CWE-620 · 95 kayıt
Unverified Password Change
Bu sınıftaki CVE’ler
95 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
64Bu hafta | CVE-2024-20419Silahlaştırılmış | A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote atcisco · smart software manager on-prem · CWE-620 | Kritik10,0 | — | %80,6 | 17 Tem 2024 |
44Planlayın | CVE-2024-48887Kavram kanıtı | A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin passwordfortinet · fortiswitch · CWE-620 | Kritik9,8 | — | %15,7 | 8 Nis 2025 |
44Planlayın | CVE-2025-4322Kavram kanıtı | Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeoverstylemixthemes · motors - car dealer, rental & listing wordpress theme · CWE-620 | Kritik9,8 | — | %15,5 | 20 May 2025 |
40Planlayın | CVE-2024-12824Kavram kanıtı | Nokri – Job Board WordPress Theme <= 1.6.2 - Unauthenticated Arbitrary Password Changescriptsbundle · nokri – job board wordpress theme · CWE-620 | Kritik9,8 | — | %2,4 | 1 Mar 2025 |
39İzleyin | CVE-2024-13375İstismar yok | Adifier System <= 3.1.7 - Unauthenticated Arbitrary Password Resetspoonthemes · adifier system · CWE-620 | Kritik9,8 | — | %1,4 | 18 Oca 2025 |
39İzleyin | CVE-2023-4214İstismar yok | AppPresser <= 4.2.5 - Insecure Password Reset Mechanismapppresser · apppresser · CWE-620 | Kritik9,8 | — | %0,9 | 17 Kas 2023 |
39İzleyin | CVE-2023-2449İstismar yok | UserPro <= 5.1.1 - Insecure Password Reset Mechanismuserproplugin · userpro · CWE-620 | Kritik9,8 | — | %0,9 | 22 Kas 2023 |
39İzleyin | CVE-2026-15964Kavram kanıtı | Single Sign On For TNG <= 2.0.0 - Unauthenticated Privilege Escalation via Unverified Password Changebritcoder · single sign on for tng · CWE-620 | Kritik9,8 | — | %0,9 | 1 Ağu 2026 |
39İzleyin | CVE-2025-10159İstismar yok | An authentication bypass vulnerability allows remote attackers to gain administrative privileges on Sophos AP6 Series Wireless Access Pointssophos · ap6 series wireless access points · CWE-620 | Kritik9,8 | — | %0,9 | 9 Eyl 2025 |
39İzleyin | CVE-2025-2253İstismar yok | IMITHEMES Listing <= 3.3 - Unauthenticated Privilege Escalation via Unverified Password Resetimithemes · imithemes listing · CWE-620 | Kritik9,8 | — | %0,8 | 9 May 2025 |
39İzleyin | CVE-2026-12692İstismar yok | Improper Authentication in Vimesoft's Enterprise Video Platformvimesoft inc. · enterprise video platform · CWE-620 | Kritik9,8 | — | %0,6 | 17 Tem 2026 |
39İzleyin | CVE-2025-4606Kavram kanıtı | Sala - Startup & SaaS WordPress Theme <= 1.1.4 - Unauthenticated Privilege Escalation via Password Reset/Account Takeoveruxper · sala - startup & saas wordpress theme · CWE-620 | Kritik9,8 | — | %0,6 | 9 Tem 2025 |
39İzleyin | CVE-2023-3069İstismar yok | Unverified Password Change in tsolucio/coreboscorebos · corebos · CWE-620 | Kritik9,8 | — | %0,6 | 2 Haz 2023 |
39İzleyin | CVE-2025-63362İstismar yok | Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attwaveshare · rs232\/485 to wifi eth \(b\) firmware · CWE-620 | Kritik9,8 | — | %0,6 | 4 Ara 2025 |
39İzleyin | CVE-2025-3603İstismar yok | Flynax Bridge <= 2.2.0 - Unauthenticated Privilege Escalation via Password Updateflynax · flynax bridge · CWE-620 | Kritik9,8 | — | %0,6 | 24 Nis 2025 |
