Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

3616 matches found

NVD
NVD•added 2023/04/20 4:15 p.m.•41 views

CVE-2023-27350

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. ...

9.8CVSS9.9AI score0.99999EPSS
SaveExploits24References8
NVD
NVD•added 2023/04/20 4:15 p.m.•28 views

CVE-2023-27351

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper...

8.2CVSS8AI score0.78052EPSS
SaveExploits2References3
OSV
OSV•added 2023/04/20 4:15 p.m.•12 views

CVE-2023-27351

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper...

7.5CVSS7.5AI score0.78052EPSS
SaveExploits2References2
Prion
Prion•added 2023/04/20 4:15 p.m.•21 views

Authentication flaw

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper...

6.4CVSS7.7AI score0.78052EPSS
SaveExploits2References2Affected Software2
Prion
Prion•added 2023/04/20 4:15 p.m.•41 views

Authentication flaw

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. ...

7.5CVSS9.8AI score0.99999EPSS
SaveExploits24References7Affected Software2
CVE
CVE•added 2023/04/20 12:00 a.m.•1275 views

CVE-2023-27350

CVE-2023-27350 affects PaperCut MF/NG and allows unauthenticated remote code execution by exploiting improper access control in SetupCompleted, enabling code execution as SYSTEM. Public PoCs and exploits exist (e.g., GitHub and Exploit-DB entries) targeting PaperCut MF/NG 8.0+ and various 22.x bu...

9.8CVSS9.1AI score0.99999EPSS
SaveIn wildExploits24References8Affected Software2
Cvelist
Cvelist•added 2023/04/20 12:00 a.m.•67 views

CVE-2023-27351

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper...

8.2CVSS8.4AI score0.78052EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment•added 2023/04/20 12:00 a.m.•6 views

CVE-2023-27350

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. ...

9.8CVSS10AI score0.99999EPSS
SaveExploits24References7
Vulnrichment
Vulnrichment•added 2023/04/20 12:00 a.m.•11 views

CVE-2023-27351

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper...

8.2CVSS7.8AI score0.78052EPSS
SaveExploits2References2
CVE
CVE•added 2023/04/20 12:00 a.m.•311 views

CVE-2023-27351

PaperCut NG 22.0.5 (Build 63914) contains an authentication bypass vulnerability in the SecurityRequestFilter class due to improper implementation of the authentication algorithm. This allows remote attackers to bypass authentication without user interaction. Evidence across multiple sources (ZDI...

8.2CVSS9.2AI score0.78052EPSS
SaveIn wildExploits2References3Affected Software2
ATTACKERKB
ATTACKERKB•added 2023/04/20 12:00 a.m.•153 views

CVE-2023-27350

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. ...

9.8CVSS10AI score0.99999EPSS
SaveIn wildExploits26References11
NVD
NVD•added 2023/04/16 2:15 a.m.•33 views

CVE-2022-37186

In LemonLDAP::NG before 2.0.15. some sessions are not deleted when they are supposed to be deleted according to the timeoutActivity setting. This can occur when there are at least two servers, and a session is manually removed before the time at which it would have been removed automatically...

5.9CVSS5.7AI score0.00731EPSS
SaveExploits1References4
OSV
OSV•added 2023/04/16 2:15 a.m.•5 views

DEBIAN-CVE-2022-37186

In LemonLDAP::NG before 2.0.15. some sessions are not deleted when they are supposed to be deleted according to the timeoutActivity setting. This can occur when there are at least two servers, and a session is manually removed before the time at which it would have been removed automatically...

5.9CVSS5.9AI score0.00731EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve•added 2023/04/16 2:15 a.m.•49 views

CVE-2022-37186

In LemonLDAP::NG before 2.0.15. some sessions are not deleted when they are supposed to be deleted according to the timeoutActivity setting. This can occur when there are at least two servers, and a session is manually removed before the time at which it would have been removed automatically...

5.9CVSS6.2AI score0.00731EPSS
SaveExploits1References3
OSV
OSV•added 2023/04/16 2:15 a.m.•13 views

UBUNTU-CVE-2022-37186

In LemonLDAP::NG before 2.0.15. some sessions are not deleted when they are supposed to be deleted according to the timeoutActivity setting. This can occur when there are at least two servers, and a session is manually removed before the time at which it would have been removed automatically...

5.9CVSS5.8AI score0.00731EPSS
SaveExploits1References4
Cvelist
Cvelist•added 2023/04/16 12:00 a.m.•38 views

CVE-2022-37186

In LemonLDAP::NG before 2.0.15. some sessions are not deleted when they are supposed to be deleted according to the timeoutActivity setting. This can occur when there are at least two servers, and a session is manually removed before the time at which it would have been removed automatically...

6.2AI score0.00731EPSS
SaveExploits1References4
Debian CVE
Debian CVE•added 2023/04/16 12:00 a.m.•93 views

CVE-2022-37186

In LemonLDAP::NG before 2.0.15. some sessions are not deleted when they are supposed to be deleted according to the timeoutActivity setting. This can occur when there are at least two servers, and a session is manually removed before the time at which it would have been removed automatically...

5.9CVSS5.7AI score0.00731EPSS
SaveExploits1
Vulnrichment
Vulnrichment•added 2023/04/16 12:00 a.m.•11 views

CVE-2022-37186

In LemonLDAP::NG before 2.0.15. some sessions are not deleted when they are supposed to be deleted according to the timeoutActivity setting. This can occur when there are at least two servers, and a session is manually removed before the time at which it would have been removed automatically...

5.7AI score0.00731EPSS
SaveExploits1References4
OSV
OSV•added 2023/04/16 12:00 a.m.•26 views

CVE-2022-37186

In LemonLDAP::NG before 2.0.15. some sessions are not deleted when they are supposed to be deleted according to the timeoutActivity setting. This can occur when there are at least two servers, and a session is manually removed before the time at which it would have been removed automatically...

5.9CVSS6.5AI score
SaveExploits0References6
CVE
CVE•added 2023/04/16 12:00 a.m.•99 views

CVE-2022-37186

The CVE-2022-37186 issue affects LemonLDAP::NG prior to 2.0.15, where some sessions are not deleted as expected when timeoutActivity would delete them—this can occur in multi-server setups when a session is manually removed before automatic deletion. The vulnerability has an impact on integrity (...

5.9CVSS5.6AI score0.00731EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder