Lucene search
+L

8849 matches found

RedhatCVE
RedhatCVE
•added 2025/05/11 10:13 p.m.•46 views

CVE-2025-4494

A vulnerability, which was classified as critical, was found in JAdmin-JAVA JAdmin 1.0. Affected is the function toLogin of the file NoNeedLoginController.java of the component Admin Backend. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

7.5CVSS6.9AI score0.0078EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/10 10:10 a.m.•31 views

CVE-2025-41450

Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2...

8.2CVSS6.9AI score0.0035EPSS
SaveExploits2References3
NVD
NVD
•added 2025/05/09 10:15 p.m.•26 views

CVE-2025-4494

A vulnerability, which was classified as critical, was found in JAdmin-JAVA JAdmin 1.0. Affected is the function toLogin of the file NoNeedLoginController.java of the component Admin Backend. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

9.8CVSS0.0078EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/05/09 10:15 p.m.•24 views

CVE-2025-4494

A vulnerability, which was classified as critical, was found in JAdmin-JAVA JAdmin 1.0. Affected is the function toLogin of the file NoNeedLoginController.java of the component Admin Backend. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

9.8CVSS5.3AI score0.0078EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/05/09 9:31 p.m.•46 views

CVE-2025-4494 JAdmin-JAVA JAdmin Admin Backend NoNeedLoginController.java toLogin improper authentication

A vulnerability, which was classified as critical, was found in JAdmin-JAVA JAdmin 1.0. Affected is the function toLogin of the file NoNeedLoginController.java of the component Admin Backend. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

7.5CVSS0.0078EPSS
SaveExploits1References5
CVE
CVE
•added 2025/05/09 9:31 p.m.•78 views

CVE-2025-4494

CVE-2025-4494 affects JAdmin-JAVA JAdmin 1.0, specifically the toLogin function in NoNeedLoginController.java within Admin Backend. The vulnerability enables improper authentication and can be exploited remotely; public exploits have been disclosed. Connected sources corroborate the issue and des...

9.8CVSS7AI score0.0078EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/05/09 9:31 p.m.•14 views

CVE-2025-4494 JAdmin-JAVA JAdmin Admin Backend NoNeedLoginController.java toLogin improper authentication

A vulnerability, which was classified as critical, was found in JAdmin-JAVA JAdmin 1.0. Affected is the function toLogin of the file NoNeedLoginController.java of the component Admin Backend. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

7.5CVSS7.2AI score0.0078EPSS
SaveExploits1References5
Mend
Mend
•added 2025/05/09 9:31 p.m.•10 views

CVE-2025-4494

A vulnerability, which was classified as critical, was found in JAdmin-JAVA JAdmin 1.0. Affected is the function toLogin of the file NoNeedLoginController.java of the component Admin Backend. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

9.8CVSS0.0078EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/05/09 9:44 a.m.•17 views

CVE-2025-20973

Improper authentication in Secure Folder prior to version 1.8.12.0 in Android 13, and 1.9.21.00 in Android 14 allows physical attackers to reset the lock type of Secure Folder...

5.4CVSS6.9AI score0.0022EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/09 12:00 a.m.•21 views

PT-2025-20601

Name of the Vulnerable Software and Affected Versions JAdmin-JAVA JAdmin version 1.0 Description A critical vulnerability was found in the function toLogin of the file NoNeedLoginController.java of the component Admin Backend. The manipulation leads to improper authentication. It is possible to...

9.8CVSS7.1AI score0.0078EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/09 12:00 a.m.•11 views

CVE-2025-4494: Improper Authentication

A vulnerability, which was classified as critical, was found in JAdmin-JAVA JAdmin 1.0. Affected is the function toLogin of the file NoNeedLoginController.java of the component Admin Backend. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The...

9.8CVSS6.8AI score0.0078EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/08 4:05 p.m.•31 views

CVE-2025-22477

Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges...

8.8CVSS7.1AI score0.00306EPSS
SaveExploits0References3
NVD
NVD
•added 2025/05/08 10:15 a.m.•46 views

CVE-2025-41450

Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2...

8.2CVSS0.0035EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2025/05/08 9:41 a.m.•43 views

CVE-2025-41450 Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2

Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2...

8.2CVSS0.0035EPSS
SaveExploits2References1
Veracode
Veracode
•added 2025/05/08 3:04 a.m.•30 views

Improper Authentication Bypass

github.com/hashicorp/vault is vulnerable to improper authentication bypass. The vulnerability is due to the Azure Auth method not correctly validating claims in Azure-issued tokens, allowing potential bypass of the boundlocations parameter on login...

8.8CVSS6.9AI score0.00438EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
•added 2025/05/08 12:00 a.m.•20 views

Danfoss AK-SM 8xxA Series 安全漏洞

Danfoss AK-SM 8xxA Series is a series of industrial-grade intelligent pressure sensors from Danfoss, Denmark, designed for refrigeration and air conditioning systems and supporting Modbus communication. A security vulnerability exists in Danfoss AK-SM 8xxA Series versions prior to 4.2, which stem...

8.2CVSS6.6AI score0.0035EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/08 12:00 a.m.•8 views

CVE-2024-11186: Improper Authentication

On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on managed EOS devices than intended. This advisory impacts the Arista CloudVision Portal products when run on-premise. It does not impact CloudVision...

10CVSS5.7AI score0.00784EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/08 12:00 a.m.•12 views

CVE-2025-41450: Authentication Bypass by Primary Weakness

Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2...

8.2CVSS5.8AI score0.0035EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2025/05/07 8:24 a.m.•9 views

CVE-2025-20973

Improper authentication in Secure Folder prior to version 1.8.12.0 in Android 13, and 1.9.21.00 in Android 14 allows physical attackers to reset the lock type of Secure Folder...

5.4CVSS5.4AI score0.0022EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/07 8:24 a.m.•77 views

CVE-2025-20973

CVE-2025-20973 corresponds to an improper authentication issue in Samsung Secure Folder. Affected versions are prior to 1.8.12.0 on Android 13 and prior to 1.9.21.00 on Android 14. This vulnerability allows a physical attacker to reset the Secure Folder lock type. Remediation is to update to 1.8....

5.4CVSS5.4AI score0.0022EPSS
SaveExploits0References1
Rows per page
Query Builder