39İzleyin | CVE-2024-26520İstismar yok | An issue in Hangzhou Xiongwei Technology Development Co., Ltd.CWE-620 | Kritik9,8 | — | %0,5 | 26 Tem 2024 |
39İzleyin | CVE-2024-12860İstismar yok | CarSpot – Dealership Wordpress Classified Theme <= 2.4.3 - Unauthenticated Arbitrary Password Reset/Account Takeovercarspot project · carspot · CWE-620 | Kritik9,8 | — | %0,5 | 18 Şub 2025 |
39İzleyin | CVE-2025-9286Kavram kanıtı | Appy Pie Connect for WooCommerce <= 1.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via reset_user_passwordhancock11 · appy pie connect for woocommerce · CWE-620 | Kritik9,8 | — | %0,5 | 3 Eki 2025 |
39İzleyin | CVE-2025-1107İstismar yok | Unverified password change vulnerability in Jantoimpronta · janto · CWE-620 | Kritik9,9 | — | %0,4 | 7 Şub 2025 |
39İzleyin | CVE-2024-12827İstismar yok | DWT - Directory & Listing WordPress Theme <= 3.3.6 - Unauthenticated Arbitrary User Password Resetscriptsbundle · dwt - directory & listing wordpress theme · CWE-620 | Kritik9,8 | — | %0,4 | 27 Haz 2025 |
39İzleyin | CVE-2024-45647İstismar yok | IBM Security Verify Access unverified password changeibm · security verify access · CWE-620 | Kritik9,8 | — | %0,3 | 20 Oca 2025 |
38İzleyin | CVE-2024-33699İstismar yok | The LevelOne WBR-6012 router's web application has a vulnerability in its firmware version R0.40e6, allowing attackers to change the adminislevel1 · wbr-6012 firmware · CWE-620 | Yüksek8,8 | — | %11,2 | 30 Eki 2024 |
37İzleyin | CVE-2020-7378Kavram kanıtı | CRIXP OpenCRX Unverified Password Changeopencrx · opencrx · CWE-620 | Kritik9,1 | — | %2,6 | 24 Kas 2020 |
37İzleyin | CVE-2026-91995İstismar yok | pig before 4.1.0 Unverified Password Change via /register/passwordpig-mesh · pig · CWE-620 | Kritik9,3 | — | %0,9 | 15 Eyl 2026 |
37İzleyin | CVE-2025-4558İstismar yok | WormHole Tech GPM - Unverified Password Changewormhole tech · gpm · CWE-620 | Kritik9,3 | — | %0,5 | 12 May 2025 |
- CVE-2024-2041964Bu hafta
A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote at
KritikCVSS 10,0SilahlaştırılmışEPSS %81cisco · smart software manager on-prem17 Tem 2024
- CVE-2024-4888744Planlayın
A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin password
KritikCVSS 9,8Kavram kanıtıEPSS %16fortinet · fortiswitch8 Nis 2025
- CVE-2025-432244Planlayın
Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover
KritikCVSS 9,8Kavram kanıtıEPSS %16stylemixthemes · motors - car dealer, rental & listing wordpress theme20 May 2025
- CVE-2024-1282440Planlayın
Nokri – Job Board WordPress Theme <= 1.6.2 - Unauthenticated Arbitrary Password Change
KritikCVSS 9,8Kavram kanıtıEPSS %2scriptsbundle · nokri – job board wordpress theme1 Mar 2025
- CVE-2024-1337539İzleyin
Adifier System <= 3.1.7 - Unauthenticated Arbitrary Password Reset
KritikCVSS 9,8İstismar yokEPSS %1spoonthemes · adifier system18 Oca 2025
- CVE-2023-421439İzleyin
AppPresser <= 4.2.5 - Insecure Password Reset Mechanism
KritikCVSS 9,8İstismar yokEPSS %1apppresser · apppresser17 Kas 2023
- CVE-2023-244939İzleyin
UserPro <= 5.1.1 - Insecure Password Reset Mechanism
KritikCVSS 9,8İstismar yokEPSS %1userproplugin · userpro22 Kas 2023
- CVE-2026-1596439İzleyin
Single Sign On For TNG <= 2.0.0 - Unauthenticated Privilege Escalation via Unverified Password Change
