Lucene search
+L

6879 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/03 12:00 a.m.•4 views

CVE-2022-43555: Missing Authentication for Critical Function

Ivanti Avalanche Printer Device Service Missing Authentication Local Privilege Escalation Vulnerability...

7.8CVSS7.3AI score0.0046EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2023/11/01 9:31 a.m.•722 views

Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager

Vulnerability Details fofa: title="BIG-IP" || i...

9.8CVSS9.6AI score0.96515EPSS
SaveExploits17
Cvelist
Cvelist
•added 2023/10/25 11:16 p.m.•35 views

CVE-2023-30969 Palantir Tiles missing authentication on API endpoints

The Palantir Tiles1 service was found to be vulnerable to an API wide issue where the service was not performing authentication/authorization on all the endpoints...

8.2CVSS8.3AI score0.00372EPSS
SaveExploits0References1
OSV
OSV
•added 2023/10/25 6:17 p.m.•18 views

CVE-2023-27375

Missing authentication in the StudentPopupDetailsContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers...

7.5CVSS5.8AI score0.00695EPSS
SaveExploits0References1
OSV
OSV
•added 2023/10/25 6:17 p.m.•14 views

CVE-2023-27261

Missing authentication in the DeleteAssignments method in IDAttend’s IDWeb application 3.1.052 and earlier allows deletion of data by unauthenticated attackers...

6.5CVSS5.8AI score0.00526EPSS
SaveExploits0References1
OSV
OSV
•added 2023/10/25 6:17 p.m.•18 views

CVE-2023-27377

Missing authentication in the StudentPopupDetailsEmergencyContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers...

7.5CVSS5.8AI score0.00695EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/25 6:17 p.m.•29 views

CVE-2023-27377

Missing authentication in the StudentPopupDetailsEmergencyContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers...

7.5CVSS7.7AI score0.00695EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/25 6:17 p.m.•20 views

CVE-2023-27256

Missing authentication in the GetLogFiles method in IDAttend’s IDWeb application 3.1.052 and earlier allows retrieval of sensitive log files by unauthenticated attackers...

5.8CVSS5.8AI score0.00559EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/25 6:17 p.m.•38 views

CVE-2023-27259

Missing authentication in the GetAssignmentsDue method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student and teacher data by unauthenticated attackers...

7.5CVSS7.7AI score0.00508EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/25 6:17 p.m.•24 views

CVE-2023-27261

Missing authentication in the DeleteAssignments method in IDAttend’s IDWeb application 3.1.052 and earlier allows deletion of data by unauthenticated attackers...

6.5CVSS5.8AI score0.00526EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/25 6:17 p.m.•37 views

CVE-2023-27375

Missing authentication in the StudentPopupDetailsContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers...

7.5CVSS7.7AI score0.00695EPSS
SaveExploits0References1
OSV
OSV
•added 2023/10/25 6:17 p.m.•14 views

CVE-2023-26570

Missing authentication in the StudentPopupDetailsTimetable method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers...

7.5CVSS5.8AI score0.00695EPSS
SaveExploits0References1
OSV
OSV
•added 2023/10/25 6:17 p.m.•16 views

CVE-2023-26579

Missing authentication in the DeleteStaff method in IDAttend’s IDWeb application 3.1.013 allows deletion of staff information by unauthenticated attackers...

5.3CVSS5.8AI score0.00526EPSS
SaveExploits0References1
OSV
OSV
•added 2023/10/25 6:17 p.m.•17 views

CVE-2023-26571

Missing authentication in the SetStudentNotes method in IDAttend’s IDWeb application 3.1.052 and earlier allows modification of student data by unauthenticated attackers...

7.5CVSS5.8AI score0.00603EPSS
SaveExploits0References1
OSV
OSV
•added 2023/10/25 6:17 p.m.•15 views

CVE-2023-26576

Missing authentication in the SearchStudentsRFID method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers...

7.5CVSS5.8AI score0.00695EPSS
SaveExploits0References1
OSV
OSV
•added 2023/10/25 6:17 p.m.•18 views

CVE-2023-26574

Missing authentication in the SearchStudents method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction sensitive student data by unauthenticated attackers...

7.5CVSS5.8AI score0.00695EPSS
SaveExploits0References1
NVD
NVD
•added 2023/10/25 6:17 p.m.•65 views

CVE-2023-26571

Missing authentication in the SetStudentNotes method in IDAttend’s IDWeb application 3.1.052 and earlier allows modification of student data by unauthenticated attackers...

7.5CVSS7.7AI score0.00603EPSS
SaveExploits0References1
OSV
OSV
•added 2023/10/25 6:17 p.m.•12 views

CVE-2023-26573

Missing authentication in the SetDB method in IDAttend’s IDWeb application 3.1.052 and earlier allows denial of service or theft of database login credentials...

9.1CVSS5.8AI score0.00724EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/25 6:17 p.m.•19 views

Authentication flaw

Missing authentication in the GetLogFiles method in IDAttend’s IDWeb application 3.1.052 and earlier allows retrieval of sensitive log files by unauthenticated attackers...

5CVSS5.5AI score0.00559EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/10/25 6:17 p.m.•26 views

Design/Logic Flaw

Missing authentication in the DeleteAssignments method in IDAttend’s IDWeb application 3.1.052 and earlier allows deletion of data by unauthenticated attackers...

6.4CVSS6.7AI score0.00526EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder