Lucene search
+L

4138 matches found

Vulnrichment
Vulnrichment
added 2024/05/17 6:55 a.m.27 views

CVE-2023-41956 WordPress Simple Membership plugin <= 4.3.4 - Authenticated Account Takeover vulnerability

Improper Authentication vulnerability in smp7, wp.Insider Simple Membership.This issue affects Simple Membership: from n/a through 4.3.4...

8.8CVSS6.9AI score0.007EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/05/17 6:55 a.m.26 views

CVE-2023-41956 WordPress Simple Membership plugin <= 4.3.4 - Authenticated Account Takeover vulnerability

Improper Authentication vulnerability in smp7, wp.Insider Simple Membership.This issue affects Simple Membership: from n/a through 4.3.4...

8.8CVSS8.8AI score0.007EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/05/17 12:0 a.m.8 views

WordPress plugin WP Express Checkout 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

7.5CVSS8.3AI score0.00521EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/05/17 12:0 a.m.12 views

WordPress plugin Simple Membership 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. An authorization issue vulnerabilit...

8.8CVSS8.2AI score0.007EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/05/17 12:0 a.m.8 views

WordPress plugin BookIt 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

6.5CVSS8.8AI score0.00482EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/05/17 12:0 a.m.23 views

Fuji Xerox / Fujifilm Printers Multiple Vulnerabilities (Mar 2024)

Multiple Fuji Xerox / Fujifilm printers are prone to multiple vulnerabilities in the Web Based Management. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

6.1CVSS6.8AI score0.00345EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/05/12 12:0 a.m.16 views

PT-2024-10081 · Sap · Sap Netweaver As For Abap/Abap Platform

The affected software is SAP NetWeaver AS for ABAP and ABAP Platform, specifically the Internet Communication Framework. This issue arises from weak access controls, allowing attackers to access restricted information and potentially compromising application integrity, confidentiality, and...

9.9CVSS7.5AI score0.00567EPSS
SaveExploits0References23
Positive Technologies
Positive Technologies
added 2024/05/12 12:0 a.m.10 views

PT-2024-10300 · Sap · Sap Netweaver Application Server Abap +1

The affected software is SAP NetWeaver Application Server for ABAP and ABAP Platform, which allows an authenticated attacker to obtain illegitimate access to the system by exploiting improper authentication checks, resulting in privilege escalation. This can result in potential security concerns...

9.9CVSS7AI score0.00687EPSS
SaveExploits0References23
Vulnrichment
Vulnrichment
added 2024/05/10 6:55 a.m.12 views

CVE-2024-4129 Authentication bypass in Snow License Manager

Improper Authentication vulnerability in Snow Software AB Snow License Manager on Windows allows a networked attacker to perform an Authentication Bypass if Active Directory Authentication is enabled.This issue affects Snow License Manager: from 9.33.2 through 9.34.0...

8.8CVSS6.9AI score0.00479EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/05/10 6:55 a.m.28 views

CVE-2024-4129 Authentication bypass in Snow License Manager

Improper Authentication vulnerability in Snow Software AB Snow License Manager on Windows allows a networked attacker to perform an Authentication Bypass if Active Directory Authentication is enabled.This issue affects Snow License Manager: from 9.33.2 through 9.34.0...

8.8CVSS8.9AI score0.00479EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/05/10 12:0 a.m.5 views

PT-2024-29348 · Snow · Snow License Manager

Name of the Vulnerable Software and Affected Versions: Snow License Manager versions 9.33.2 through 9.34.0 Description: The issue is related to an Improper Authentication vulnerability that allows a networked attacker to bypass authentication in Snow License Manager on Windows when Active Directo...

8.8CVSS7.4AI score0.00479EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2024/05/09 12:50 p.m.135 views

Exploit for Improper Authentication in Microsoft

I. Project Objectives and References The purpose is simple: r...

9CVSS7.4AI score0.99965EPSS
SaveExploits30
OSV
OSV
added 2024/05/07 5:15 a.m.6 views

CVE-2024-20856

Improper Authentication vulnerability in Secure Folder prior to SMR May-2024 Release 1 allows physical attackers to access Secure Folder without proper authentication in a specific scenario...

4.3CVSS5.8AI score0.00294EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/07 4:28 a.m.17 views

CVE-2024-20856

Improper Authentication vulnerability in Secure Folder prior to SMR May-2024 Release 1 allows physical attackers to access Secure Folder without proper authentication in a specific scenario...

4.3CVSS7AI score0.00294EPSS
SaveExploits0References1
Veracode
Veracode
added 2024/05/06 6:27 a.m.18 views

Improper Authentication

Salt aka SaltStack is vulnerable to Improper Authentication. The vulnerability is due to a lack of authentication during routine execution, allowing authenticated users with certain privileges to bypass restrictions by nesting restricted routines within other routines...

6CVSS6.7AI score0.01515EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2024/05/06 12:0 a.m.6 views

Archer Platform 安全漏洞

Archer Platform is a modern integrated risk management solution from Archer, Inc. A security vulnerability exists prior to Archer Platform version 6 2024.04 that stems from improper authentication handling...

8.8CVSS6.9AI score0.00389EPSS
SaveExploits0References3
NVD
NVD
added 2024/05/03 3:16 a.m.24 views

CVE-2023-44447

TP-Link TL-WR902AC loginFs Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR902AC routers. Authentication is not required to exploit this vulnerability. Th...

6.5CVSS6.1AI score0.00588EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2024/05/03 3:16 a.m.5 views

CVE-2023-44447

TP-Link TL-WR902AC loginFs Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR902AC routers. Authentication is not required to exploit this vulnerability. Th...

6.5CVSS5.7AI score0.00588EPSS
SaveExploits0References2
OSV
OSV
added 2024/05/03 3:16 a.m.7 views

CVE-2023-44447

TP-Link TL-WR902AC loginFs Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR902AC routers. Authentication is not required to exploit this vulnerability. Th...

6.5CVSS5.7AI score0.00588EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/03 2:14 a.m.25 views

CVE-2023-50224 TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability...

6.5CVSS6.1AI score0.1745EPSS
SaveExploits0References2
Rows per page
Query Builder