2899 matches found
Intel Edge Insights for Industrial 授权问题漏洞
Intel Edge Insights for Industrial is a pre-validated, ready-to-deploy software reference design for video and time series data ingestion from Intel Corporation Intel. A security vulnerability exists in Intel Edge Insights for Industrial software prior to version 2.6.1, which stems from improper...
CVE-2022-2821
Missing Critical Step in Authentication in GitHub repository namelessmc/nameless prior to v2.0.2...
NamelessMC 安全漏洞
NamelessMC is a free, easy to use and powerful website software from the NamelessMC team. Suitable for your Minecraft server, it contains tons of features. A security vulnerability exists in versions of NamelessMC prior to v2.0.2 that stems from a missing critical step in authentication...
Authentication flaw
An issue was discovered in the YugabyteDB 2.6.1 when using LDAP-based authentication in YCQL with Microsoft’s Active Directory. When anonymous or unauthenticated LDAP binding is enabled, it allows bypass of authentication with an empty password...
Authentication flaw
In updateState of LocationServicesWifiScanningPreferenceController.java, there is a possible admin restriction bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
The vulnerability of the Jenkins Google Cloud Backup Plugin, related to deficiencies in the authentication process, allows a hacker to copy arbitrary files.
The vulnerability of the Jenkins Google Cloud Backup Plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to remotely copy arbitrary files...
The vulnerability of the Jenkins Coverity Plugin, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Jenkins Coverity Plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Jenkins Lucene-Search Plugin, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Jenkins Lucene-Search Plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Jenkins Compuware Xpediter Code Coverage Plugin, related to deficiencies in authentication procedures, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Jenkins Compuware Xpediter Code Coverage Plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Authentication flaw
Authentication Bypass by Primary Weakness in GitHub repository bookwyrm-social/bookwyrm prior to 0.4.5...
The vulnerability of the HTTP Request Handler component in the SAP Business One License service API allows a perpetrator to execute arbitrary code due to incorrect authentication.
The vulnerability of the HTTP Request Handler component in the SAP Business One License service API is related to incorrect authentication. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted HTTP request...
The vulnerability of the Intel Killer Control Center software, related to deficiencies in authentication mechanisms, allows a hacker to escalate their privileges.
The vulnerability of the Intel Killer Control Center software is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the NTLM protocol implementation in the RDP client FreeRDP allows a hacker to disclose sensitive information.
The vulnerability of the NTLM protocol implementation in the RDP client FreeRDP is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to disclose sensitive information that is protected by the security mechanism...
Authentication flaw
The Motorola MOSCAD and ACE line of RTUs through 2022-05-02 omit an authentication requirement. They feature IP Gateway modules which allow for interfacing between Motorola Data Link Communication MDLC networks potentially over a variety of serial, RF and/or Ethernet links and TCP/IP networks...
CVE-2022-31207
The Omron SYSMAC Cx product family PLCs CS series, CJ series, and CP series through 2022-05-18 lack cryptographic authentication. They utilize the Omron FINS 9600/TCP protocol for engineering purposes, including downloading projects and control logic to the PLC. This protocol has authentication...
CVE-2022-29957
The Emerson DeltaV Distributed Control System DCS through 2022-04-29 mishandles authentication. It utilizes several proprietary protocols for a wide variety of functionality. These protocols include Firmware upgrade 18508/TCP, 18518/TCP; Plug-and-Play 18510/UDP; Hawk services 18507/UDP; Managemen...
Authentication flaw
The Emerson DeltaV Distributed Control System DCS through 2022-04-29 mishandles authentication. It utilizes several proprietary protocols for a wide variety of functionality. These protocols include Firmware upgrade 18508/TCP, 18518/TCP; Plug-and-Play 18510/UDP; Hawk services 18507/UDP; Managemen...
Authentication flaw
JTEKT TOYOPUC PLCs through 2022-04-29 mishandle authentication. They utilize the CMPLink/TCP protocol configurable on ports 1024-65534 on either TCP or UDP for a wide variety of engineering purposes such as starting and stopping the PLC, downloading and uploading projects, and changing...
grafana: OAuth account takeover
A flaw was found in Grafana. This flaw allows a malicious user with the authorization to log into a Grafana instance via a configured OAuth IdP to take over an existing Grafana account under certain conditions...