360 F5 Input Validation Error Vulnerability

The 360 F5 is a smartphone device from the Chinese company 360. The 360F5 3.1.3.64296 and lower suffers from an Input Authentication Error vulnerability that stems from a specific illegal 802.11 Null Data Frame, which causes other wireless terminals to disconnect from the wireless connection in...

PT-2020-5611 · Apple · Icloud +6

Name of the Vulnerable Software and Affected Versions: Apple iCloud versions prior to 7.19 and prior to 11.2 Apple iTunes versions prior to 12.10.7 Apple Safari versions prior to 13.1.1 Apple iPadOS versions prior to 13.5 Apple iPhoneOS versions prior to 13.5 Apple tvOS versions prior to 13.4.8...

PrestaShop Authorization Issues Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. PrestaShop suffers from an authorization issue vulnerability that originates from an...

docker-engine docker-cli security update

docker-engine 19.03.11-1.0.0 - update to 19.03.11 for CVE-2020-13401 19.03.1-1.0.0 - update to 19.03.1 19.03-0.0.1 - update to 19.03 18.09.1-1.0.6 - disable kmem accounting for UEKR4 18.09.1-1.0.5 - apply e4931e664feac6fa8846f3f04268a0cc98822549, fixes CVE-2019-5736 18.09.1-1.0.4 - fix...

CVE-2020-13998

Citrix XenApp 6.5, when 2FA is enabled, allows a remote unauthenticated attacker to ascertain whether a user exists on the server, because the 2FA error page only occurs after a valid username is entered. NOTE: This vulnerability only affects products that are no longer supported by the maintaine...

The vulnerability of the Astra Linux Directory service’s EPPT management system, related to improper authorization, allows a perpetrator to access confidential data and also trigger a service failure.

The vulnerability of the Astra Linux Directory Service Management System ALD is related to an authentication error for local users. Exploiting this vulnerability can allow attackers to access confidential data and also cause service failures...

The vulnerability of the class-wp-rest-posts-controller function in the WordPress content management system, related to insecure privilege management, allows attackers to compromise data integrity.

The vulnerability of the class-wp-rest-posts-controller function in the WordPress content management system is related to an authentication error that allowed users to mark messages as fixed through the REST API. Exploiting this vulnerability could enable a malicious actor to compromise data...

The vulnerability of the Ceph storage system, related to an authentication process error, allows a perpetrator to gain unauthorized access to the encryption keys for dm-crypt.

The vulnerability of the Ceph storage system is related to an authentication process error. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the encryption keys used for dm-crypt...

CVE-2020-5263

auth0.js NPM package auth0-js greater than version 8.0.0 and before version 9.12.3 has a vulnerability. In the case of an authentication error, the error object returned by the library contains the original request of the user, which may include the plaintext password the user entered. If the err...

CVE-2020-5263

The CVE-2020-5263 entry concerns the Auth0.js (NPM package auth0-js) library. Affected versions are greater than 8.0.0 and before 9.12.3, where an authentication error returns an error object that may contain the user’s original request, potentially exposing the plaintext password if logged or ex...

October 2016 Preview of Monthly Quality Rollup for Windows Server 2012

October 2016 Preview of Monthly Quality Rollup for Windows Server 2012 The October 2016 Preview of Monthly Quality Rollup includes improvements and fixes for the Windows Server 2012 platform. We recommend that you apply this quality rollup as part of your regular maintenance routines. Improvement...

The vulnerability of the HNAP microprogramming software implementation for D-Link DAP-1330 wireless routers allows a hacker to execute arbitrary code.

The vulnerability of the HNAP microprogramming software for D-Link DAP-1330 wireless routers is related to errors in the implementation of the authentication algorithm. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Intel Optane DC Persistent Memory Module Management Software Authentication Error Vulnerability

Intel Graphics Drivers is an integrated graphics driver from Intel USA. A security vulnerability exists in versions prior to Intel Optane DC Persistent Memory Module Management Software 1.0.0.3461. A local attacker can exploit the vulnerability to elevate privileges...

The vulnerability of the FTP file transfer protocol in Firefox browsers allows a hacker to induce a service failure.

The vulnerability of the FTP file transfer protocol in Firefox browsers is related to an authentication error that occurs when modal pop-ups are displayed. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of SAP Leasing software, related to authentication errors, allows a perpetrator to increase their privileges.

The vulnerability of SAP Leasing software is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

CVE-2011-4322

websitebaker prior to and including 2.8.1 has an authentication error in backup module...

Design/Logic Flaw

websitebaker prior to and including 2.8.1 has an authentication error in backup module...

CVE-2011-4322

websitebaker prior to and including 2.8.1 has an authentication error in backup module...

CVE-2011-4322

Technical details about CVE-2011-4322 are not publicly available in the provided connected documents. The materials only reiterate an authentication error in websitebaker's backup module through version 2.8.1. Monitor for updates.

The vulnerability of the microprogrammed software of Cisco Small Business RV016, Cisco Small Business RV042, Cisco Small Business RV042G, and Cisco Small Business RV082 is related to authentication errors, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of Cisco Small Business RV016, Cisco Small Business RV042, Cisco Small Business RV042G, and Cisco Small Business RV082 microprogrammed software routers is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...