Motorola Solutions MOSCAD IP Gateway和ACE IP Gateway 访问控制错误漏洞

The Motorola Solutions MOSCAD IP Gateway and Motorola Solutions ACE IP Gateway are both products of Motorola Solutions, Inc. A series of IP gateways. Use OPC to remotely and locally monitor, detect, alert, and protect any site.Motorola Solutions ACE IP Gateway is a series of IP gateways. An acces...

SiHAS 授权问题漏洞

SiHAS firmware / old app is a firmware from the Korean company SiHAS. A security vulnerability exists in SiHAS's SGW-300, ACM-300, and GCM-300 that stems from the absence of account authentication and permission checking logic in existing applications. An attacker exploiting the vulnerability cou...

Samsung mobile 输入验证错误漏洞

Samsung KfaOptions is a system component of Samsung mobile devices.An elevation of privilege vulnerability exists in Samsung KfaOptions, which stems from a lack of proper authentication logic in KfaOptions. An attacker could use this vulnerability to launch certain activities...

bleve 安全漏洞

bleve is a modern text indexing library for Go. A security vulnerability exists in bleve versions after v0.1.0, which stems from the fact that the bleve/http package, which is primarily used for demonstration purposes, lacks exhaustive validation of user input as well as any authentication and...

The vulnerability of the iControl REST API for BIG-IP application protection interfaces allows a attacker to execute arbitrary commands, modify or delete files.

The vulnerability of the iControl REST API for BIG-IP application protection interfaces is related to the lack of authentication checks for a critical function. Exploiting this vulnerability allows an attacker to execute arbitrary commands, modify or delete files remotely...

The vulnerability of software products for control, management, and simulation in TRUMPF TruTops Boost, TruTops Fab, and TruTops Monitor machines lies in the absence of an authentication procedure for the critical function, allowing attackers to execute commands with elevated privileges.

The vulnerability of software products for control, management, and simulation in TRUMPF TruTops Boost, TruTops Fab, and TruTops Monitor machines is related to the absence of an authentication procedure for the critical function. Exploiting this vulnerability could allow a malicious actor to...

Seat Reservation System安全漏洞

Seat Reservation System is a seat reservation system for individual developers. A security vulnerability exists in Movie Seat Reservation v1, which stems from a lack of authentication and file restrictions in /index.php?page=home, leading to file disclosure...

CVE-2022-25008

totolink EX300v2 V4.0.3c.140B20210429 and EX1200T V4.1.2cu.5230B20210706 does not contain an authentication mechanism...

CVE-2021-27468

The AosService.rem service in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier exposes functions lacking proper authentication. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary SQL statements...

CVE-2022-20060

In preloader usb, there is a possible permission bypass due to a missing proper image authentication. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitatio...

CVE-2022-21660

Gin-vue-admin is a backstage management system based on vue and gin. In versions prior to 2.4.7 low privilege users are able to modify higher privilege users. Authentication is missing on the setUserInfo function. Users are advised to update as soon as possible. There are no known workarounds...

CVE-2022-21660 Missing authorization in gin-vue-admin

Gin-vue-admin is a backstage management system based on vue and gin. In versions prior to 2.4.7 low privilege users are able to modify higher privilege users. Authentication is missing on the setUserInfo function. Users are advised to update as soon as possible. There are no known workarounds...

PT-2021-21740 · Unknown +1 · Freeswitch +1

Name of the Vulnerable Software and Affected Versions: FreeSWITCH versions prior to 1.10.7 Description: The issue concerns the lack of authentication for SIP MESSAGE requests in FreeSWITCH, leading to potential spam and message spoofing. By default, SIP requests of the type MESSAGE are not...

Exploit for Missing Authentication for Critical Function in Estrongs Es_File_Explorer_File_Manager

CVE-2019-6447-ES file Explorer e...

CVE-2021-41317

XSS Hunter Express before 2021-09-17 does not properly enforce authentication requirements for paths...

CVE-2021-40866

Certain NETGEAR smart switches are affected by a remote admin password change by an unauthenticated attacker via the disabled by default /sqfs/bin/sccd daemon, which fails to check authentication when the authentication TLV is missing from a received NSDP packet. This affects GC108P before 1.0.8....

PYSEC-2021-326

The variable import endpoint was not protected by authentication in Airflow =2.0.0, =2.0.0, 2.1.3...

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M340, Modicon Quantum, and Modicon Premium lies in the absence of authentication for a critical function, allowing attackers to execute arbitrary commands.

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M340, Modicon Quantum, and Modicon Premium lies in the absence of authentication for critical functions. Exploiting this vulnerability allows an attacker operating remotely to...

The vulnerability of the if_get_addbook.php component of the White Shark System platform allows a intruder to gain unauthorized access to protected information.

The vulnerability of the ifgetaddbook.php component of the White Shark System is related to the lack of authentication for the critical function. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

CVE-2021-32930

The affected product’s configuration is vulnerable due to missing authentication, which may allow an attacker to change configurations and execute arbitrary code on the iView versions prior to v5.7.03.6182...