Lucene search
+L

4126 matches found

Positive Technologies
Positive Technologies
added 2026/04/19 12:0 a.m.15 views

PT-2026-33627

A vulnerability was identified in kodcloud KodExplorer up to 4.52. This impacts the function fileGet of the file /app/controller/share.class.php of the component fileGet Endpoint. Such manipulation of the argument fileUrl leads to improper authentication. The attack can be launched remotely. The...

7.5CVSS5.5AI score0.00414EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2026/04/19 12:0 a.m.11 views

kodcloud KodExplorer 安全漏洞

KodCloud KodExplorer is a web file manager provided by the Chinese company KodCloud. Versions of KodCloud KodExplorer 4.52 and earlier contained security vulnerabilities. These vulnerabilities stemmed from improper handling of the parameter fileUrl in files/app/controller/share.class.php, which...

7.5CVSS7.1AI score0.00414EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/04/18 1:0 a.m.5 views

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication in the providerFlowSignIn process. An attacker can gain unauthorized access to another user's account by exploiting improper handling of email verification status from OAuth providers. This allows the attacker to...

9.8CVSS5.8AI score0.00809EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/04/18 1:0 a.m.6 views

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication in the providerFlowSignIn process. An attacker can gain unauthorized access to another user's account by exploiting improper handling of email verification status from OAuth providers. This allows the attacker to...

9.8CVSS5.8AI score0.00809EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/04/18 1:0 a.m.4 views

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication in the providerFlowSignIn process. An attacker can gain unauthorized access to another user's account by exploiting improper handling of email verification status from OAuth providers. This allows the attacker to...

9.8CVSS5.8AI score0.00809EPSS
SaveExploits1References2
Snyk
Snyk
added 2026/04/18 1:0 a.m.8 views

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication in the providerFlowSignIn process. An attacker can gain unauthorized access to another user's account by exploiting improper handling of email verification status from OAuth providers. This allows the attacker to...

9.8CVSS5.8AI score0.00809EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/04/17 9:25 p.m.11 views

EUVD-2026-7736

Sentry: Improper authentication on SAML SSO process allows user identity linking...

9.1CVSS5.8AI score0.00435EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/04/17 12:31 p.m.5 views

EUVD-2025-209523

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

6.6CVSS5.8AI score0.00354EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/17 12:31 p.m.6 views

EUVD-2025-209521

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

6.6CVSS5.8AI score0.00368EPSS
SaveExploits0References2
NVD
NVD
added 2026/04/17 12:16 p.m.6 views

CVE-2025-46607

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

7.2CVSS0.00368EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/17 12:16 p.m.9 views

CVE-2025-46641

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

6.6CVSS0.00354EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/17 11:19 a.m.24 views

CVE-2025-46641

CVE-2025-46641 affects Dell PowerProtect Data Domain running DD OS Feature Release 8.4–8.5 . The issue is an improper authentication vulnerability that could allow a high-privileged attacker with remote access to achieve unauthorized access. The NVD/NVD-derived data show a network-based attack ve...

6.6CVSS5.8AI score0.00354EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/17 11:19 a.m.6 views

CVE-2025-46641

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

6.6CVSS5.8AI score0.00354EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/17 11:13 a.m.41 views

CVE-2025-46607

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

6.6CVSS0.00368EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/17 11:13 a.m.3 views

CVE-2025-46607

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

6.6CVSS5.8AI score0.00368EPSS
SaveExploits0References2
CVE
CVE
added 2026/04/17 11:13 a.m.16 views

CVE-2025-46607

Dell PowerProtect Data Domain running DD OS Feature Release versions 8.4–8.5 contains an improper authentication vulnerability. A high-privileged attacker with remote access could potentially achieve unauthorized access to the system. The available documents do not specify affected versions beyon...

7.2CVSS5.8AI score0.00368EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/17 11:13 a.m.3 views

CVE-2025-46607

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...

6.6CVSS5.8AI score0.00368EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/17 12:0 a.m.12 views

Dell PowerProtect Data Domain(Dell PowerProtect DD) 安全漏洞

Dell PowerProtect Data Domain Dell PowerProtect DD is a set of hardware devices developed by the American company Dell, used for data protection, backup, storage, and de-duplication. There are security vulnerabilities in the Dell PowerProtect Data Domain Dell PowerProtect DD versions 8.4 to 8.5...

6.6CVSS5.8AI score0.00354EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/17 12:0 a.m.11 views

PT-2026-33441

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain with Data Domain Operating System DD OS versions 8.4 through 8.5 Description An improper authentication issue exists where a high privileged attacker with remote access could potentially gain unauthorized access...

7.2CVSS5.8AI score0.00368EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/04/17 12:0 a.m.15 views

PT-2026-33442

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain with Data Domain Operating System DD OS versions 8.4 through 8.5 Description An improper authentication issue exists where a high privileged attacker with remote access could potentially gain unauthorized access...

6.6CVSS5.8AI score0.00354EPSS
SaveExploits0References3
Rows per page
Query Builder