Lucene search
+L

3494 matches found

BDU FSTEC
BDU FSTEC
added 2025/02/04 12:0 a.m.8 views

The vulnerability of the Freelinking module in Drupal CMS systems, related to improper authentication, allows attackers to expose protected information and execute a Forceful Browsing attack.

The vulnerability of the Freelinking module in the Drupal CMS system is related to improper authentication. Exploiting this vulnerability allows a malicious actor to disclose protected information and execute a Forceful Browsing attack...

4.3CVSS5.5AI score0.00307EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/04 12:0 a.m.9 views

The vulnerability of the Content Entity Clone module in the Drupal CMS system, related to improper authentication, allows attackers to disclose protected information and execute a Forceful Browsing attack.

The vulnerability of the Content Entity Clone module in the Drupal CMS system is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to disclose protected information and execute a Forceful Browsing attack...

4.3CVSS5.5AI score0.00307EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/29 12:0 a.m.10 views

The vulnerability of the Responsive and off-canvas menu module in the Drupal CMS system, related to improper authentication, allows attackers to bypass security restrictions and execute a Forceful Browsing attack.

The vulnerability of the Responsive and off-canvas menu module in the Drupal CMS system is related to improper authentication. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute a Forceful Browsing attack...

5.3CVSS5.5AI score0.00347EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/29 12:0 a.m.8 views

The vulnerability of the Commerce View Receipt module in the Drupal CMS system, related to deficiencies in the authentication process, allows attackers to circumvent security restrictions and execute a Forceful Browsing attack.

The vulnerability of the Commerce View Receipt module in the Drupal CMS system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute a Forceful Browsing attack...

5.3CVSS5.5AI score0.00285EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/29 12:0 a.m.14 views

The vulnerability of the Email Contact module in the Drupal CMS system allows attackers to bypass security restrictions and execute a forced browsing attack.

The vulnerability of the Email Contact module in the Drupal CMS system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute a Forceful Browsing attack...

7.8CVSS5.5AI score0.00404EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/29 12:0 a.m.10 views

The vulnerability of the Entity Delete Log module in the Drupal CMS system, related to improper authentication, allows attackers to bypass security restrictions and execute a forced browsing attack.

The vulnerability of the Entity Delete Log module in the Drupal CMS system is related to improper authentication. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute a Forceful Browsing attack...

6.8CVSS5.5AI score0.00272EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/28 12:0 a.m.8 views

The vulnerability of the Drupal CMS system’s Image Sizes module, related to the insertion of confidential information into the transmitted data, allows attackers to circumvent security restrictions and execute a Forceful Browsing attack.

The vulnerability of the Image Sizes module in Drupal systems is related to the insertion of confidential information into the transmitted data. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute a Forceful Browsing attack...

7.8CVSS5.5AI score0.00491EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2025/01/27 10:15 p.m.7 views

CVE-2024-54542

An authentication issue was addressed with improved state management. This issue is fixed in Safari 18.2, macOS Sequoia 15.2, watchOS 11.2, iOS 18.2 and iPadOS 18.2. Private Browsing tabs may be accessed without authentication...

9.1CVSS5.7AI score0.00693EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/01/27 9:46 p.m.10 views

CVE-2024-54542

An authentication issue was addressed with improved state management. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, watchOS 11.2. Private Browsing tabs may be accessed without authentication...

7.1AI score0.00693EPSS
SaveExploits0References4
CVE
CVE
added 2025/01/27 9:46 p.m.118 views

CVE-2024-54542

CVE-2024-54542 affects Apple Safari Private Browsing in iOS 18.2/iPadOS 18.2 (and related Safari 18.2) where Private Browsing tabs could be accessed without authentication. The NVD/Red Hat-Reddit Apple entries confirm an authentication issue fixed by the 18.2 rollups across iOS/macOS/watchOS/tvOS...

9.1CVSS7AI score0.00693EPSS
SaveExploits0References4Affected Software5
Cvelist
Cvelist
added 2025/01/27 9:46 p.m.26 views

CVE-2024-54542

An authentication issue was addressed with improved state management. This issue is fixed in Safari 18.2, iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, watchOS 11.2. Private Browsing tabs may be accessed without authentication...

0.00693EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/01/27 12:0 a.m.6 views

Apple iOS 安全漏洞

Apple iOS is an operating system developed by Apple Inc. for mobile devices. A security vulnerability exists in Apple iOS version 18.2 and iPadOS version 18.2, which can be exploited to access the Private Browsing tab without authentication...

9.1CVSS7.2AI score0.00693EPSS
SaveExploits0References5
The Hacker News
The Hacker News
added 2025/01/22 10:31 a.m.15 views

Discover Hidden Browsing Threats: Free Risk Assessment for GenAI, Identity, Web, and SaaS Risks

As GenAI tools and SaaS platforms become a staple component in the employee toolkit, the risks associated with data exposure, identity vulnerabilities, and unmonitored browsing behavior have skyrocketed. Forward-thinking security teams are looking for security controls and strategies to address...

7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/01/17 12:0 a.m.22 views

The vulnerability of the Open Social CMS system’s Drupal module, related to deficiencies in authentication procedures, allows attackers to circumvent security restrictions and execute a forced browsing attack.

The vulnerability of the Open Social CMS system, Drupal, is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute a Forceful Browsing attack...

8.5CVSS5.6AI score0.00303EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/15 12:0 a.m.36 views

The vulnerability of the Pages Restriction Access module in the Drupal CMS system, related to deficiencies in the authentication mechanism, allows attackers to bypass security restrictions and execute a Forceful Browsing attack.

The vulnerability of the Pages Restriction Access module in the Drupal CMS system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute a Forceful Browsing attack...

5.3CVSS5.6AI score0.00303EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/14 12:0 a.m.13 views

The vulnerability of the Drupal CMS system’s “Download All Files” module, related to the lack of authentication, allows attackers to bypass security restrictions and execute a forced browsing attack.

The vulnerability of the “Download All Files” module in Drupal systems is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute a Forceful Browsing attack...

4.3CVSS5.5AI score0.00303EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/14 12:0 a.m.13 views

The vulnerability in the Advanced PWA module of the Drupal CMS system, related to incorrect authentication, allows a hacker to bypass security restrictions and execute a Forceful Browsing attack.

The vulnerability of the Advanced PWA module in Drupal’s Push Notifications CMS system is related to improper authentication. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute a Forceful Browsing attack...

9.4CVSS5.5AI score0.0037EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2025/01/09 9:15 p.m.19 views

CVE-2024-13312

Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 11.8.0 before 12.3.10, from 12.4.0 before 12.4.9...

5.3CVSS0.00303EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/09 9:15 p.m.8 views

CVE-2024-13303

Missing Authorization vulnerability in Drupal Download All Files allows Forceful Browsing.This issue affects Download All Files: from 0.0.0 before 2.0.2...

5.3CVSS0.00303EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/09 9:15 p.m.8 views

CVE-2024-13302

Incorrect Authorization vulnerability in Drupal Pages Restriction Access allows Forceful Browsing.This issue affects Pages Restriction Access: from 2.0.0 before 2.0.3...

5.3CVSS0.00303EPSS
SaveExploits0References1
Rows per page
Query Builder