KritikCVSS 9,8Kavram kanıtıEPSS %1britcoder · single sign on for tng1 Ağu 2026
- CVE-2025-1015939İzleyin
An authentication bypass vulnerability allows remote attackers to gain administrative privileges on Sophos AP6 Series Wireless Access Points
KritikCVSS 9,8İstismar yokEPSS %1sophos · ap6 series wireless access points9 Eyl 2025
- CVE-2025-225339İzleyin
IMITHEMES Listing <= 3.3 - Unauthenticated Privilege Escalation via Unverified Password Reset
KritikCVSS 9,8İstismar yokEPSS %1imithemes · imithemes listing9 May 2025
- CVE-2026-1269239İzleyin
Improper Authentication in Vimesoft's Enterprise Video Platform
KritikCVSS 9,8İstismar yokEPSS %1vimesoft inc. · enterprise video platform17 Tem 2026
- CVE-2025-460639İzleyin
Sala - Startup & SaaS WordPress Theme <= 1.1.4 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover
KritikCVSS 9,8Kavram kanıtıEPSS %1uxper · sala - startup & saas wordpress theme9 Tem 2025
- CVE-2023-306939İzleyin
Unverified Password Change in tsolucio/corebos
KritikCVSS 9,8İstismar yokEPSS %1corebos · corebos2 Haz 2023
- CVE-2025-6336239İzleyin
Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows att
KritikCVSS 9,8İstismar yokEPSS %1waveshare · rs232\/485 to wifi eth \(b\) firmware4 Ara 2025
- CVE-2025-360339İzleyin
Flynax Bridge <= 2.2.0 - Unauthenticated Privilege Escalation via Password Update
KritikCVSS 9,8İstismar yokEPSS %1flynax · flynax bridge24 Nis 2025
- CVE-2024-2652039İzleyin
An issue in Hangzhou Xiongwei Technology Development Co., Ltd.
KritikCVSS 9,8İstismar yokEPSS %126 Tem 2024
- CVE-2024-1286039İzleyin
CarSpot – Dealership Wordpress Classified Theme <= 2.4.3 - Unauthenticated Arbitrary Password Reset/Account Takeover
KritikCVSS 9,8İstismar yokEPSS %0carspot project · carspot18 Şub 2025
- CVE-2025-928639İzleyin
Appy Pie Connect for WooCommerce <= 1.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via reset_user_password
KritikCVSS 9,8Kavram kanıtıEPSS %0hancock11 · appy pie connect for woocommerce3 Eki 2025
- CVE-2025-110739İzleyin
Unverified password change vulnerability in Janto
KritikCVSS 9,9İstismar yokEPSS %0impronta · janto7 Şub 2025
- CVE-2024-1282739İzleyin
DWT - Directory & Listing WordPress Theme <= 3.3.6 - Unauthenticated Arbitrary User Password Reset
KritikCVSS 9,8İstismar yokEPSS %0scriptsbundle · dwt - directory & listing wordpress theme27 Haz 2025
- CVE-2024-4564739İzleyin
IBM Security Verify Access unverified password change
KritikCVSS 9,8İstismar yokEPSS %0ibm · security verify access20 Oca 2025
- CVE-2024-3369938İzleyin
The LevelOne WBR-6012 router's web application has a vulnerability in its firmware version R0.40e6, allowing attackers to change the adminis
YüksekCVSS 8,8İstismar yokEPSS %11level1 · wbr-6012 firmware30 Eki 2024
- CVE-2020-737837İzleyin
CRIXP OpenCRX Unverified Password Change
KritikCVSS 9,1Kavram kanıtıEPSS %3opencrx · opencrx24 Kas 2020
- CVE-2026-9199537İzleyin
pig before 4.1.0 Unverified Password Change via /register/password
KritikCVSS 9,3İstismar yokEPSS %1pig-mesh · pig15 Eyl 2026
- CVE-2025-455837İzleyin
WormHole Tech GPM - Unverified Password Change
KritikCVSS 9,3İstismar yokEPSS %1wormhole tech · gpm12 May 2025