Lucene search
K

319 matches found

CNVD
CNVD
added 2022/07/15 12:0 a.m.23 views

Samsung App lock authentication error vulnerability

Samsung App lock is an application for Samsung Samsung mobile devices that protects your privacy with password lock, graphical lock, and fingerprint lock.Samsung App lock suffers from an authentication error vulnerability that stems from the lack of proper authentication logic in AppLock, which c...

7.8CVSS1.9AI score0.00022EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/07/12 12:0 a.m.1 views

SAMSUNG Mobile devices App lock 授权问题漏洞

Samsung App lock is an application for Samsung Samsung mobile devices that protects your privacy with password lock, graphical lock, and fingerprint lock.Samsung App lock suffers from an authentication error vulnerability that stems from the lack of proper authentication logic in AppLock, which c...

7.8CVSS5.7AI score0.00022EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/07/12 12:0 a.m.2 views

Siemens SIMATIC 访问控制错误漏洞

The SIMATIC MV500 is a fixed optical reader used to reliably capture printed, laser, drilled, punched, and dot-marked codes on a variety of different surfaces.The Siemens SIMATIC MV500 is vulnerable to an authentication error that could be exploited by an unauthenticated, remote attacker to read...

7.5CVSS5.7AI score0.00526EPSS
Exploits0References5
CNVD
CNVD
added 2022/06/28 12:0 a.m.16 views

MELAG FTP Server Authentication Error Vulnerability

MELAG FTP Server is an FTP server from the German company MELAG. version 2.2.0.4 of MELAG FTP Server is vulnerable to an authentication error, which stems from incomplete authentication checks. A remote attacker could exploit the vulnerability to access local files with a valid username...

7.5CVSS3.9AI score0.00382EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/06/28 12:0 a.m.1 views

NeoRS 访问控制错误漏洞

Douzone Bizon NeoRS is a remote support service from Douzone Bizon in Korea. Remote Pc can be accessed and controlled from anywhere, anytime through a remote support site. A security vulnerability exists in NeoRS versions prior to 2021.3.10.1, which originates from an origin authentication error...

8.8CVSS8.3AI score0.00131EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/06/24 12:0 a.m.3 views

MELAG FTP Server 授权问题漏洞

MELAG FTP Server is an FTP server from the German company MELAG. version 2.2.0.4 of MELAG FTP Server is vulnerable to an authentication error, which stems from incomplete authentication checks. A remote attacker could exploit the vulnerability to access local files with a valid username...

7.5CVSS5.6AI score0.00382EPSS
Exploits1References2
OSV
OSV
added 2022/06/16 10:15 p.m.1 views

CVE-2022-33750

CA Automic Automation 12.2 and 12.3 contain an authentication error vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary commands...

9.8CVSS6AI score0.01149EPSS
Exploits0References1
NVD
NVD
added 2022/06/16 10:15 p.m.9 views

CVE-2022-33750

CA Automic Automation 12.2 and 12.3 contain an authentication error vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary commands...

9.8CVSS0.01149EPSS
Exploits0References1
CVE
CVE
added 2022/06/16 9:20 p.m.50 views

CVE-2022-33750

CVE-2022-33750 affects Broadcom CA Automic Automation 12.2 and 12.3. The Automic agent has an authentication error that could allow a remote attacker to execute arbitrary commands. Documented impact is high (remote, no user interaction) per CVSS data; exploitation details are not provided in the ...

9.8CVSS9.6AI score0.01149EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/06/16 9:20 p.m.14 views

CVE-2022-33750

CA Automic Automation 12.2 and 12.3 contain an authentication error vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary commands...

9.8AI score0.01149EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/06/16 12:0 a.m.1 views

Broadcom CA Automic Automation 授权问题漏洞

Broadcom CA Automic Automation is an automation product from Broadcom, Inc. It provides a service orchestration and automation platform to automate complex applications, platforms, and technology environments. A security vulnerability exists in Broadcom CA Automic Automation versions 12.2 and 12....

9.8CVSS8.7AI score0.01149EPSS
Exploits0References3
CNVD
CNVD
added 2022/06/15 12:0 a.m.18 views

Siemens SICAM GridEdge Authentication Error Vulnerability

SICAM GridEdge enables IoT functionality in your existing IEC 61850 devices with just a few clicks.Siemens SICAM GridEdge is vulnerable to an authentication error, which stems from the fact that the affected software does not require authenticated access to privileged functions and can be exploit...

8.6CVSS4.3AI score0.00353EPSS
Exploits0References1
Citrix
Citrix
added 2022/06/15 12:0 a.m.7 views

su: nobody to pgxl in console

Citrix ADM instance constantly showing su: nobody to pgxl in console RCG-ISLBADM-PRI su: in promptechooff: tcgetarrt: Inappropriate ioctl for device RCG-ISLBADM su: nobody to pgxl...

7AI score
Exploits0
CNVD
CNVD
added 2022/06/15 12:0 a.m.15 views

Siemens SICAM GridEdge Authentication Error Vulnerability (CNVD-2022-45216)

SICAM GridEdge enables IoT functionality in your existing IEC 61850 devices with just a few clicks.An authentication error vulnerability in Siemens SICAM GridEdge results from the fact that the affected software does not authenticate access to privileged functions, which can be exploited to creat...

9.8CVSS5.6AI score0.00689EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/06/14 12:0 a.m.1 views

Siemens SINEMA Remote Connect Server 访问控制错误漏洞

SINEMA Remote Connect is a remote network management platform that makes it easy to manage tunnel connections VPNs between headquarters, service technicians, and installed machines or plants.An authentication error vulnerability exists in Siemens SINEMA Remote Connect Server, which could be...

9.8CVSS5.8AI score0.00316EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/06/14 12:0 a.m.2 views

Siemens SICAM GridEdge Essential 访问控制错误漏洞

SICAM GridEdge enables IoT functionality in your existing IEC 61850 devices with just a few clicks.An authentication error vulnerability in Siemens SICAM GridEdge results from the fact that the affected software does not authenticate access to privileged functions, which can be exploited to creat...

9.8CVSS5.5AI score0.00689EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/06/14 12:0 a.m.4 views

Siemens SICAM GridEdge Essential 访问控制错误漏洞

SICAM GridEdge enables IoT functionality in your existing IEC61850 devices with just a few clicks.A source authentication error vulnerability in Siemens SICAM GridEdge is caused by the fact that the affected software does not apply cross-domain resource sharing CORS restrictions to critical...

8.8CVSS5.8AI score0.00147EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/05/13 1:34 a.m.24 views

Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch

Elasticsearch Security versions 6.4.0 to 6.4.2 contain an error in the way request headers are applied to requests when using the Active Directory, LDAP, Native, or File realms. A request may receive headers intended for another request if the same username is being authenticated concurrently; wh...

6.5CVSS1.6AI score0.00863EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:0 a.m.1 views

The vulnerability of the Elcomplus SmartPPT SCADA server, related to authentication errors, allows attackers to escalate their privileges.

The vulnerability of the Elcomplus SmartPPT SCADA server is related to authentication errors. Exploiting this vulnerability can allow attackers to increase their privileges...

8.8CVSS7.6AI score0.00073EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:0 a.m.1 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to incorrect authentication procedures, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to incorrect configuration of access rights for previously deleted users. Exploiting this vulnerability allows a malicious actor to compromise data integrity and cause service interruption...

5.4CVSS6AI score0.0031EPSS
Exploits0References6Affected Software1
Rows per page
Query Builder