Lucene search
K

52 matches found

GithubExploit
GithubExploit
added 2 days ago44 views

Exploit for Incorrect Implementation of Authentication Algorithm in Google Android

No d...

8.8CVSS5.8AI score0.00009EPSS
Exploits10
Snyk
Snyk
added 2026/03/25 6:31 p.m.1 views

Incorrect Implementation of Authentication Algorithm

Overview github.com/mattermost/mattermost-server is an open source Slack-alternative in Golang and React. Affected versions of this package are vulnerable to Incorrect Implementation of Authentication Algorithm in the IsSameUser function. An attacker can gain unauthorized access to arbitrary user...

7.2CVSS6AI score0.00037EPSS
Exploits0References2
NVD
NVD
added 2026/01/16 1:16 p.m.2 views

CVE-2025-14510

Incorrect Implementation of Authentication Algorithm vulnerability in ABB ABB Ability OPTIMAX.This issue affects ABB Ability OPTIMAX: 6.1, 6.2, from 6.3.0 before 6.3.1-251120, from 6.4.0 before 6.4.1-251120...

9.2CVSS0.00032EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/16 1:2 p.m.1 views

CVE-2025-14510

Incorrect Implementation of Authentication Algorithm vulnerability in ABB ABB Ability OPTIMAX.This issue affects ABB Ability OPTIMAX: 6.1, 6.2, from 6.3.0 before 6.3.1-251120, from 6.4.0 before 6.4.1-251120...

9.2CVSS5.3AI score0.00032EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2026/01/12 5:39 p.m.10 views

GO-2026-4275 Mattermost with Jira plugin enabled has Incorrect Implementation of Authentication Algorithm in github.com/mattermost/mattermost-plugin-jira

Mattermost with Jira plugin enabled has Incorrect Implementation of Authentication Algorithm in github.com/mattermost/mattermost-plugin-jira. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is...

8.3CVSS6.8AI score0.00125EPSS
Exploits0References9
Snyk
Snyk
added 2025/11/27 6:41 p.m.2 views

Incorrect Implementation of Authentication Algorithm

Overview Affected versions of this package are vulnerable to Incorrect Implementation of Authentication Algorithm. An attacker can gain unauthorized access to another user's account by leveraging a specially crafted email address when switching authentication methods and sending a request to the...

9.9CVSS7AI score0.00086EPSS
Exploits0References2
Snyk
Snyk
added 2025/11/27 6:41 p.m.2 views

Incorrect Implementation of Authentication Algorithm

Overview Affected versions of this package are vulnerable to Incorrect Implementation of Authentication Algorithm. An attacker can gain unauthorized access to another user's account by leveraging a specially crafted email address when switching authentication methods and sending a request to the...

9.9CVSS7AI score0.00086EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/14 6:30 p.m.2 views

EUVD-2025-34428

Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally...

8.4CVSS6.5AI score0.00064EPSS
Exploits0References2
OSV
OSV
added 2025/10/14 5:15 p.m.0 views

CVE-2025-53782

Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally...

7.8CVSS5.7AI score0.00064EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 7:26 p.m.1 views

EUVD-2025-32898

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an incorrect Implementation of Authentication Algorithm...

7.5CVSS6.4AI score0.00108EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/07 7:26 p.m.5 views

CVE-2025-43727

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an incorrect Implementation of Authentication Algorithm...

7.5CVSS0.00108EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/07 7:26 p.m.3 views

CVE-2025-43727

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an incorrect Implementation of Authentication Algorithm...

7.5CVSS6.5AI score0.00108EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-54540

Malicious code in bioql PyPI...

5.5CVSS6.6AI score0.00214EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2021-30329

Malicious code in bioql PyPI...

9.8CVSS9.4AI score0.00392EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-10887

Malicious code in bioql PyPI...

5.4CVSS3.6AI score0.00141EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2021-30793

Malicious code in bioql PyPI...

9.8CVSS9.4AI score0.00235EPSS
Exploits0References1
OSV
OSV
added 2025/04/22 4:56 p.m.10 views

GO-2025-3610 Mattermost vulnerable to Incorrect Implementation of Authentication Algorithm in github.com/mattermost/mattermost-server

Mattermost vulnerable to Incorrect Implementation of Authentication Algorithm in github.com/mattermost/mattermost-server...

5.4CVSS6.7AI score0.00141EPSS
Exploits0References4
OSV
OSV
added 2025/04/14 3:31 p.m.7 views

GHSA-6RQH-8465-2XCW Mattermost vulnerable to Incorrect Implementation of Authentication Algorithm

Mattermost versions 10.5.x = 10.5.1, 10.4.x = 10.4.3, 9.11.x = 9.11.9 fail to invalidate the cache when a user account is converted to a bot which allows an attacker to login to the bot exactly one time via normal credentials...

5.4CVSS6.8AI score0.00141EPSS
Exploits0References9
RedhatCVE
RedhatCVE
added 2025/03/27 5:33 a.m.3 views

CVE-2024-8314

An Incorrect Implementation of Authentication Algorithm and Exposure of Data Element to Wrong Ses-sion vulnerability in the session handling used in B APROL 4.4-00P5 may allow an authenticated network attacker to take over a currently active user session without login credentials...

5.5CVSS6.8AI score0.00214EPSS
Exploits0References1
NVD
NVD
added 2025/03/25 5:15 a.m.10 views

CVE-2024-8314

An Incorrect Implementation of Authentication Algorithm and Exposure of Data Element to Wrong Ses-sion vulnerability in the session handling used in B&R APROL 4.4-00P5 may allow an authenticated network attacker to take over a currently active user session without login credentials...

5.5CVSS0.00214EPSS
Exploits0References1
Rows per page
Query Builder