Lucene search
+L

6 matches found

Tenable Nessus
Tenable Nessus
added 2026/08/30 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-82469

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwtrefresh route that issues new JWT access tokens without requiring a refresh toke...

5.4CVSS5.9AI score0.00235EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/29 5:17 p.m.11 views

CVE-2026-82469

Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwtrefresh route that issues new JWT access tokens without requiring a refresh token. Attackers can present an access token to the refresh route via non-POST methods to obtain a new valid access token, enabling indefinit...

5.4CVSS0.00235EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/29 4:35 p.m.34 views

CVE-2026-82469 Rodauth before 2.47.0 Authentication Bypass via jwt_refresh

Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwtrefresh route that issues new JWT access tokens without requiring a refresh token. Attackers can present an access token to the refresh route via non-POST methods to obtain a new valid access token, enabling indefinit...

5.4CVSS0.00235EPSS
SaveExploits0References4
Huntr
Huntr
added 2024/10/21 5:34 p.m.9 views

SSRF via POST /v1/llm/add_llm and /v1/conversation/tts

This report is not public...

7.5CVSS7.1AI score0.00636EPSS
SaveExploits1
OSV
OSV
added 2023/11/23 1:15 p.m.8 views

CVE-2023-4594

Stored XSS vulnerability. This vulnerability could allow an attacker to store a malicious JavaScript payload via GET and POST methods on multiple parameters in the MailAdmindll.htm file...

5.4CVSS5.8AI score0.00388EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 5:50 a.m.12 views

SUSE CVE-2011-4085

The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication ...

6.8CVSS9.6AI score0.02953EPSS
SaveExploits3References4
Rows per page
Query Builder