Lucene search
K

93 matches found

Cvelist
Cvelist
added 2026/04/17 8:38 a.m.26 views

CVE-2025-15624 Plaintext Storage of a Password in Sparx Pro Cloud Server.

Plaintext Storage of a Password vulnerability in Sparx Systems Pty Ltd. Sparx Pro Cloud Server. In a setup where OpenID is used as the primary method of authentication to authenticate to Sparx EA, Pro Cloud Server creates local passwords to the users and stores them in plaintext...

9.3CVSS0.00018EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/17 8:38 a.m.1 views

CVE-2025-15624 Plaintext Storage of a Password in Sparx Pro Cloud Server.

Plaintext Storage of a Password vulnerability in Sparx Systems Pty Ltd. Sparx Pro Cloud Server. In a setup where OpenID is used as the primary method of authentication to authenticate to Sparx EA, Pro Cloud Server creates local passwords to the users and stores them in plaintext...

9.3CVSS5.8AI score0.00018EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/17 12:0 a.m.1 views

PT-2026-33425

Name of the Vulnerable Software and Affected Versions Sparx Pro Cloud Server affected versions not specified Description In configurations where OpenID is utilized as the primary authentication method for Sparx EA, the software creates local passwords for users and stores them in plaintext...

9.3CVSS5.8AI score0.00018EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2026/02/07 1:13 p.m.2 views

CVE-2026-24916

Identity authentication bypass vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

5.9CVSS5.3AI score0.00004EPSS
Exploits0References1
NVD
NVD
added 2026/02/06 9:15 a.m.2 views

CVE-2026-24916

Identity authentication bypass vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

5.9CVSS0.00004EPSS
Exploits0References1
OSV
OSV
added 2026/02/06 9:15 a.m.1 views

CVE-2026-24916

Identity authentication bypass vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

5.5CVSS5.8AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/06 8:48 a.m.2 views

CVE-2026-24916

Identity authentication bypass vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

5.9CVSS5.3AI score0.00004EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/06 8:48 a.m.20 views

CVE-2026-24916

Identity authentication bypass vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

5.9CVSS0.00004EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/06 8:48 a.m.3 views

CVE-2026-24916

Identity authentication bypass vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

5.9CVSS5.3AI score0.00004EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2026/02/06 8:48 a.m.2 views

EUVD-2026-5671

Identity authentication bypass vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

5.9CVSS5.3AI score0.00004EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/06 12:0 a.m.2 views

PT-2026-6706

Name of the Vulnerable Software and Affected Versions versions prior to 2026-24916 Description An identity authentication bypass issue exists in the window module. Successful exploitation could compromise service confidentiality. Recommendations At the moment, there is no information about a newe...

5.9CVSS5.4AI score0.00004EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 11:28 a.m.19 views

CVE-2021-33044

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets...

10CVSS7.3AI score0.94269EPSS
Exploits10References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:43 a.m.8 views

CVE-2022-33162

IBM Security Directory Integrator 7.2.0 and Security Verify Directory Integrator 10.0.0 does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources, at the privilege level of a standard unprivileged user. IBM X-Force I...

9.8CVSS6.7AI score0.00124EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/11/29 3:4 a.m.5 views

CVE-2025-58305

Identity authentication bypass vulnerability in the Gallery app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

6.2CVSS7.1AI score0.0001EPSS
Exploits0References1
OSV
OSV
added 2025/11/28 4:16 a.m.0 views

CVE-2025-58305

Identity authentication bypass vulnerability in the Gallery app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

5.5CVSS5.8AI score
Exploits0References1
EUVD
EUVD
added 2025/11/28 2:59 a.m.3 views

EUVD-2025-199858

Identity authentication bypass vulnerability in the Gallery app. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

6.2CVSS6.5AI score0.0001EPSS
Exploits0References2
CVE
CVE
added 2025/11/28 2:59 a.m.6 views

CVE-2025-58305

Huawei HarmonyOS contains an authentication bypass vulnerability in the Gallery app (CVE-2025-58305). Affected: HarmonyOS Gallery app; Root cause described as authentication bypass within the Gallery component. Impact: confidentiality of service could be compromised if exploited. Exploit details,...

6.2CVSS6.7AI score0.0001EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/28 12:0 a.m.4 views

PT-2025-48307

Name of the Vulnerable Software and Affected Versions Gallery app affected versions not specified Description An identity authentication bypass issue exists in the Gallery app. Successful exploitation could compromise service confidentiality. Recommendations At the moment, there is no information...

6.2CVSS6.5AI score0.0001EPSS
Exploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/20 8:26 a.m.4 views

Malicious code in identity-authn-core-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db734e79e178dd70b53bb814581620da1604a06da4967555160d7dfd0d14e0c5 The package identity-authn-core-ui was found to contain malicious code. Source: ossf-package-analysis...

6.9AI score
Exploits0
EUVD
EUVD
added 2025/11/20 8:26 a.m.2 views

EUVD-2025-198288

Malicious code in identity-authn-core-ui npm...

6.6AI score
Exploits0
Rows per page
Query Builder