Lucene search
+L

1139 matches found

Patchstack
Patchstack
added 2024/07/24 2:40 a.m.10 views

WordPress Optimize Images ALT Text (alt tag) & names for SEO using AI plugin <= 3.1.1 - Unauthenticated Full Path Disclosure vulnerability

Unauthenticated Full Path Disclosure vulnerability discovered by stealthcopter in WordPress Plugin Optimize images ALT Text alt tag & names for SEO using AI versions = 3.1.1...

5.3CVSS7AI score0.00373EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/07/21 8:15 a.m.14 views

CVE-2024-38437

D-Link - CWE-288:Authentication Bypass Using an Alternate Path or Channel...

9.8CVSS5.8AI score0.00661EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/21 7:17 a.m.84 views

CVE-2024-38437

The CVE-2024-38437 entry relates to a D-Link router authentication bypass (CWE-288) in the DSL-225 model, described as exploitable via an alternate path or channel. According to PT-2024-5347, the issue allows a remote attacker to bypass authentication and potentially elevate privileges. No specif...

9.8CVSS9.6AI score0.00661EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/07/21 7:17 a.m.28 views

CVE-2024-38437 D-Link - CWE-288: Authentication Bypass Using an Alternate Path or Channel

D-Link - CWE-288:Authentication Bypass Using an Alternate Path or Channel...

9.8CVSS7.2AI score0.00661EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2024/07/20 5:26 p.m.148 views

Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity

CVE-2024-27198: Authentication bypass in Jetbrain Teamcity leads...

9.8CVSS8.9AI score0.99938EPSS
SaveExploits25
ATTACKERKB
ATTACKERKB
added 2024/07/18 5:15 p.m.5 views

CVE-2024-5620

Authentication Bypass Using an Alternate Path or Channel vulnerability in PruvaSoft Informatics Apinizer Management Console allows Authentication Bypass. This issue affects Apinizer Management Console: before 2024.05.1...

6.5CVSS5.8AI score0.0031EPSS
SaveExploits0References3
Citrix
Citrix
added 2024/07/13 12:00 a.m.15 views

Configure Alternate Addressing in StoreFront

This article describes how to configure Alternate Addressing in StoreFront...

7AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2024/06/30 2:00 p.m.11 views

soc: qcom: pmic_glink_altmode: fix drm bridge use-after-free

...

7CVSS7.1AI score0.00248EPSS
SaveExploits0
CNNVD
CNNVD
added 2024/06/27 12:00 a.m.13 views

Session Smart Router Security Vulnerability

Session Smart Router is Juniper's designed to provide users with a superior connectivity experience, the router is built on an application-aware and zero-trust secure network architecture that meets the most stringent enterprise performance, security and availability requirements. A security...

10CVSS7AI score0.01088EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/06/27 12:00 a.m.18 views

PT-2024-4369 · Unknown · Session Smart Conductor +2

Name of the Vulnerable Software and Affected Versions: Session Smart Router versions prior to 5.6.15 Session Smart Router versions 6.0 through 6.1.9-lts Session Smart Router versions 6.2 through 6.2.5-sts Session Smart Conductor versions prior to 5.6.15 Session Smart Conductor versions 6.0 throug...

10CVSS7.2AI score0.01088EPSS
SaveExploits0References12
Veeam
Veeam
added 2024/06/11 12:00 a.m.21 views

Alternate Repository for Veeam Kasten for Kubernetes Container Images

Solution This article documents an alternate location where Kasten's images are stored. Kasten's container images are hosted on the Google Container Registry gcr.io/kasten-images; however, this location may be inaccessible due to country-specific or company-imposed firewalls. If allowing access t...

6.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:00 a.m.29 views

RHEL 8 : libgit2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libgit2: NTFS protections inactive when running Git in the Windows Subsystem for Linux CVE-2020-12279 - A...

9.8CVSS8.3AI score0.24014EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/05/30 12:00 a.m.18 views

The vulnerability of the Continuous Integration and Deployment Application Delivery system (CI/CD) JetBrains TeamCity, related to bypassing the authentication process by using an alternative path or channel, allows attackers to circumvent the authentication process and gain increased privileges.

The vulnerability of the Continuous Integration and Deployment Application Delivery system CI/CD of JetBrains TeamCity is related to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent the authenticatio...

8.1CVSS5.5AI score0.00465EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/05/29 12:00 a.m.11 views

PT-2024-3856 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2022.04.7 JetBrains TeamCity versions prior to 2022.10.6 JetBrains TeamCity versions prior to 2023.05.6 JetBrains TeamCity versions prior to 2023.11.5 Description: The issue is related to an authentication...

9.8CVSS7.5AI score0.00465EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2024/05/21 3:15 p.m.41 views

CVE-2021-47326

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

5.7AI score
SaveExploits0References7
Debian CVE
Debian CVE
added 2024/05/21 2:35 p.m.74 views

CVE-2021-47326

Removed by vendor...

6.9AI score
SaveExploits0
OSV
OSV
added 2024/05/17 11:07 a.m.8 views

OESA-2024-1575 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers. This vulnerability affects Firefox 84,...

8.8CVSS8.9AI score0.01876EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/05/15 12:00 a.m.14 views

The vulnerabilities of the functions ncm_set_alt() and ncm_disable() in the driver drivers/usb/gadget/function/f_ncm.c of the Linux operating system’s USB gadget kernel, which allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the functions ncmsetalt and ncmdisable in the drivers/usb/gadget/function/fncm.c file of the USB gadget driver module of the Linux operating system are related to the repeated use of previously freed memory. Exploiting these vulnerabilities could allow an attacker to...

6.8CVSS6.6AI score0.00235EPSS
SaveExploits0References18Affected Software5
VulnCheck KEV
VulnCheck KEV
added 2024/05/07 12:00 a.m.6 views

VulnCheck KEV: CVE-2009-2445

Oracle iPlanet Web Server formerly Sun Java System Web Server or Sun ONE Web Server 6.1 before SP12, and 7.0 through Update 6, when running on Windows, allows remote attackers to read arbitrary JSP files via an alternate data stream syntax, as demonstrated by a .jsp::$DATA URI...

5CVSS6AI score0.02521EPSS
SaveIn wildExploits1References4
BDU FSTEC
BDU FSTEC
added 2024/04/30 12:00 a.m.12 views

The vulnerability of the Alternate Services component in the Firefox web browser, related to integer overflow, allows an attacker to compromise data integrity.

The vulnerability of the Alternative Services component in the Firefox web browser is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

7.8CVSS7.2AI score0.00739EPSS
SaveExploits0References9Affected Software3
Rows per page
Query Builder