Lucene search
+L

25 matches found

Veracode
Veracode
•added 2026/05/30 8:55 a.m.•28 views

Missing Authorization

Drupal Authenticator Login is vulnerable to Missing Authorization. The vulnerability is due to improper authorization checks in the Authenticator Login component, which allows an attacker to perform forceful browsing and access restricted functionality or resources without proper authorization...

9.8CVSS6AI score0.00426EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2025/10/11 12:30 a.m.•18 views

EUVD-2025-33792

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.8...

6.5AI score0.00346EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/10 11:15 p.m.•26 views

CVE-2025-8093

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.8...

8.8CVSS0.00346EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/10 10:23 p.m.•11 views

CVE-2025-8093 Authenticator Login - Moderately critical - Access bypass - SA-CONTRIB-2025-098

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.8...

8.8CVSS5.9AI score
SaveExploits0References5
CVE
CVE
•added 2025/10/10 10:23 p.m.•41 views

CVE-2025-8093

The Drupal Authenticator Login module (versions prior to 2.1.8 ) is vulnerable to an authentication bypass using an alternate path or channel. The root cause is that the module failed to protect all possible login paths provided by core modules. This vulnerability could allow attackers to bypass ...

8.8CVSS5.8AI score0.00346EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/10/10 12:00 a.m.•25 views

PT-2025-41616

Name of the Vulnerable Software and Affected Versions Drupal Authenticator Login versions prior to 2.1.8 Description An authentication bypass issue exists in Drupal Authenticator Login. This allows attackers to bypass authentication mechanisms by utilizing an alternate path or channel...

8.8CVSS6.8AI score0.00346EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/10/10 12:00 a.m.•17 views

Drupal Authenticator Login 安全漏洞

Drupal Authenticator Login is a Drupal community authentication login module or feature for Drupal. A security vulnerability exists in Drupal Authenticator Login version 0.0.0 through versions prior to 2.1.8 that stems from bypassing authentication using an alternate path or channel, which could...

8.8CVSS6.8AI score0.00346EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/10 12:00 a.m.•3 views

CVE-2025-8093: Authentication Bypass Using an Alternate Path or Channel

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.8...

8.8CVSS5.8AI score0.00346EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2025-25044

Malicious code in bioql PyPI...

9.8CVSS6.5AI score0.00523EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/17 5:25 p.m.•40 views

CVE-2025-8995

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4...

9.8CVSS7.3AI score0.00523EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/15 5:15 p.m.•18 views

CVE-2025-8995

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4...

9.8CVSS0.00523EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/15 4:27 p.m.•26 views

CVE-2025-8995 Authenticator Login - Highly critical - Access bypass - SA-CONTRIB-2025-096

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4...

0.00523EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/15 4:27 p.m.•43 views

CVE-2025-8995

The Drupal Authenticator Login module (versions 0.0.0 through 2.1.3 ) is vulnerable to an Authentication Bypass Using an Alternate Path or Channel . The root cause is that the module fails to sufficiently validate authentication under specific conditions when using AJAX callbacks to handle the au...

9.8CVSS6.6AI score0.00523EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/08/15 4:27 p.m.•5 views

CVE-2025-8995 Authenticator Login - Highly critical - Access bypass - SA-CONTRIB-2025-096

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4...

6.6AI score0.00523EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/08/15 4:27 p.m.•6 views

CVE-2025-8995

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4...

9.8CVSS5.8AI score0.00523EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/08/15 12:00 a.m.•16 views

Drupal Authenticator Login 访问控制错误漏洞

Drupal Authenticator Login is a Drupal community authentication login module or feature for Drupal. A security vulnerability exists in Drupal Authenticator Login versions prior to 2.1.4 that stems from bypassing authentication using an alternate path or channel...

9.8CVSS6.9AI score0.00523EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/08/15 12:00 a.m.•20 views

PT-2025-33500 · Drupal · Drupal Authenticator Login

Name of the Vulnerable Software and Affected Versions: Drupal Authenticator Login versions 0.0.0 through 2.1.3 Description: An Authentication Bypass Using an Alternate Path or Channel issue exists in Drupal Authenticator Login, allowing for Authentication Bypass. Recommendations: Update to versio...

9.8CVSS6.5AI score0.00523EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/15 12:00 a.m.•1 views

CVE-2025-8995: Authentication Bypass Using an Alternate Path or Channel

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4...

9.8CVSS5.8AI score0.00523EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/08/13 12:00 a.m.•16 views

Drupal Authenticator Login module < 2.1.4 - Unauthenticated Broken Access Control vulnerability

Unauthenticated Broken Access Control vulnerability discovered by Pierre Rudloff prudloff in WordPress Module Authenticator Login versions 2.1.4...

9.8CVSS7AI score0.00523EPSS
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2025/04/01 12:30 a.m.•26 views

Drupal Authenticator Login Missing Authorization vulnerability

Missing Authorization vulnerability in Drupal Authenticator Login allows Forceful Browsing. This issue affects Authenticator Login: from 0.0.0 before 2.0.6...

9.8CVSS7.1AI score0.00426EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder