An issue was discovered in 74CMS v5.2.8. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
SQLi
PHP
74Cms
NVD
GitHub
CVSS 3.1
7.2
EPSS
1.0%
A flaw was found in the Keycloak REST API before version 8.0.0 where it would permit user access from a realm the user was not configured. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. No vendor patch available.
Authentication Bypass
Keycloak
NVD
CVSS 3.1
7.5
EPSS
0.5%
Glue Smart Lock 2.7.8 devices do not properly block guest access in certain situations where the network connection is unavailable. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Authentication Bypass
Glue Smart Lock Firmware
NVD
CVSS 3.1
7.5
EPSS
1.0%