Lucene search
+L

6211 matches found

OSV
OSV
•added 2023/01/15 12:00 a.m.•30 views

CVE-2023-0311 Improper Authentication in thorsten/phpmyfaq

Improper Authentication in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

5.3CVSS5.8AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/15 12:00 a.m.•0 views

CVE-2023-0311: Improper Authentication

Improper Authentication in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

9.8CVSS5.8AI score0.00928EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/01/15 12:00 a.m.•8 views

PT-2023-16166 · Unknown · Thorsten/Phpmyfaq

Name of the Vulnerable Software and Affected Versions: thorsten/phpmyfaq versions prior to 3.1.10 Description: The issue concerns improper authentication in the thorsten/phpmyfaq GitHub repository. Recommendations: For versions prior to 3.1.10, update to version 3.1.10 or later to resolve the iss...

9.8CVSS5.6AI score0.00928EPSS
SaveExploits0References9
CVE
CVE
•added 2023/01/15 12:00 a.m.•158 views

CVE-2023-0311

CVE-2023-0311 affects phpMyFAQ (thorsten/phpmyfaq) prior to version 3.1.10 due to an improper authentication/authorization issue. The vulnerability is documented with a CVSSv3.1 base score of 9.8 (Network attack, no user interaction, high impact on confidentiality, integrity, and availability). T...

9.8CVSS7.3AI score0.00928EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/01/15 12:00 a.m.•7 views

CVE-2023-0311 Improper Authentication in thorsten/phpmyfaq

Improper Authentication in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

5.3CVSS6.8AI score0.00928EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/01/15 12:00 a.m.•46 views

CVE-2023-0311 Improper Authentication in thorsten/phpmyfaq

Improper Authentication in GitHub repository thorsten/phpmyfaq prior to 3.1.10...

5.3CVSS9.8AI score0.00928EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/01/14 1:02 a.m.•11 views

CVE-2023-22497 Netdata is vulnerable to improper authentication

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it will persist across restarts and reboots. Anyone who has...

6.5CVSS8AI score0.0068EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/01/14 1:02 a.m.•44 views

CVE-2023-22497 Netdata is vulnerable to improper authentication

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it will persist across restarts and reboots. Anyone who has...

6.5CVSS9.4AI score0.0068EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/14 12:00 a.m.•0 views

CVE-2023-22497: Improper Authentication

Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it will persist across restarts and reboots. Anyone who has...

9.1CVSS5.8AI score0.0068EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/11 12:00 a.m.•0 views

CVE-2023-0105: Improper Authentication

A flaw was found in Keycloak. This flaw allows impersonation and lockout due to the email trust not being handled correctly in Keycloak. An attacker can shadow other users with the same email and lockout or impersonate them...

6.5CVSS5.7AI score0.007EPSS
SaveExploits0References3
NVD
NVD
•added 2023/01/07 10:15 p.m.•34 views

CVE-2022-1101

A vulnerability was found in SourceCodester Royale Event Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /royalevent/userregister.php. The manipulation leads to improper authentication. The attack may be initiated remotely. The identifi...

9.8CVSS7.8AI score0.00995EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2023/01/07 9:33 p.m.•12 views

CVE-2022-1101 SourceCodester Royale Event Management System userregister.php improper authentication

A vulnerability was found in SourceCodester Royale Event Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /royalevent/userregister.php. The manipulation leads to improper authentication. The attack may be initiated remotely. The identifi...

7.5CVSS6.9AI score0.00995EPSS
SaveExploits0References2
NVD
NVD
•added 2023/01/07 1:15 p.m.•21 views

CVE-2014-125060

A vulnerability, which was classified as critical, was found in holdennb CollabCal. Affected is the function handleGet of the file calenderServer.cpp. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The patch is identified as...

9.8CVSS7.9AI score0.00951EPSS
SaveExploits0References3
Prion
Prion
•added 2023/01/07 1:15 p.m.•20 views

Authentication flaw

A vulnerability, which was classified as critical, was found in holdennb CollabCal. Affected is the function handleGet of the file calenderServer.cpp. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The patch is identified as...

7.5CVSS7.2AI score0.00951EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2023/01/07 12:44 p.m.•32 views

CVE-2014-125060 holdennb CollabCal calenderServer.cpp handleGet improper authentication

A vulnerability, which was classified as critical, was found in holdennb CollabCal. Affected is the function handleGet of the file calenderServer.cpp. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The patch is identified as...

7.5CVSS9.6AI score0.00951EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/07 12:00 a.m.•1 views

CVE-2014-125060: Improper Authentication

A vulnerability, which was classified as critical, was found in holdennb CollabCal. Affected is the function handleGet of the file calenderServer.cpp. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The patch is identified as...

9.8CVSS5.2AI score0.00951EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/01/07 12:00 a.m.•11 views

PT-2023-10130 · Holdennb · Collabcal

Name of the Vulnerable Software and Affected Versions: holdennb CollabCal affected versions not specified Description: A critical issue was found in holdennb CollabCal, affecting the handleGet function of the calenderServer.cpp file. This leads to improper authentication and can be exploited...

9.8CVSS7.4AI score0.00951EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/07 12:00 a.m.•2 views

CVE-2022-1101: Improper Authentication

A vulnerability was found in SourceCodester Royale Event Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /royalevent/userregister.php. The manipulation leads to improper authentication. The attack may be initiated remotely. The identifi...

9.8CVSS5.4AI score0.00995EPSS
SaveExploits0References3
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2023/01/06 5:57 a.m.•18 views

Digital Arts m-FILTER vulnerable to improper authentication

Overview m-FILTER provided by Digital Arts Inc. is an emaill security product. m-FILTER contains an improper authentication vulnerability CWE-287 when emails are being sent under certain conditions, and unintended emails may be sent by a remote attacker. Digital Arts Inc. states that attacks...

5.3CVSS7AI score0.00706EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2023/01/06 12:00 a.m.•36 views

Digital Arts m-FILTER 安全漏洞

Digital Arts m-FILTER is an application from Digital Arts Japan. Designed to prevent data breaches, archive entire emails, block spam, and provide greater administrative control over email policies to allow safe and secure access to email. A security vulnerability exists in Digital Arts m-FILTER...

5.3CVSS5.8AI score0.00706EPSS
SaveExploits0References4
Rows per page
Query Builder