Moderate: Red Hat Security Advisory: pki-core security update

An update for pki-core is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

UBUNTU-CVE-2017-2834

An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11. A specially crafted server response can cause an out-of-bounds write resulting in an exploitable condition. An attacker can compromise the server or use a man in the middle...

JVN#48823557: Multiple Buffalo wireless LAN access point devices do not properly perform authentication

WAPM-1166D and WAPM-APG600H provided by BUFFALO INC. are wireless LAN access point devices. WAPM-1166D and WAPM-APG600H do not properly perform authentication CWE-287. Impact An attacker who can access the device may log in via telnet without authentication and access the configuration interface ...

IBM Emptoris Strategic Supply Management Platform Denial of Service Vulnerability

IBM Emptoris Strategic Supply Management is a common Web-based portal access to the Emptoris suite of products management platform from IBM. A security vulnerability exists in the authentication feature in IBM Emptoris Strategic Supply Management versions 10.0.0.x through 10.1.1.x. The...

CVE-2017-1000069

CSRF in Bitly oauth2proxy 2.1 during authentication flow...

CVE-2017-6722

A vulnerability in the Extensible Messaging and Presence Protocol XMPP service of Cisco Unified Contact Center Express UCCx could allow an unauthenticated, remote attacker to masquerade as a legitimate user, aka a Clear Text Authentication Vulnerability. More Information: CSCuw86638. Known Affect...

BSA-2017-316

Security Advisory ID : BSA-2017-316 Component : SNMP Revision : 1.0: Interim In SNMP version 1 & 2 authentication should only accept the value stored in the SNMP agent authentication mechanism. With this vulnerability an attacker can use any value string or integer in order to authenticate the SN...

Authentication Vulnerabilities in Multiple Sony Products

Sony PCS-XG100 and others are webcam products from Sony Japan. An authentication vulnerability exists in multiple Sony products. An attacker could use this vulnerability to bypass authentication and perform administrator actions...

Octopus Deploy Authentication Code Execution Vulnerability

Octopus is a deployment tool for .NET automation. An authentication code execution vulnerability exists in Octopus Deploy. Arbitrary code execution occurs due to poor filtering of the program during the authentication process...

CVE-2014-3527

When using the CAS Proxy ticket authentication from Spring Security 3.1 to 3.2.4 a malicious CAS Service could trick another CAS Service into authenticating a proxy ticket that was not associated. This is due to the fact that the proxy ticket authentication uses the information from the...

CVE-2014-0097

The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds then it may incorrectly authenticate a user who supplies an empty password...

CVE-2015-6817

PgBouncer 1.6.x before 1.6.1, when configured with authuser, allows remote attackers to gain login access as authuser via an unknown username...

The Uber platform coming out of authentication vulnerabilities, exploit the vulnerability can reset any account password-loophole warning-the black bar safety net

Italian security expert Vincenzo C. Aka found the Uber platform authentication vulnerabilities, any account can use this vulnerability to reset the password, this discovery yesterday officially announced. In fact, the initiator of the“authentication crisis”the vulnerability is in the seven months...

Quest Information Systems Indiana Voters app for iOS Authentication Vulnerability

Quest Information Systems Indiana Voters app for iOS is an Indiana voter registration mobile app for iOS developed by Quest Information Systems, Inc. An authentication vulnerability exists in version 1.1.24 of the Quest Information Systems Indiana Voters app for iOS, which stems from the program'...

Interval International app for iOS authentication vulnerability

Interval International app for iOS is a travel management software from Interval USA. An authentication vulnerability exists in versions 3.3 through 3.5.1 of the Interval International app for iOS, which stems from the program failing to validate an X.509 certificate on the server side of an SSL...

MoboTap Dolphin Web Browser - Fast Private Internet Search app for iOS Authentication Vulnerability

MoboTap Dolphin Web Browser - Fast Private Internet Search app for iOS is an iOS-based smartphone browser from MoboTap, Inc. An authentication vulnerability exists in the MoboTap Dolphin Web Browser - Fast Private Internet Search app versions 9.23.0 to 9.23.2 for iOS, which stems from the program...

Detcon SiteWatch Gateway Authentication Vulnerability (CNVD-2017-07181)

Detcon SiteWatch Gateway is a gateway device from Detcon. An authentication vulnerability exists in Detcon SiteWatch Gateway. A remote attacker could exploit this vulnerability to change settings via a specially crafted URL...

Nextcloud Server Authentication Vulnerability

Nextcloud is an open source self-hosted file synchronization and sharing communication application platform from Nextcloud Germany.Nextcloud Server is one of the server version. An authentication vulnerability exists in versions of Nextcloud Server prior to 11.0.3 due to the program failing to...

CVE-2017-7927

A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-IPC-HDW4XXX, DH-IPC-HFW1XXX, DH-IPC-HFW2XXX, DH-IPC-HFW4XXX, DH-SD6CXX, DH-NVR1XXX, DH-HCVR4XXX, DH-HCVR5XXX, DHI-HCVR51A04HE-S3,...

Dahua Technology Authentication Authentication Vulnerability

Dahua Technology Authentication is an access control reader produced by Dahua Technology Attack. An authentication vulnerability exists in Dahua Technology Authentication. An attacker could exploit this vulnerability to gain unauthorized access to restricted content by bypassing intended security...