Lucene search
+L

4131 matches found

NVD
NVD
added 2023/03/17 12:15 p.m.30 views

CVE-2023-1464

A vulnerability, which was classified as critical, was found in SourceCodester Medicine Tracker System 1.0. This affects an unknown part of the file Users.php?f=saveuser. The manipulation of the argument firstname/middlename/lastname/username/password leads to improper authentication. It is...

9.8CVSS7.8AI score0.00787EPSS
SaveExploits0References2
OSV
OSV
added 2023/03/17 12:15 p.m.6 views

CVE-2023-1464

A vulnerability, which was classified as critical, was found in SourceCodester Medicine Tracker System 1.0. This affects an unknown part of the file Users.php?f=saveuser. The manipulation of the argument firstname/middlename/lastname/username/password leads to improper authentication. It is...

9.8CVSS6.9AI score0.00787EPSS
SaveExploits0References2
Prion
Prion
added 2023/03/17 12:15 p.m.18 views

Authentication flaw

A vulnerability, which was classified as critical, was found in SourceCodester Medicine Tracker System 1.0. This affects an unknown part of the file Users.php?f=saveuser. The manipulation of the argument firstname/middlename/lastname/username/password leads to improper authentication. It is...

7.5CVSS9.4AI score0.00787EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/03/17 11:19 a.m.33 views

CVE-2023-1464 SourceCodester Medicine Tracker System improper authentication

A vulnerability, which was classified as critical, was found in SourceCodester Medicine Tracker System 1.0. This affects an unknown part of the file Users.php?f=saveuser. The manipulation of the argument firstname/middlename/lastname/username/password leads to improper authentication. It is...

7.5CVSS9.7AI score0.00787EPSS
SaveExploits0References2
CVE
CVE
added 2023/03/17 11:19 a.m.53 views

CVE-2023-1464

CVE-2023-1464 affects SourceCodester Medicine Tracker System 1.0, with an improper authentication flaw in the Users.php?f=save_user endpoint. The vulnerability arises from manipulation of firstname/middlename/lastname/username/password arguments, enabling remote authentication bypass. Multiple co...

9.8CVSS8.6AI score0.00787EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2023/03/17 8:15 a.m.42 views

CVE-2023-1460

A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file admin/ajax.php?action=saveuser of the component Password Change Handler. The manipulation leads to improper authentication. It is possible to...

9.8CVSS7.3AI score0.00971EPSS
SaveExploits0References2
Prion
Prion
added 2023/03/17 8:15 a.m.18 views

Authentication flaw

A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file admin/ajax.php?action=saveuser of the component Password Change Handler. The manipulation leads to improper authentication. It is possible to...

6.4CVSS9.4AI score0.00971EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/03/17 7:51 a.m.46 views

CVE-2023-1460 SourceCodester Online Pizza Ordering System Password Change improper authentication

A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file admin/ajax.php?action=saveuser of the component Password Change Handler. The manipulation leads to improper authentication. It is possible to...

6.5CVSS9.7AI score0.00971EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/03/17 12:0 a.m.8 views

PT-2023-17002 · Sourcecodester · Sourcecodester Medicine Tracker System

Name of the Vulnerable Software and Affected Versions: SourceCodester Medicine Tracker System version 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file Users.php?f=save user. The manipulation of the arguments firstname, middlename, lastname, username...

9.8CVSS7.4AI score0.00787EPSS
SaveExploits0References6
OSV
OSV
added 2023/03/16 9:15 p.m.5 views

CVE-2023-21460

Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting...

4.4CVSS5.8AI score0.00156EPSS
SaveExploits0References1
CVE
CVE
added 2023/03/16 12:0 a.m.66 views

CVE-2023-21460

CVE-2023-21460 concerns Samsung SecSettings with improper authentication prior to SMR Mar-2023 Release 1. The vulnerability enables an attacker with local access to reset the SecSettings configuration. The issue is described consistently across sources as a failure of authentication in SecSetting...

4.4CVSS4.8AI score0.00156EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/03/16 12:0 a.m.5 views

PT-2023-18229 · Unknown · Secsettings

Name of the Vulnerable Software and Affected Versions: SecSettings versions prior to SMR Mar-2023 Release 1 Description: The issue is related to improper authentication in SecSettings, allowing an attacker to reset the setting. Recommendations: For versions prior to SMR Mar-2023 Release 1, update...

4.4CVSS4.7AI score0.00156EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/03/16 12:0 a.m.7 views

SAMSUNG Mobile Devices 授权问题漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile Devices SecSettings SMR Mar-2023 Release 1 version, which stems from the presence of improper...

4.4CVSS5.1AI score0.00156EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/03/16 12:0 a.m.8 views

CVE-2023-21460

Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting...

4.4CVSS4.8AI score0.00156EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/03/16 12:0 a.m.34 views

CVE-2023-21460

Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting...

4.4CVSS5.2AI score0.00156EPSS
SaveExploits0References1
Veracode
Veracode
added 2023/03/12 11:39 p.m.13 views

Improper Authentication

WordPress is vulnerable to Improper Authentication. The vulnerability allows an attacker to obtain the email address of the user who posted a blog using the WordPress Post by Email Feature...

5.3CVSS5.3AI score0.01404EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2023/03/10 10:15 p.m.4 views

CVE-2022-44574

An improper authentication vulnerability exists in Avalanche version 6.3.x and below allows unauthenticated attacker to modify properties on specific port...

7.5CVSS5.8AI score0.64818EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/03/10 12:0 a.m.7 views

Avalanche 授权问题漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. Avalanche version 6.3.x and prior versions have a security vulnerability that stems from improper authentication. A...

7.5CVSS7.5AI score0.64818EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/03/10 12:0 a.m.7 views

IBM Financial Transaction Manager 输入验证错误漏洞

IBM Financial Transaction Manager is a financial transaction manager from International Business Machines IBM. The product is primarily used to monitor, track and report financial payments and transactions. A security vulnerability exists in IBM Financial Transaction Manager versions 3.2.0 throug...

8.8CVSS7.1AI score0.00583EPSS
SaveExploits0References3
CVE
CVE
added 2023/03/10 12:0 a.m.62 views

CVE-2022-44574

Avalanche up to version 6.3.x is affected by an improper authentication vulnerability that allows an unauthenticated attacker to modify properties on a specific port. The CVE (CVE-2022-44574) is corroborated by multiple sources (NVD, Red Hat, CNNVD, CVE list, ZDI advisory) indicating the issue ar...

7.5CVSS7.6AI score0.64818EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder