Lucene search
K

6 matches found

OSV
OSV
added 2025/11/18 5:16 p.m.1 views

CVE-2025-54971

An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC 7.4.0, FortiADC 7.2 all versions, FortiADC 7.1 all versions, FortiADC 7.0 all versions, FortiADC 6.2 all versions may allow an admin with read-only permission to get the external resources password vi...

6.5CVSS5.8AI score0.00048EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2023-32682

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Synapse is a Matrix protocol homeserver written in Python with the Twisted framework. In affected versions it may be possible for a deactivated user to login...

5.4CVSS5.8AI score0.00975EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/06/07 2:23 a.m.1 views

SUSE CVE-2023-32682

Synapse is a Matrix protocol homeserver written in Python with the Twisted framework. In affected versions it may be possible for a deactivated user to login when using uncommon configurations. This only applies if any of the following are true: 1. JSON Web Tokens are enabled for login via the...

5.4CVSS6.6AI score0.00975EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2023/06/06 7:15 p.m.16 views

CVE-2023-32682

Synapse is a Matrix protocol homeserver written in Python with the Twisted framework. In affected versions it may be possible for a deactivated user to login when using uncommon configurations. This only applies if any of the following are true: 1. JSON Web Tokens are enabled for login via the...

5.4CVSS6.1AI score0.00975EPSS
Exploits0References7
OSV
OSV
added 2023/06/06 4:40 p.m.17 views

GHSA-26C5-PPR8-F33P Synapse has improper checks for deactivated users during login

Impact It may be possible for a deactivated user to login when using uncommon configurations. This only applies if any of the following are true: JSON Web Tokens are enabled for login via the jwtconfig.enabled configuration setting The local password database is enabled via the...

5.4CVSS5.3AI score0.00975EPSS
Exploits0References12
OSV
OSV
added 2021/09/27 5:15 p.m.2 views

CVE-2021-40329

The Authentication API in Ping Identity PingFederate before 10.3 mishandles certain aspects of external password management...

9.8CVSS5.8AI score
Exploits0References1
Rows per page
Query Builder