MongoDB Privilege Escalation

The vulnerability of the MongoDB database management system server is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to increase their privileges remotely...

Oracle Business Intelligence Enterprise Edition Analytics Server DoS

The vulnerability of the Analytics Server component of the Oracle Business Intelligence Enterprise Edition software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Microsoft Exchange Server Privilege Escalation

The vulnerability of Microsoft Exchange Server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to increase their privileges remotely...

Mozilla Firefox Link Handler Bypass

The vulnerability of the Link Handler component in the Mozilla Firefox browser is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

Microsoft SharePoint Server Authentication Spoofing

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and the Microsoft SharePoint Foundation software relates to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to carry out spear-phishing attacks remotely...

HashiCorp Vault Storage DoS

The vulnerability of the HashiCorp Vault and Vault Enterprise archiving platforms relates to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker to cause service interruptions...

Moodle Authentication Bypass

The vulnerability of the virtual learning environment Moodle is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to user data...

PT-2025-18987 · Undefined · Undefined

Уязвимость операционных систем Fortinet FortiOS связана с недостатками механизма аутентификации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, раскрыть данные о конфигурации устройства и обойти существующие механизмы безопасности...

Active Directory Certificate Services Privilege Escalation

The vulnerability of Active Directory Certificate Services on Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...

multifunctional devices authentication disclosure

The vulnerability of microprogrammed multifunctional devices such as Versalink, Phaser, and WorkCentre is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...

Drupal Two-factor Authentication Auth Bypass

The vulnerability of the Two-factor Authentication TFA module in the Drupal CMS system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow attackers to bypass security restrictions remotely...

Next.js Auth Bypass

The vulnerability of the Next.js software platform for creating web applications is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

Nextcloud Server Authentication Disclosure

The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...

Brocade Fabric OS Authentication Bypass

The vulnerability of the Brocade Fabric OS operating system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to intercept service sessions remotely...

GitHub Enterprise Server Auth Bypass

The vulnerability of the corporate version of the GitHub Enterprise Server is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a perpetrator to access confidential data...

Red Hat 3scale API Management Auth Bypass

The vulnerability of the Red Hat 3scale API Management software lies in the deficiencies of its authentication mechanism. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...

Netlogon Privilege Escalation

The vulnerability of the Netlogon service in Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

Firefox Authentication Data Compromise

The vulnerability in the Firefox web browser is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

Korenix JetPort Industrial Server Authentication Bypass

The vulnerability of the industrial server for serial devices of Korenix JetPort is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

JetBrains Space Project Settings CI/CD Unauthorized Access

The vulnerability of the JetBrains Space module’s Project Settings | Connections system for continuous integration and delivery of applications is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain...