Lucene search
+L

7204 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/23 12:00 a.m.•3 views

CVE-2023-28073: Improper Authentication

Dell BIOS contains an improper authentication vulnerability. A locally authenticated malicious user may potentially exploit this vulnerability by bypassing certain authentication mechanisms in order to elevate privileges on the system...

8.2CVSS7.3AI score0.0018EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/23 12:00 a.m.•0 views

CVE-2023-35154: Improper Authentication

Knowage is an open source analytics and business intelligence suite. Starting in version 6.0.0 and prior to version 8.1.8, an attacker can register and activate their account without having to click on the link included in the email, allowing them access to the application as a normal user. This...

7.2CVSS6.5AI score0.0038EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2023/06/21 9:30 a.m.•28 views

Apache Accumulo Improper Authentication vulnerability

Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1...

9.8CVSS7AI score0.01432EPSS
SaveExploits0References8Affected Software1
OSV
OSV
•added 2023/06/21 9:30 a.m.•47 views

GHSA-HP5W-W29M-VG63 Apache Accumulo Improper Authentication vulnerability

Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1...

9.8CVSS5.9AI score0.01432EPSS
SaveExploits0References8
NVD
NVD
•added 2023/06/21 8:15 a.m.•32 views

CVE-2023-34340

Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1...

9.8CVSS9.6AI score0.01432EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/06/21 7:01 a.m.•39 views

CVE-2023-34340 Apache Accumulo: Accumulo 2.1.0 may incorrectly validate cached credentials

Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1...

9.8AI score0.01432EPSS
SaveExploits0References2
CVE
CVE
•added 2023/06/21 7:01 a.m.•75 views

CVE-2023-34340

CVE-2023-34340 affects Apache Accumulo 2.1.0. A defect in the user authentication process may allow access despite invalid credentials, per multiple sources. Upgrade to 2.1.1 is recommended as the remediation in the public advisories (e.g., Apache Accumulo 2.1.1 release notes). The CVSS data in t...

9.8CVSS9.6AI score0.01432EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2023/06/21 7:01 a.m.•26 views

CVE-2023-34340 Apache Accumulo: Accumulo 2.1.0 may incorrectly validate cached credentials

Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1...

9.8CVSS7.2AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/21 12:00 a.m.•1 views

CVE-2023-34340: Improper Authentication

Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1...

9.8CVSS8.1AI score0.01432EPSS
SaveExploits0References2
OSV
OSV
•added 2023/06/20 12:15 p.m.•16 views

CVE-2023-3337

A vulnerability was found in PuneethReddyHC Online Shopping System Advanced 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/reg.php of the component Admin Registration. The manipulation leads to improper authentication. The atta...

9.8CVSS5.4AI score0.00693EPSS
SaveExploits0References2
NVD
NVD
•added 2023/06/20 12:15 p.m.•44 views

CVE-2023-3337

A vulnerability was found in PuneethReddyHC Online Shopping System Advanced 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/reg.php of the component Admin Registration. The manipulation leads to improper authentication. The atta...

9.8CVSS7.8AI score0.00693EPSS
SaveExploits0References2
Prion
Prion
•added 2023/06/20 12:15 p.m.•27 views

Authentication flaw

A vulnerability was found in PuneethReddyHC Online Shopping System Advanced 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/reg.php of the component Admin Registration. The manipulation leads to improper authentication. The atta...

7.5CVSS9.4AI score0.00693EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2023/06/20 12:00 p.m.•85 views

CVE-2023-3337

CVE-2023-3337 affects PuneethReddyHC Online Shopping System Advanced 1.0. Affected component: the Admin Registration function in the file /admin/reg.php, where manipulation leads to improper authentication. The vulnerability is described as exploitable remotely. Multiple connected sources corrobo...

9.8CVSS8.6AI score0.00693EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/06/20 12:00 p.m.•46 views

CVE-2023-3337 PuneethReddyHC Online Shopping System Advanced Admin Registration reg.php improper authentication

A vulnerability was found in PuneethReddyHC Online Shopping System Advanced 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/reg.php of the component Admin Registration. The manipulation leads to improper authentication. The atta...

7.5CVSS9.7AI score0.00693EPSS
SaveExploits0References2
Veracode
Veracode
•added 2023/06/20 9:14 a.m.•25 views

Improper Authentication

doorkeeper is vulnerable to Improper Authentication. The vulnerability exists because user authentication is automatically processed without consent of the user if the authentication token matches, which is out of OAuth RFC 8252 spec, allowing an attacker to impersonate a user and possibly bypass...

6.5CVSS10AI score0.00716EPSS
SaveExploits1References10Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/20 12:00 a.m.•3 views

CVE-2023-3337: Improper Authentication

A vulnerability was found in PuneethReddyHC Online Shopping System Advanced 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/reg.php of the component Admin Registration. The manipulation leads to improper authentication. The atta...

9.8CVSS6.9AI score0.00693EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/06/20 12:00 a.m.•24 views

PuneethReddyHc Online Shopping System Advanced 授权问题漏洞

PuneethReddyHc Online Shopping System Advanced is an open source online shopping system from the individual developers at Puneeth Reddy HC in India. An authorization issue vulnerability exists in PuneethReddyHC Online Shopping System Advanced version 1.0 due to unknown functionality in...

9.8CVSS7.5AI score0.00693EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/06/20 12:00 a.m.•9 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores, related to improper authentication procedures, allows attackers to bypass existing security restrictions.

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to improper authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

4.3CVSS5.5AI score0.00648EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/06/20 12:00 a.m.•12 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores, related to improper authentication procedures, allows attackers to bypass existing security restrictions.

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to improper authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

4.3CVSS5.5AI score0.00648EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/06/20 12:00 a.m.•11 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores, related to improper authentication procedures, allows attackers to bypass existing security restrictions.

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to improper authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

4.3CVSS5.5AI score0.00648EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder