CVE-2025-2747: Authentication Bypass Using an Alternate Path or Channel

An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for the server defined None type. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through 13.0.1...

anki-sync-server (2.4.0) potentially affected by CVE-2024-32152 via anki (2.1.49)

anki PYPI version 2.1.49 is affected by a known vulnerability. The following packages have a transitive dependency on anki and may be impacted: - anki-sync-server 2.4.0 Source cves: CVE-2024-32152 Source advisory: OSV:GHSA-Q47P-V5RW-V574...

anki-sync-server (2.4.0) potentially affected by CVE-2024-26020 via anki (2.1.49)

anki PYPI version 2.1.49 is affected by a known vulnerability. The following packages have a transitive dependency on anki and may be impacted: - anki-sync-server 2.4.0 Source cves: CVE-2024-26020 Source advisory: OSV:GHSA-9GQ7-P5W9-W899...

anki-sync-server (2.4.0) potentially affected by CVE-2024-29073 via anki (2.1.49)

anki PYPI version 2.1.49 is affected by a known vulnerability. The following packages have a transitive dependency on anki and may be impacted: - anki-sync-server 2.4.0 Source cves: CVE-2024-29073 Source advisory: OSV:GHSA-X3R6-CCVQ-CF5V...

CVE-2024-39669

In the Console in Soffid IAM before 3.5.39, necessary checks were not applied to some Java objects. A malicious agent could possibly execute arbitrary code in the Sync Server and compromise security...

CVE-2024-39669: Improper Control of Generation of Code

In the Console in Soffid IAM before 3.5.39, necessary checks were not applied to some Java objects. A malicious agent could possibly execute arbitrary code in the Sync Server and compromise security...

CVE-2024-39669

In the Console in Soffid IAM before 3.5.39, necessary checks were not applied to some Java objects. A malicious agent could possibly execute arbitrary code in the Sync Server and compromise security...

Sybase M-Business Anywhere (AvantGo) Sync Server Detection

The remote service is a Sybase M-Business Anywhere formerly AvantGo Sync Server, which handles synchronization requests from a mobile device and determines whether to obtain requested pages from the source web server or from a shared cache on the Sync Server itself. C Tenable Network Security, In...