The vulnerability of D-Link’s microprogrammed router software, related to deficiencies in authentication procedures, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of D-Link router microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the Palo Alto Networks Expedition configuration migration software lies in its authentication procedures’ deficiencies, which allow attackers to gain access to protected information.

The vulnerability of the Expedition Migration Tool’s migration tool is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information...

The vulnerability of the SUSE Linux SMT subscription management software, related to deficiencies in authentication procedures, allows a perpetrator to replace the server.

The vulnerability of the SUSE Linux Subscription Management Tool SMT is related to deficiencies in the authentication process when the HOST header is used. Exploiting this vulnerability could allow a malicious actor to remotely replace the server...

The vulnerability of the microprogramming software of the HPE StorageWorks XP7 Automation Director storage system, related to authentication procedures that lack deficiencies, allows attackers to disclose protected information.

The vulnerability of the microprogramming software in the HPE StorageWorks XP7 Automation Director network storage system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to disclose protected information from a remote location...

The vulnerability of the console-io command shell in Node.js, related to authentication process flaws, allows attackers to execute arbitrary code.

The vulnerability of the console-io command shell for Node.js is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by connecting to the console using websocket...

CA Privileged Access Manager IP Address Spoofing Vulnerability

CA Privileged Access Manager is a privileged access manager from CA USA that centralizes privileged user policies across multiple physical and virtual environments and manages and controls access to IT resources. A security vulnerability exists in CA Privileged Access Manager version 2.x. The...

The vulnerability of the Credential Security Support Provider protocol (CredSSP) in the Windows operating system, which allows a perpetrator to execute arbitrary commands on behalf of a legitimate user

The vulnerability of the Credential Security Support Provider protocol CredSSP in the Windows operating system is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary commands on behalf of a legitimate user...

The vulnerability of the FTP server of the microprogrammed IP camera Jooan A5 allows a hacker to gain access to the device with root privileges.

The vulnerability of the FTP server of the microprogrammed IP camera Jooan A5 IP Camera is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker who operates remotely to gain access to the device with root privileges...

The vulnerability of Cisco’s product update mechanisms on the Cisco Voice Operating System allows a hacker to gain unauthorized access to devices.

The vulnerability of Cisco’s product update mechanisms on the Cisco Voice Operating System is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to devices with root privileges using a...

SUSE-SU-2017:3343-1 Security update for openssl

This update for openssl fixes the following issues: - OpenSSL Security Advisory 07 Dec 2017 CVE-2017-3737: OpenSSL 1.0.2 starting from version 1.0.2b introduced an 'error state' mechanism. The intent was that if a fatal error occurred during a handshake then OpenSSL would move into the error...

The vulnerability of NPort asynchronous servers, related to deficiencies in authentication procedures, allows attackers to execute arbitrary code.

The vulnerability of Nport asynchronous servers is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by updating the device’s software remotely, without having to go through the authentication process...

The vulnerability of the Java RMI interface of the Smart Network Configuration Manager system allows a perpetrator to execute arbitrary code or cause service failures.

The vulnerability of the Java RMI interface of the Smart Network Configuration Manager, a system for automatic management of network configurations, is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary...

The vulnerability of the TCP/IP software for the JanTek JTC-200 converter, related to deficiencies in authentication procedures, allows a hacker to gain access to the BusyBox Linux shell.

The vulnerability of the TCP/IP microprogramming software of the JanTek JTC-200 converter is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain access to the BusyBox Linux shell using the Teln...

The vulnerability of the firmware control interface of Teltonika RUT9XX allows a hacker to execute arbitrary commands with root privileges.

The vulnerability of the control interface of Teltonika RUT9XX embedded microprogramming software is related to deficiencies in access control during user authentication requests. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands with root...

The vulnerability of the Advantech WebAccess remote monitoring software lies in its authentication procedures’ flaws, which allow a malicious actor to execute arbitrary code.

The vulnerability of the Advantech WebAccess remote monitoring software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially created requests...

The vulnerability of the Embedded Web Server allows a perpetrator to gain control over the device remotely or locally.

The vulnerability of Embedded Web Servers is related to deficiencies in authentication procedures. Embedded Web Servers, used by multiple routers and devices, do not check or process SYN Flood or FIN Flood packets during transmission. They also do not request any authentication parameters, which...

The vulnerability of the web-server module that implements Intel Active Management Technology, a remote control technology for computers, allows attackers to gain access to the device.

The vulnerability of the web-server module that implements Intel Active Management Technology for remote control involves deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the device by sending specially...

The vulnerability of the software for Cisco WebEx Meetings Server allows a perpetrator to partially compromise the confidentiality and integrity of information.

The vulnerability of Cisco WebEx Meetings Server software relates to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to partially compromise the confidentiality and integrity of information...

Inherent Risks of Using the Intelligent Platform Management Interface (IPMI) on the Lenovo System x Integrated Management Module (IMM), Integrated Management Module II (IMM2) and ThinkServer TSM - us

Lenovo Security Advisory: LEN-10617 Potential Impact: Access to systems through IPMI if default settings are not changed Severity: High Scope of Impact: Industry-Wide CVE Identifiers: CVE-2013-4037, CVE-2013-4031 Summary Description: Various risks with the industry-standard Intelligent Platform...

The vulnerability of the Android operating system, which allows a hacker to gain unauthorized access to memory

The vulnerability of the Page Table subsystem configuration in the Android operating system arises due to errors in the authentication process. Exploiting this vulnerability can allow an intruder, operating locally, to gain unauthorized access to supervisor memory...