Lucene search
+L

4530 matches found

OSV
OSV
added 2025/11/12 12:30 p.m.17 views

GHSA-49QV-H8PM-73PF TYPO3 Modules Extension has Improper Authentication vulnerability

Improper Authentication vulnerability in TYPO3 Extension "Modules" codingms/modules. This issue affects Extension "Modules": before 4.3.11, from 5.0.0 before 5.7.4, from 6.0.0 before 6.4.2, from 7.0.0 before 7.5.5...

8.2CVSS6.9AI score0.00431EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2025/11/12 12:30 p.m.12 views

TYPO3 Modules Extension has Improper Authentication vulnerability

Improper Authentication vulnerability in TYPO3 Extension "Modules" codingms/modules. This issue affects Extension "Modules": before 4.3.11, from 5.0.0 before 5.7.4, from 6.0.0 before 6.4.2, from 7.0.0 before 7.5.5...

8.2CVSS7AI score0.00431EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2025/11/12 12:15 p.m.15 views

CVE-2025-12998

Improper Authentication vulnerability in TYPO3 Extension "Modules" codingms/modules.This issue affects Extension "Modules": before 4.3.11, from 5.0.0 before 5.7.4, from 6.0.0 before 6.4.2, from 7.0.0 before 7.5.5...

8.2CVSS0.00431EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/11/12 11:16 a.m.10 views

EUVD-2025-124903

Improper Authentication vulnerability in TYPO3 Extension "Modules" codingms/modules.This issue affects Extension "Modules": before 4.3.11, from 5.0.0 before 5.7.4, from 6.0.0 before 6.4.2, from 7.0.0 before 7.5.5...

8.2CVSS6.4AI score0.00431EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/11/12 11:16 a.m.5 views

CVE-2025-12998 Broken Authentication in extension “Modules” (modules)

Improper Authentication vulnerability in TYPO3 Extension "Modules" codingms/modules.This issue affects Extension "Modules": before 4.3.11, from 5.0.0 before 5.7.4, from 6.0.0 before 6.4.2, from 7.0.0 before 7.5.5...

8.2CVSS6.6AI score0.00431EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/12 11:16 a.m.30 views

CVE-2025-12998

The CVE-2025-12998 entry describes an Improper Authentication vulnerability in the TYPO3 Extension "Modules" (codingms/modules). Affected versions are: before 4.3.11; 5.0.0–5.7.4; 6.0.0–6.4.2; 7.0.0–7.5.5. The root cause is insufficient verification of user credentials within the modules extensio...

8.2CVSS6.6AI score0.00431EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/12 12:00 a.m.14 views

TYPO3 Extension Modules 安全漏洞

TYPO3 Extension Modules is an extension module in the TYPO3 open source content management system. A security vulnerability exists in TYPO3 Extension Modules that stems from improper authentication. The following versions are affected: versions prior to 4.3.11, versions 5.0.0 through 5.7.4,...

8.2CVSS6.4AI score0.00431EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/12 12:00 a.m.12 views

PT-2025-46649

Name of the Vulnerable Software and Affected Versions TYPO3 Extension "Modules" versions prior to 4.3.11 TYPO3 Extension "Modules" versions 5.0.0 through 5.7.3 TYPO3 Extension "Modules" versions 6.0.0 through 6.4.1 TYPO3 Extension "Modules" versions 7.0.0 through 7.5.4 Description An improper...

8.2CVSS6.8AI score0.00431EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/11/11 3:31 p.m.9 views

EUVD-2025-84351

Improper Restriction of Excessive Authentication Attempts, Client-Side Enforcement of Server-Side Security, Reliance on Untrusted Inputs in a Security Decision vulnerability in Turkguven Software Technologies Inc. Perfektive allows Brute Force, Authentication Bypass, Functionality Bypass.This iss...

7.3CVSS6.4AI score0.00275EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/11/10 10:43 p.m.5 views

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication through the Milvus Proxy component, which skips the source ID check. An attacker can gain full administrative access to the cluster, allowing them to read, modify, or delete data and perform privileged operations...

9.8CVSS6.9AI score0.01054EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/11/10 10:43 p.m.3 views

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication through the Milvus Proxy component, which skips the source ID check. An attacker can gain full administrative access to the cluster, allowing them to read, modify, or delete data and perform privileged operations...

9.8CVSS6.8AI score0.01054EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/11/10 10:43 p.m.3 views

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication through the Milvus Proxy component, which skips the source ID check. An attacker can gain full administrative access to the cluster, allowing them to read, modify, or delete data and perform privileged operations...

9.8CVSS6.9AI score0.01054EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/11/07 6:30 p.m.11 views

EUVD-2025-38265

Improper Authentication vulnerability in GE Vernova Smallworld on Windows, Linux allows Authentication Abuse.This issue affects Smallworld: 5.3.3 and prior versions for Linux, and 5.3.4. and prior versions for Windows...

9.3CVSS6.4AI score0.00499EPSS
SaveExploits0References2
CVE
CVE
added 2025/11/07 4:28 p.m.37 views

CVE-2025-3222

CVE-2025-3222 covers GE Vernova Smallworld SWMFS, with an improper authentication flaw that enables authentication abuse. Affected are Smallworld versions: Linux < 5.3.3 and Windows

9.3CVSS6.6AI score0.00499EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/07 12:00 a.m.10 views

GE Vernova Smallworld 安全漏洞

GE Vernova Smallworld is an asset and network management software from GE Vernova, USA. A security vulnerability exists in GE Vernova Smallworld versions 5.3.3 and earlier and 5.3.4 and earlier, which stems from improper authentication and could lead to authentication abuse...

9.3CVSS6.8AI score0.00499EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/07 12:00 a.m.13 views

PT-2025-45468

Name of the Vulnerable Software and Affected Versions GE Vernova Smallworld versions prior to 5.3.3 Linux GE Vernova Smallworld versions prior to 5.3.4 Windows Description An improper authentication issue exists in GE Vernova Smallworld on Windows and Linux platforms, potentially allowing...

9.3CVSS6.8AI score0.00499EPSS
SaveExploits0References4
NVD
NVD
added 2025/11/05 11:16 p.m.17 views

CVE-2025-55278

Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptographic signature. As a result, an attacker could potentially use expired or tampered tokens to gain unauthorized...

8.1CVSS0.00186EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/05 10:44 p.m.59 views

CVE-2025-55278

CVE-2025-55278 affects HCL DevOps Loop. Concrete details across sources show improper authentication in the API authentication middleware, allowing tokens to be accepted without proper validation of expiration or cryptographic signature. Affected component is the API authentication layer; root ca...

8.1CVSS6.8AI score0.00186EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/11/05 10:44 p.m.8 views

CVE-2025-55278 HCL DevOps Loop is susceptible to an improper authentication vulnerability

Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptographic signature. As a result, an attacker could potentially use expired or tampered tokens to gain unauthorized...

8.1CVSS6.8AI score0.00186EPSS
SaveExploits0References1
OSV
OSV
added 2025/11/05 5:15 p.m.11 views

CVE-2025-20354

A vulnerability in the Java Remote Method Invocation RMI process of Cisco Unified CCX could allow an unauthenticated, remote attacker to upload arbitrary files and execute arbitrary commands with root permissions on an affected system. This vulnerability is due to improper authentication mechanis...

9.8CVSS6.1AI score0.00866EPSS
SaveExploits0References1
Rows per page
Query Builder