Lucene search
+L

3437 matches found

OpenVAS
OpenVAS
added 2023/06/13 12:00 a.m.16 views

WordPress Otter - Gutenberg Blocks Plugin < 2.2.6 PHAR Deserialization Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:themeisle:otter"; if description...

8.8CVSS7AI score0.17973EPSS
SaveExploits2References1
zdt
zdt
added 2023/06/08 12:00 a.m.382 views

Delta Electronics InfraSuite Device Master Deserialization Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Delta Electronics InfraSuite Device Master Deserialization', 'Description' = %q Delta Electronics InfraSuite Device Master versions below v1.0.5...

9.8CVSS9.2AI score0.5005EPSS
SaveExploits3
ATTACKERKB
ATTACKERKB
added 2023/05/25 9:15 a.m.6 views

CVE-2023-2883

Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7...

8.8CVSS7.3AI score0.00683EPSS
SaveExploits0References3
OSV
OSV
added 2023/05/25 9:15 a.m.10 views

CVE-2023-2883

Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass.This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7...

8.8CVSS5.8AI score0.00683EPSS
SaveExploits0References1
NVD
NVD
added 2023/05/25 9:15 a.m.18 views

CVE-2023-2883

Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7...

8.8CVSS8.8AI score0.00683EPSS
SaveExploits0References2
Prion
Prion
added 2023/05/25 9:15 a.m.23 views

Authorization

Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass.This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7...

6.5CVSS8.7AI score0.00683EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2023/05/25 8:20 a.m.23 views

CVE-2023-2883 IDOR in CBOT's Chatbot

Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7...

8.8CVSS8.9AI score0.00683EPSS
SaveExploits0References2
CVE
CVE
added 2023/05/25 8:20 a.m.51 views

CVE-2023-2883

The CVE-2023-2883 issue affects CBOT Chatbot Core prior to v4.0.3.4 and Panel prior to v4.0.3.7, described as an Authorization Bypass through a User-Controlled Key that enables Authentication Abuse. The vulnerability is documented across sources (NVD entry and CVE records) with a CVSS v3.1 base s...

8.8CVSS7.3AI score0.00683EPSS
SaveExploits0References2Affected Software2
ATTACKERKB
ATTACKERKB
added 2023/05/24 1:15 p.m.6 views

CVE-2023-2065

Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking System allows Authentication Abuse, Authentication Bypass. This issue affects Cargo Tracking System: before 3558f28...

8.8CVSS7.3AI score0.00852EPSS
SaveExploits0References4
OSV
OSV
added 2023/05/24 1:15 p.m.7 views

CVE-2023-2065

Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking System allows Authentication Abuse, Authentication Bypass.This issue affects Cargo Tracking System: before 3558f28...

8.8CVSS7.3AI score0.00852EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/24 1:15 p.m.17 views

Authorization

Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking System allows Authentication Abuse, Authentication Bypass.This issue affects Cargo Tracking System: before 3558f28...

6.5CVSS8.7AI score0.00852EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/05/24 12:04 p.m.49 views

CVE-2023-2065

CVE-2023-2065 concerns Armoli Technology Cargo Tracking System. Affected: Cargo Tracking System versions before 3558f28. Root cause: Authorization Bypass via a user-controlled key, enabling authentication abuse. Impact: high confidentiality, integrity, and availability (per CVSS 3.1, base score 8...

8.8CVSS7.3AI score0.00852EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/05/24 12:04 p.m.29 views

CVE-2023-2065 IDOR in Armoli Technology's Cargo Tracking System

Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking System allows Authentication Abuse, Authentication Bypass. This issue affects Cargo Tracking System: before 3558f28...

8.8CVSS8.9AI score0.00852EPSS
SaveExploits0References2
NVD
NVD
added 2023/05/23 8:15 p.m.16 views

CVE-2023-2702

Authorization Bypass Through User-Controlled Key vulnerability in Finex Media Competition Management System allows Authentication Abuse, Authentication Bypass. This issue affects Competition Management System: before 23.07...

8.8CVSS8.8AI score0.00683EPSS
SaveExploits0References2
OSV
OSV
added 2023/05/23 8:15 p.m.7 views

CVE-2023-2702

Authorization Bypass Through User-Controlled Key vulnerability in Finex Media Competition Management System allows Authentication Abuse, Authentication Bypass.This issue affects Competition Management System: before 23.07...

8.8CVSS7.3AI score0.00683EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/05/23 8:15 p.m.5 views

CVE-2023-2702

Authorization Bypass Through User-Controlled Key vulnerability in Finex Media Competition Management System allows Authentication Abuse, Authentication Bypass. This issue affects Competition Management System: before 23.07...

8.8CVSS7.3AI score0.00683EPSS
SaveExploits0References3
Prion
Prion
added 2023/05/23 8:15 p.m.17 views

Authorization

Authorization Bypass Through User-Controlled Key vulnerability in Finex Media Competition Management System allows Authentication Abuse, Authentication Bypass.This issue affects Competition Management System: before 23.07...

6.5CVSS8.7AI score0.00683EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/05/23 4:15 a.m.24 views

Authorization

Authorization Bypass Through User-Controlled Key in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v1.1.0...

5.8CVSS5.1AI score0.00676EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/05/23 12:00 a.m.12 views

PT-2023-21722 · Unknown · Cloudexplorer Lite

Name of the Vulnerable Software and Affected Versions: cloudexplorer-lite versions prior to 1.1.0 Description: The issue concerns a missing authorization in the cloudexplorer-lite GitHub repository. This allows for an authorization bypass through a user-controlled key. Recommendations: For versio...

7.2CVSS5.9AI score0.00676EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2023/05/23 12:00 a.m.39 views

CVE-2023-2844 Authorization Bypass Through User-Controlled Key in cloudexplorer-dev/cloudexplorer-lite

Authorization Bypass Through User-Controlled Key in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v1.1.0...

7.2CVSS5.4AI score0.00676EPSS
SaveExploits1References2
Rows per page
Query Builder