205 matches found
EUVD-2023-39866
Malicious code in bioql PyPI...
EUVD-2023-39867
Malicious code in bioql PyPI...
EUVD-2023-38325
Malicious code in bioql PyPI...
CVE-2024-25011
Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default. Authentication checks can be configured to remediate the information disclosure issue...
CVE-2024-25011 Ericsson Catalog Manager and Ericsson Order Care - Exposure of Sensitive Information Vulnerability
Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default. Authentication checks can be configured to remediate the information disclosure issue...
CVE-2024-25011 Ericsson Catalog Manager and Ericsson Order Care - Exposure of Sensitive Information Vulnerability
Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default. Authentication checks can be configured to remediate the information disclosure issue...
PT-2025-38311
Name of the Vulnerable Software and Affected Versions Ericsson Catalog Manager and Ericsson Order Care APIs affected versions not specified Description Ericsson Catalog Manager and Ericsson Order Care APIs do not have authentication enabled by default, leading to an information disclosure issue...
CVE-2023-7308 SecGate3600 Firewall Information Disclosure via authManageSet.cgi
SecGate3600, a network firewall product developed by NSFOCUS, contains a sensitive information disclosure vulnerability in the /cgi-bin/authUser/authManageSet.cgi endpoint. The affected component fails to enforce authentication checks on POST requests to retrieve user data. An unauthenticated...
CVE-2023-7308
CVE-2023-7308 affects NSFOCUS SecGate3600. Affected component is the /cgi-bin/authUser/authManageSet.cgi endpoint, where authentication checks are not enforced on POST requests, allowing unauthenticated remote access to sensitive data (user identifiers, configuration details). Exploitation eviden...
CLSA-2025-1755886747 redis: Fix of CVE-2025-48367
CVE-2025-48367: prevent unauthenticated connections causing IP protocol errors by implementing authentication checks...
User Impersonation
Overview Affected versions of this package are vulnerable to User Impersonation due to insufficient authentication checks in the client and server processes. An attacker can gain unauthorized access to sensitive data by establishing a connection without proper certificate validation or...
User Impersonation
Overview Affected versions of this package are vulnerable to User Impersonation due to insufficient authentication checks in the client and server processes. An attacker can gain unauthorized access to sensitive data by establishing a connection without proper certificate validation or...
CVE-2025-45814
Missing authentication checks in the query.fcgi endpoint of NS3000 v8.1.1.125110 , v7.2.8.124852 , and v7.x and NS2000 v7.02.08 allows attackers to execute a session hijacking attack...
CVE-2025-45814
Missing authentication checks in the query.fcgi endpoint of NS3000 v8.1.1.125110 , v7.2.8.124852 , and v7.x and NS2000 v7.02.08 allows attackers to execute a session hijacking attack...
CVE-2025-45814
The CVE-2025-45814 entry affects NovelSat NS3000 (versions 7.x–8.1.1.125110) and NS2000 (v7.02.08). Description: missing authentication checks in the query.fcgi endpoint allow an attacker to perform a session hijacking attack. This is rated CRITICAL (CVSS 3.1: Network, Low complexity, No privileg...
CVE-2025-45814
Missing authentication checks in the query.fcgi endpoint of NS3000 v8.1.1.125110 , v7.2.8.124852 , and v7.x and NS2000 v7.02.08 allows attackers to execute a session hijacking attack...
CVE-2025-45814
Missing authentication checks in the query.fcgi endpoint of NS3000 v8.1.1.125110 , v7.2.8.124852 , and v7.x and NS2000 v7.02.08 allows attackers to execute a session hijacking attack...
The vulnerability of Mozilla Firefox and Firefox ESR browsers on the macOS operating system arises from insufficient data validation. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Mozilla Firefox and Firefox ESR browsers on the macOS operating system is related to insufficient validation of data authenticity. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...