CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

RedhatCVE•added 2025/05/23 4:12 a.m.•20 views

CVE-2023-39846

An issue in Konga v0.14.9 allows attackers to bypass authentication via a crafted JWT token...

9.8CVSS7AI score0.00897EPSS

SaveExploits1References1

NVD•added 2023/11/02 10:15 p.m.•38 views

CVE-2023-31579

Dromara Lamp-Cloud before v3.8.1 was discovered to use a hardcoded cryptographic key when creating and verifying a Json Web Token. This vulnerability allows attackers to authenticate to the application via a crafted JWT token...

9.8CVSS9.2AI score0.00681EPSS

SaveExploits0References2

Prion•added 2023/10/25 6:17 p.m.•26 views

Design/Logic Flaw

light-oauth2 before version 2.1.27 obtains the public key without any verification. This could allow attackers to authenticate to the application with a crafted JWT token...

2.6CVSS5.6AI score0.0055EPSS

SaveExploits1References2Affected Software1

Vulnrichment•added 2023/08/16 12:0 a.m.•13 views

CVE-2023-39846

An issue in Konga v0.14.9 allows attackers to bypass authentication via a crafted JWT token...

7.2AI score0.00897EPSS

SaveExploits1References1

Cvelist•added 2023/08/16 12:0 a.m.•24 views

CVE-2023-39846

An issue in Konga v0.14.9 allows attackers to bypass authentication via a crafted JWT token...

9.6AI score0.00897EPSS

SaveExploits1References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by