2899 matches found
Authentication flaw
In EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401, an unauthenticated remote attacker may potentially bypass the authentication process to gain access to the system maintenance page. This may be exploited by an attacker to view sensitive information,...
CVE-2016-10364
With X-Pack installed, Kibana versions 5.0.0 and 5.0.1 were not properly authenticating requests to advanced settings and the short URL service, any authenticated user could make requests to those services regardless of their own permissions...
Synology Photo Station Design Flaw Vulnerability
Synology Photo Station is a solution for sharing pictures, videos and blogs over the Internet from Synology, a Chinese company. A security vulnerability exists in the authentication in Synology Photo Station versions 6.0-2528 through 6.7.1-3419. A local attacker can exploit the vulnerability to...
The vulnerability of the Secure File System (SFS), a secure file system in the Android operating system, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.
The vulnerability of the secure file system SFS in the Android operating system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of data...
Authentication flaw
Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to delete other operational administrators' MultiReport filters via unspecified vectors...
Authentication flaw
Buffalo NC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to bypass access restriction to enable the debug option via unspecified vectors...
CVE-2016-7836
SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program...
PT-2017-9387
Name of the Vulnerable Software and Affected Versions SKYSEA Client View versions 11.221.03 and earlier Description The issue allows remote code execution due to a flaw in processing authentication on the TCP connection with the management console program. Recommendations For versions 11.221.03 a...
Authentication flaw
Blue Coat Advanced Secure Gateway 6.6, CacheFlow 3.4, ProxySG 6.5 and 6.6 allows remote attackers to bypass blocked requests, user authentication, and payload scanning...
My NJ Client APP has an overstepping vulnerability
My Nanjing Client APP is a city-level public service mobile application that integrates all kinds of living information in Nanjing. There is a vulnerability in the authentication mechanism of the social security payment query function of My Nanjing Client APP, which allows an attacker to view the...
Authentication flaw
The Toshiba FlashAir SD-WD/WC series Class 6 model with firmware version 1.00.04 and later, FlashAir SD-WD/WC series Class 10 model W-02 with firmware version 2.00.02 and later, FlashAir SD-WE series Class 10 model W-03, FlashAir Class 6 model with firmware version 1.00.04 and later, FlashAir II...
Authentication flaw
An Improper Authentication issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may be able to gain unauthorized access to the user firewall when RADIUS servers are unreachable...
PUMA PUMATRAC app for iOS Authentication Vulnerability
PUMA PUMATRAC app for iOS is a running management app from Puma Germany. The program has features such as recording running distance, speed and calories burned. An authentication vulnerability exists in version 3.0.2 of the PUMA PUMATRAC app for iOS, which stems from the program's failure to...
Life Before Us Yo app for iOS Authentication Vulnerability
Life Before Us Yo app for iOS is an iOS based social mobile application developed by Yo Inc. An authentication vulnerability exists in version 2.5.8 of the Life Before Us Yo app for iOS, which stems from the program failing to validate an X.509 certificate on the server side of an SSL server. The...
Detcon SiteWatch Gateway Authentication Vulnerability
Detcon SiteWatch Gateway is a gateway device from Detcon. An authentication vulnerability exists in Detcon SiteWatch Gateway. The vulnerability can be exploited by an attacker to change settings via a specially crafted URL...
Authentication flaw
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Workflow and the "MultiReport" function to alter or delete information via unspecified vectors...
Authentication flaw
A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious attacker to compromise the systems confidentiality or integrity without authentication, leading to managed systems being compromised or services being denied to authent...
Authentication flaw
An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious, network based, unauthenticated attacker to perform privileged actions to gain complete control over the environment...