Lucene search
+L

9648 matches found

Positive Technologies
Positive Technologies
•added 2023/11/03 12:00 a.m.•19 views

PT-2023-32436 · Teamamaze · Amazefileutilities

Name of the Vulnerable Software and Affected Versions: teamamaze/amazefileutilities versions prior to 1.91 Description: The issue is related to improper authorization. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

8.2CVSS8AI score0.00265EPSS
SaveExploits1References5
VulnCheck KEV
VulnCheck KEV
•added 2023/11/02 12:00 a.m.•12 views

VulnCheck KEV: CVE-2023-22518

Atlassian Confluence Data Center and Server contain an improper authorization vulnerability that can result in significant data loss when exploited by an unauthenticated attacker. There is no impact on confidentiality since the attacker cannot exfiltrate any data...

10CVSS8.4AI score0.99999EPSS
SaveIn wildExploits14References951
NVD
NVD
•added 2023/10/31 3:15 p.m.•41 views

CVE-2023-22518

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an unauthenticated attacker to reset Confluence and create a Confluence instance administrator account. Using this account, an attacker can then perfo...

10CVSS9.7AI score0.99999EPSS
SaveExploits14References4
CVE
CVE
•added 2023/10/31 2:30 p.m.•673 views

CVE-2023-22518

CVE-2023-22518 (Confluence DC/Server): An improper authorization vulnerability allowed an unauthenticated attacker to reset Confluence and create an instance administrator, enabling full admin control and potential data loss. Affected products include Confluence Data Center (all versions) and Con...

10CVSS8.2AI score0.99999EPSS
SaveIn wildExploits14References4Affected Software1
GithubExploit
GithubExploit
•added 2023/10/31 5:35 a.m.•199 views

Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center

CVE-2023-22518 Improper Authorization Vulnerability in Conflue...

10CVSS8.3AI score0.99999EPSS
SaveExploits51
GithubExploit
GithubExploit
•added 2023/10/31 5:35 a.m.•215 views

Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center

CVE-2023-22518 Improper Authorization Vulnerability in Conflue...

10CVSS8.3AI score0.99999EPSS
SaveExploits51
CNNVD
CNNVD
•added 2023/10/31 12:00 a.m.•17 views

inure Security Vulnerabilities

inure is an elegant application manager for Android by the individual developer Hamza Rizwan. A security vulnerability exists in versions prior to inure Build95 that stems from improper application authorization and allows opening arbitrary files...

5.1CVSS6.8AI score0.00251EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/10/31 12:00 a.m.•15 views

Atlassian Confluence Data Center and Confluence Server Security Vulnerabilities

Atlassian Confluence Server is the server version of Atlassian Australia's suite of collaboration software with enterprise knowledge management capabilities and support for building enterprise WiKi. A security vulnerability exists in Atlassian Confluence Data Center and Confluence Server that ste...

10CVSS8.4AI score0.99999EPSS
SaveExploits14References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/31 12:00 a.m.•4 views

CVE-2023-22518: Incorrect Authorization

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an unauthenticated attacker to reset Confluence and create a Confluence instance administrator account. Using this account, an attacker can then perfo...

10CVSS8.2AI score0.99999EPSS
SaveExploits14References2
attackerkb
attackerkb
•added 2023/10/31 12:00 a.m.•58 views

CVE-2023-22518

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an unauthenticated attacker to reset Confluence and create a Confluence instance administrator account. Using this account, an attacker can then perfo...

10CVSS8.3AI score0.99999EPSS
SaveIn wildExploits14References9
Metasploit
Metasploit
•added 2023/10/31 12:00 a.m.•552 views

Atlassian Confluence Unauth JSON setup-restore Improper Authorization leading to RCE (CVE-2023-22518)

This Improper Authorization vulnerability allows an unauthenticated attacker to reset Confluence and create a Confluence instance administrator account. Using this account, an attacker can then perform all administrative actions that are available to Confluence instance administrator. This module...

10CVSS8.4AI score0.99999EPSS
SaveExploits14
Tenable Nessus
Tenable Nessus
•added 2023/10/31 12:00 a.m.•85 views

Atlassian Confluence < 7.19.16 / 8.x < 8.3.4 / 8.4.x < 8.4.4 / 8.5.x < 8.5.3 / 8.6.x < 8.6.1 (CONFSERVER-93142)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-93142 advisory. - Improper Authorization in Confluence Data Center and Server CVE-2023-22518 Note that Nessus has not tested for this issue but has instead relied...

10CVSS8.3AI score0.99999EPSS
SaveExploits14References3
osv_cve
osv_cve
•added 2023/10/25 6:17 p.m.•18 views

CVE-2023-42491

EisBaer Scada - CWE-285: Improper Authorization...

9.8CVSS7.3AI score0.00638EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/25 6:17 p.m.•25 views

Authorization

EisBaer Scada - CWE-285: Improper Authorization...

7.5CVSS9.4AI score0.00638EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/25 2:34 p.m.•23 views

CVE-2023-42491 EisBaer Scada - CWE-285: Improper Authorization

EisBaer Scada - CWE-285: Improper Authorization...

8.8CVSS7AI score0.00638EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/10/25 2:34 p.m.•36 views

CVE-2023-42491 EisBaer Scada - CWE-285: Improper Authorization

EisBaer Scada - CWE-285: Improper Authorization...

8.8CVSS9.7AI score0.00638EPSS
SaveExploits0References1
CVE
CVE
•added 2023/10/25 2:34 p.m.•65 views

CVE-2023-42491

CVE-2023-42491 concerns EisBaer Scada with an issue described as CWE-285: Improper Authorization. The NVD entry lists a network-based, high-impact vulnerability (CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H; base score 9.8, critical). The CNA score also indicates a network vector with low attack...

9.8CVSS9.2AI score0.00638EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2023/10/25 12:00 a.m.•19 views

Alexander Maier EisBaer Scada Authorization Issue Vulnerability

Alexander Maier EisBaer Scada is a visual reality display and control program created on Windows operating systems by Alexander Maier of Germany. Alexander Maier EisBaer Scada suffers from an authorization issue vulnerability that arises from improper authorization...

9.8CVSS6.8AI score0.00638EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/25 12:00 a.m.•6 views

CVE-2023-42491: Improper Authorization

EisBaer Scada - CWE-285: Improper Authorization...

9.8CVSS8.2AI score0.00638EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/20 12:00 a.m.•7 views

CVE-2021-4335: Improper Authorization

The Fancy Product Designer plugin for WordPress is vulnerable to unauthorized access to data and modification of plugin settings due to a missing capability check on multiple AJAX functions in versions up to, and including, 4.6.9. This makes it possible for authenticated attackers with...

6.3CVSS6.7AI score0.00401EPSS
SaveExploits0References2
Rows per page
Query Builder