Research and translation in progress – available shortly.
New vulnerabilities – clearly explained
Every newly published security vulnerability (CVE), continuously from the NVD, with the actively exploited ones from CISA and the probability of exploitation (EPSS) – each one researched individually: what is affected, what helps, what to do.
3238 vulnerabilities
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Vvveb: Authentication bypass in password reset allows account takeover
Vvveb is a CMS with a page builder for websites, blogs and web shops. Versions before 1.0.8.7 do not properly validate the user and token GET parameters in the password reset function. According to the GitHub advisory, an attacker can supply PHP array parameters instead of strings to bypass the check, reset the password of arbitrary users and take over their accounts, including administrator accounts. No login or user interaction is required.
givanz · Vvveb
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.
Data: NVD (NIST), CISA KEV, FIRST EPSS – updated continuously.
