Yordam Library Automation System 安全漏洞

Yordam Library Automation System is an application from Yordam, Inc. A security vulnerability exists in Yordam Library Automation System versions prior to 20.1, which stems from an improperly restricted over-authentication attempt vulnerability that allows interface manipulation...

FactoryTalk Batch View Authentication Bypass

The vulnerability of FactoryTalk Batch View’s software for managing and monitoring manufacturing processes in real-time is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers to circumvent existing security restrictions remotely...

CVE-2024-5867 Delicate <= 3.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Shortcode

The Delicate theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' parameter within the theme's Button shortcode in all versions up to, and including, 3.5.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...

TOTOLINK AC1200 T8 Trust Management Issue Vulnerability

The TOTOLINK AC1200 T8 is a dual-band full gigabit router from China's Gion Electronics TOTOLINK. The TOTOLINK AC1200 T8 suffers from a trust management issue vulnerability that stems from unknown code in the /etc/shadow.sample file that uses hard-coded passwords. An attacker could exploit the...

CVE-2023-37226

Loftware Spectrum, an enterprise label printing platform, is vulnerable to a Missing Authentication for a Critical Function in versions prior to 4.6 HF14 . This flaw allows unauthorized access to critical functionality, potentially impacting the integrity and availability of the system. Remediati...

PT-2024-6660 · Ivanti · Ivanti Workspace Control

Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions 10.18.0.0 and below Description: The issue is related to an incorrectly implemented authentication scheme in the management console of Ivanti Workspace Control, which is vulnerable to a spoofing attack. This...

QNAP QTS和QuTS hero 安全漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both products of China's Weilian Technology QNAP Systems.QNAP Systems QTS is an operating system used by entry to mid-level QNAP NAS.QNAP Systems QuTS hero is an operating system. A security vulnerability exists in QNAP QTS version 5.2.0.2782 build...

CVE-2024-6929 Dynamic Featured Image <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via dfiFeatured Parameter

The Dynamic Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘dfiFeatured’ parameter in all versions up to, and including, 3.7.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

Timing-Based Username Enumeration Vulnerability in Fides Webserver Authentication

A timing-based username enumeration vulnerability has been identified in Fides Webserver authentication. This vulnerability allows an unauthenticated attacker to determine the existence of valid usernames by analyzing the time it takes for the server to respond to login requests. The discrepancy ...

ROS-20240826-22

Vulnerability of passwordverify function of PHP programming language interpreter is related to flaws in the authentication procedure. of the authentication procedure. Exploitation of the vulnerability could allow an attacker acting remotely Bypass the authentication process and gain unauthorized...

Chisel 安全漏洞

Chisel is a fast TCP/UDP tunnel for Jaime Pillora Personal Developer. A security vulnerability exists in Chisel versions prior to v1.10.0 that stems from the server not reading the AUTH environment variable used to set authentication credentials, which could result in any unauthenticated user bei...

lib9p 安全漏洞

lib9p is an open source server library from Conclusive Engineering that implements 9p2000, 9p2000.u, and 9p2000. A security vulnerability exists in lib9p that stems from an authentication error that allows an attacker to impersonate any other valid file system user by having an existing valid use...

PT-2024-7449 · Apache · Apache Solr

Name of the Vulnerable Software and Affected Versions: Apache Solr versions 5.3.0 through 8.11.3 Apache Solr versions 9.0.0 through 9.6.9 Description: The issue is related to an improper authentication vulnerability in Apache Solr, where Solr instances using the PKIAuthenticationPlugin are...

Ubuntu: Security Advisory (USN-6969-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ROS-20240820-15

A vulnerability in the filtervar function of the PHP programming language interpreter is related to insufficient data authentication. data authentication. Exploitation of the vulnerability could allow an attacker acting remotely, spoof URLs with erroneous data...

Juniper Networks Junos OS DoS

The vulnerability of the 802.1X Authentication dot1x daemon for the Juniper Networks Junos OS operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure by executing a specific dot1x command...

CVE-2024-6078

CVE-2024-6078 IMPACT An improper authentication vulnerability exists in the affected product, which could allow a malicious user to generate cookies for any user ID without the use of a username or password. If exploited, a malicious user could take over the account of a legitimate user. The...

FortiExtender Authentication Bypass Privilege Escalation

The vulnerability of the authentication system for microprogrammed software in the FortiExtender signal booster device is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions and enhance their privileges by sending...

D-Link G416 Authentication Vulnerability

D-Link G416 is the AX1500 4G+ Smart Router launched by AUO in June 2025 , which supports Wi-Fi 6, AI Smart Optimization and 4G LTE Cat 6 network with up to 300Mbps internet speed. The D-Link G416 suffers from an authentication vulnerability that stems from a lack of authentication in the httpd...

D-Link G416 httpd API-AUTH Buffer Overflow Vulnerability

D-Link G416 is the AX1500 4G+ Smart Router launched by AUO in June 2025 , which supports Wi-Fi 6, AI Smart Optimization and 4G LTE Cat 6 network with up to 300Mbps internet speed. The D-Link G416 suffers from a buffer overflow vulnerability, which stems from a stack-based buffer overflow remote...