00193EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/11/18 2:00 p.m.42 views

CVE-2024-8781 Container Escape Vulnerability in TR7's Application Security Platform (ASP)

Execution with Unnecessary Privileges, : Improper Protection of Alternate Path vulnerability in TR7 Application Security Platform ASP allows Privilege Escalation, -Privilege Abuse. This issue affects Application Security Platform ASP: v1.4.25.188...

8.7CVSS0.00193EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/11/18 12:00 a.m.12 views

TR7 Application Security Platform 安全漏洞

TR7 Application Security Platform is an application from TR7, Inc. A security vulnerability exists in TR7 Application Security Platform version 1.4.25.188 that stems from improper protection of an alternate path vulnerability that allows elevation of privilege and privilege abuse...

8.7CVSS7AI score0.00193EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/18 12:00 a.m.13 views

PT-2024-39247 · Unknown · Tr7 Application Security Platform

Name of the Vulnerable Software and Affected Versions: TR7 Application Security Platform ASP version 1.4.25.188 Description: The issue affects the TR7 Application Security Platform ASP due to an Improper Protection of Alternate Path vulnerability, allowing Privilege Escalation and Privilege Abuse...

8.7CVSS7.3AI score0.00193EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/11/10 12:00 a.m.14 views

PT-2025-12126

Name of the Vulnerable Software and Affected Versions gradio-app/gradio version git 67e4044 Description A flaw in the implementation of the blocked path functionality allows for path traversal on Windows OS. The application fails to block access when using NTFS Alternate Data Streams ADS syntax,...

5.3CVSS6AI score0.00685EPSS
SaveExploits0References11
Snyk
Snyk
added 2024/11/06 2:43 p.m.1 views

Authentication Bypass Using an Alternate Path or Channel

Overview codechecker is an analyzer tooling, defect database and viewer extension Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel due to improperly parsing the endpoint path, which allows bypassing authentication on all but the...

10CVSS7.3AI score0.3992EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/10/30 12:00 a.m.16 views

PT-2024-34280 · Unknown · Deryck Oñate User Toolkit

Name of the Vulnerable Software and Affected Versions: Deryck Oñate User Toolkit versions 1.2.3 and earlier Description: The issue is related to an Authentication Bypass Using an Alternate Path or Channel, allowing unauthorized access. This is a significant security concern as it potentially...

9.8CVSS7AI score0.0051EPSS
SaveExploits0References5
OSV
OSV
added 2024/10/28 1:15 p.m.11 views

CVE-2024-50488

Authentication Bypass Using an Alternate Path or Channel vulnerability in Priyabrata Sarkar Token Login allows Authentication Bypass.This issue affects Token Login: from n/a through 1.0.3...

8.8CVSS5.8AI score0.00926EPSS
SaveExploits1References1
NVD
NVD
added 2024/10/28 1:15 p.m.44 views

CVE-2024-50488

Authentication Bypass Using an Alternate Path or Channel vulnerability in yespbs Token Login token-login allows Authentication Bypass.This issue affects Token Login: from n/a through = 1.0.3...

8.8CVSS0.00926EPSS
SaveExploits1References1
OSV
OSV
added 2024/10/28 12:15 p.m.13 views

CVE-2024-50486

Authentication Bypass Using an Alternate Path or Channel vulnerability in Acnoo Acnoo Flutter API allows Authentication Bypass.This issue affects Acnoo Flutter API: from n/a through 1.0.5...

9.8CVSS5.8AI score0.00535EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/28 12:15 p.m.8 views

CVE-2024-50489

Authentication Bypass Using an Alternate Path or Channel vulnerability in Realty Workstation allows Authentication Bypass.This issue affects Realty Workstation: from n/a through 1.0.45...

9.8CVSS5.8AI score0.00535EPSS
SaveExploits0References1
Rows per page
Query Builder