Authentication flaw

Improper Authentication in GitHub repository snipe/snipe-it prior to 6.0.10...

Authentication flaw

The component controllalogin function in HotelDruid Hotel Management Software v3.0.3 generates a predictable session token, allowing attackers to bypass authentication via bruteforce attacks...

Authentication flaw

A vulnerability has been identified in Mendix SAML Mendix 7 compatible All versions V1.17.0, Mendix SAML Mendix 8 compatible All versions V2.3.0, Mendix SAML Mendix 9 compatible, New Track All versions V3.3.1, Mendix SAML Mendix 9 compatible, Upgrade Track All versions V3.3.0. Affected versions o...

The vulnerability of the Docker Engine software, related to deficiencies in authentication mechanisms, allows a malicious actor to execute arbitrary code.

The vulnerability of the Docker Engine software relates to deficiencies in its authentication mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Authentication flaw

XWiki Platform Web Templates are templates for XWiki Platform, a generic wiki platform. By passing a template of the distribution wizard to the xpart template, user accounts can be created even when user registration is disabled. This also circumvents any email verification. Before versions 14.2...

The vulnerability of the Cisco Small Business RV110W, RV130, RV130W, and RV215W router microprogramming system’s IPSec VPN server allows a hacker to gain access to the IPSec VPN network.

The vulnerability of the Cisco Small Business RV110W, RV130, RV130W, and RV215W router microprogramming system’s IPSec VPN server is related to the improper implementation of the authentication algorithm. Exploiting this vulnerability can allow an attacker to gain access to the IPSec VPN network...

Authentication flaw

The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 3354 and prior is vulnerable to CWE-306: Missing Authentication for Critical Function, which allows unauthorized users to change the operator account password via webserver commands by monitoring web socket communications from an...

Authentication flaw

SFTPGo is configurable SFTP server with optional HTTP/S, FTP/S and WebDAV support. SFTPGo WebAdmin and WebClient support login using TOTP Time-based One Time Passwords as a secondary authentication factor. Because TOTPs are often configured on mobile devices that can be lost, stolen or damaged,...

Authentication flaw

D-Link DIR845L A1 contains a authentication vulnerability via an AUTHORIZEDGROUP=1 value, as demonstrated by a request for getcfg.php...

D-Link DIR-845 授权问题漏洞

The D-Link DIR-845 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR845L version A1, which stems from an authentication vulnerability containing an AUTHORIZEDGROUP=1 value...

CVE-2021-4142

The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA simple content access certificate for authentication with Candlepin...

Authentication flaw

D-link DIR-816 A2v1.10CNB04.img reboots the router without authentication via /goform/doReboot. No authentication is required, and reboot is executed when the function returns at the end...

Authentication flaw

Tabit - Excessive data exposure. Another endpoint mapped by the tiny url, was one for reservation cancellation, containing the MongoDB ID of the reservation, and organization. This can be used to query the http://tgm-api.tabit.cloud/rsv/management/reservationId?organization=orgId API which return...

Authentication flaw

Improper authentication in the IntelR Edge Insights for Industrial software before version 2.6.1 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

Authentication flaw

Authentication bypass for the Open AMT Cloud Toolkit software maintained by IntelR before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

Authentication flaw

Browse restriction bypass vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Cabinet via unspecified vectors...

Authentication flaw

Browse restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Scheduler...

Authentication flaw

Browse restriction bypass vulnerability in Custom Ap of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the data of Custom App via unspecified vectors...

Authentication flaw

Operation restriction bypass vulnerability in Project of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to alter the data of Project via unspecified vectors...

The vulnerability of the software authentication mechanism of Spectrum Virtualize allows a perpetrator to escalate their privileges.

The vulnerability of the software authentication mechanism of Spectrum Virtualize is related to the use of strictly encrypted credentials. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...