Lucene search
K

21 matches found

EUVD
EUVD
added 2025/10/11 12:30 a.m.2 views

EUVD-2025-33792

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.8...

6.5AI score0.0007EPSS
Exploits0References2
NVD
NVD
added 2025/10/10 11:15 p.m.3 views

CVE-2025-8093

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.8...

8.8CVSS0.0007EPSS
Exploits0References1
OSV
OSV
added 2025/10/10 11:15 p.m.0 views

CVE-2025-8093

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.8...

8.8CVSS5.8AI score
Exploits0References1
CVE
CVE
added 2025/10/10 10:23 p.m.13 views

CVE-2025-8093

The vulnerability CVE-2025-8093 affects the Drupal Authenticator Login module prior to version 2.1.8. The issue is an authentication bypass via an alternate path or channel, as described across multiple sources, with CVSS v3.1 base metrics indicating high risk (8.8, Network attack vector, Privile...

8.8CVSS6.6AI score0.0007EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/10/10 12:0 a.m.2 views

Drupal Authenticator Login 安全漏洞

Drupal Authenticator Login is a Drupal community authentication login module or feature for Drupal. A security vulnerability exists in Drupal Authenticator Login version 0.0.0 through versions prior to 2.1.8 that stems from bypassing authentication using an alternate path or channel, which could...

8.8CVSS6.8AI score0.0007EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/10 12:0 a.m.1 views

PT-2025-41616

Name of the Vulnerable Software and Affected Versions Drupal Authenticator Login versions prior to 2.1.8 Description An authentication bypass issue exists in Drupal Authenticator Login. This allows attackers to bypass authentication mechanisms by utilizing an alternate path or channel...

8.8CVSS6.8AI score0.0007EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-25044

Malicious code in bioql PyPI...

9.8CVSS6.5AI score0.00083EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/17 5:25 p.m.7 views

CVE-2025-8995

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4...

9.8CVSS7.3AI score0.00083EPSS
Exploits0References1
NVD
NVD
added 2025/08/15 5:15 p.m.3 views

CVE-2025-8995

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4...

9.8CVSS0.00083EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/08/15 4:27 p.m.3 views

CVE-2025-8995 Authenticator Login - Highly critical - Access bypass - SA-CONTRIB-2025-096

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4...

6.6AI score0.00083EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2025/08/15 4:27 p.m.1 views

CVE-2025-8995

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4...

9.8CVSS5.8AI score0.00083EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/08/15 4:27 p.m.7 views

CVE-2025-8995 Authenticator Login - Highly critical - Access bypass - SA-CONTRIB-2025-096

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4...

0.00083EPSS
Exploits0References1
CVE
CVE
added 2025/08/15 4:27 p.m.19 views

CVE-2025-8995

CVE-2025-8995: Drupal Authenticator Login contains an authentication bypass vulnerability in versions prior to 2.1.4. The issue arises in the Authenticator Login module (Drupal) where an alternate path or channel can bypass authentication, effectively allowing login as a user without proper crede...

9.8CVSS6.6AI score0.00083EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/08/15 12:0 a.m.3 views

Drupal Authenticator Login 访问控制错误漏洞

Drupal Authenticator Login is a Drupal community authentication login module or feature for Drupal. A security vulnerability exists in Drupal Authenticator Login versions prior to 2.1.4 that stems from bypassing authentication using an alternate path or channel...

9.8CVSS6.9AI score0.00083EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/08/15 12:0 a.m.5 views

PT-2025-33500 · Drupal · Drupal Authenticator Login

Name of the Vulnerable Software and Affected Versions: Drupal Authenticator Login versions 0.0.0 through 2.1.3 Description: An Authentication Bypass Using an Alternate Path or Channel issue exists in Drupal Authenticator Login, allowing for Authentication Bypass. Recommendations: Update to versio...

9.8CVSS6.5AI score0.00083EPSS
Exploits0References7
Patchstack
Patchstack
added 2025/08/13 12:0 a.m.5 views

Drupal Authenticator Login module < 2.1.4 - Unauthenticated Broken Access Control vulnerability

Unauthenticated Broken Access Control vulnerability discovered by Pierre Rudloff prudloff in WordPress Module Authenticator Login versions 2.1.4...

9.8CVSS7AI score0.00083EPSS
Exploits0References1Affected Software1
Github Security Blog
Github Security Blog
added 2025/04/01 12:30 a.m.7 views

Drupal Authenticator Login Missing Authorization vulnerability

Missing Authorization vulnerability in Drupal Authenticator Login allows Forceful Browsing. This issue affects Authenticator Login: from 0.0.0 before 2.0.6...

9.8CVSS7.1AI score0.00388EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/31 9:39 p.m.10 views

CVE-2025-31681 Authenticator Login - Critical - Access bypass - SA-CONTRIB-2025-009

Missing Authorization vulnerability in Drupal Authenticator Login allows Forceful Browsing.This issue affects Authenticator Login: from 0.0.0 before 2.0.6...

9.5AI score0.00388EPSS
Exploits0References1
CVE
CVE
added 2025/03/31 9:39 p.m.58 views

CVE-2025-31681

The CVE-2025-31681 entry covers Drupal Authenticator Login (versions 0.0.0 through 2.0.5) with a Missing Authorization vulnerability that enables Forceful Browsing. Affected component is the Drupal Authenticator Login module; root cause is lack of proper authorization checks when accessing user-p...

9.8CVSS6.6AI score0.00388EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/03/31 12:0 a.m.1 views

PT-2025-13845 · Drupal · Drupal Authenticator Login

Name of the Vulnerable Software and Affected Versions: Drupal Authenticator Login versions 0.0.0 through 2.0.5 Description: The issue is related to a Missing Authorization vulnerability in Drupal Authenticator Login, which allows Forceful Browsing. Recommendations: For versions 0.0.0 through 2.0....

9.8CVSS6.3AI score0.00388EPSS
Exploits0References7
Rows per page
Query Builder