Lucene search
+L

8630 matches found

Vulnrichment
Vulnrichment
•added 2026/04/19 10:15 a.m.•14 views

CVE-2026-6569 kodcloud KodExplorer fileGet Endpoint share.class.php improper authentication

A vulnerability was identified in kodcloud KodExplorer up to 4.52. This impacts the function fileGet of the file /app/controller/share.class.php of the component fileGet Endpoint. Such manipulation of the argument fileUrl leads to improper authentication. The attack can be launched remotely. The...

7.5CVSS6.8AI score0.00654EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/19 12:00 a.m.•3 views

CVE-2026-6569: Improper Authentication

A vulnerability was identified in kodcloud KodExplorer up to 4.52. This impacts the function fileGet of the file /app/controller/share.class.php of the component fileGet Endpoint. Such manipulation of the argument fileUrl leads to improper authentication. The attack can be launched remotely. The...

7.5CVSS6.9AI score0.00654EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/19 12:00 a.m.•26 views

PT-2026-33627

A vulnerability was identified in kodcloud KodExplorer up to 4.52. This impacts the function fileGet of the file /app/controller/share.class.php of the component fileGet Endpoint. Such manipulation of the argument fileUrl leads to improper authentication. The attack can be launched remotely. The...

7.5CVSS5.5AI score0.00654EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2026/04/19 12:00 a.m.•20 views

kodcloud KodExplorer 安全漏洞

KodCloud KodExplorer is a web file manager provided by the Chinese company KodCloud. Versions of KodCloud KodExplorer 4.52 and earlier contained security vulnerabilities. These vulnerabilities stemmed from improper handling of the parameter fileUrl in files/app/controller/share.class.php, which...

7.5CVSS7.1AI score0.00654EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/18 1:00 a.m.•10 views

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication in the providerFlowSignIn process. An attacker can gain unauthorized access to another user's account by exploiting improper handling of email verification status from OAuth providers. This allows the attacker to...

9.8CVSS7.9AI score0.00905EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/04/18 1:00 a.m.•8 views

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication in the providerFlowSignIn process. An attacker can gain unauthorized access to another user's account by exploiting improper handling of email verification status from OAuth providers. This allows the attacker to...

9.8CVSS7.9AI score0.00905EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/04/18 1:00 a.m.•10 views

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication in the providerFlowSignIn process. An attacker can gain unauthorized access to another user's account by exploiting improper handling of email verification status from OAuth providers. This allows the attacker to...

9.8CVSS7.9AI score0.00905EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/04/18 1:00 a.m.•9 views

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication in the providerFlowSignIn process. An attacker can gain unauthorized access to another user's account by exploiting improper handling of email verification status from OAuth providers. This allows the attacker to...

9.8CVSS7.9AI score0.00905EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/04/17 9:25 p.m.•24 views

EUVD-2026-7736

Sentry: Improper authentication on SAML SSO process allows user identity linking...

9.1CVSS5.8AI score0.0059EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/04/17 12:31 p.m.•21 views

EUVD-2025-209521

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

6.6CVSS5.8AI score0.00368EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/17 12:31 p.m.•19 views

EUVD-2025-209523

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

6.6CVSS5.8AI score0.00354EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/17 12:16 p.m.•19 views

CVE-2025-46607

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

7.2CVSS0.00368EPSS
SaveExploits0References1
NVD
NVD
•added 2026/04/17 12:16 p.m.•21 views

CVE-2025-46641

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

6.6CVSS0.00354EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/17 11:19 a.m.•13 views

CVE-2025-46641

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

6.6CVSS6.8AI score0.00354EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/17 11:19 a.m.•42 views

CVE-2025-46641

CVE-2025-46641 affects Dell PowerProtect Data Domain running DD OS Feature Release 8.4–8.5 . The issue is an improper authentication vulnerability that could allow a high-privileged attacker with remote access to achieve unauthorized access. The NVD/NVD-derived data show a network-based attack ve...

6.6CVSS6.8AI score0.00354EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2026/04/17 11:13 a.m.•9 views

CVE-2025-46607

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

6.6CVSS5.8AI score0.00368EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/04/17 11:13 a.m.•8 views

CVE-2025-46607

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

6.6CVSS6.6AI score0.00368EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/17 11:13 a.m.•31 views

CVE-2025-46607

Dell PowerProtect Data Domain running DD OS Feature Release versions 8.4–8.5 contains an improper authentication vulnerability. A high-privileged attacker with remote access could potentially achieve unauthorized access to the system. The available documents do not specify affected versions beyon...

7.2CVSS6.6AI score0.00368EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/04/17 11:13 a.m.•57 views

CVE-2025-46607

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

6.6CVSS0.00368EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/17 12:00 a.m.•20 views

Dell PowerProtect Data Domain(Dell PowerProtect DD) 安全漏洞

Dell PowerProtect Data Domain Dell PowerProtect DD is a set of hardware devices developed by the American company Dell, used for data protection, backup, storage, and de-duplication. There are security vulnerabilities in the Dell PowerProtect Data Domain Dell PowerProtect DD versions 8.4 to 8.5...

6.6CVSS5.8AI score0.00354EPSS
SaveExploits0References1
Rows per page
Query Builder