301 matches found
The vulnerability of the Microsoft Team Foundation Server software, related to errors in the authentication process, allows a violator to execute arbitrary commands.
The vulnerability of the Microsoft Team Foundation Server TFS exists due to the lack of basic authentication when exchanging data between the software platform and the search service. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
The vulnerability of the FortiOS operating system, caused by errors in authentication mechanisms, allows a perpetrator to gain unauthorized access to the ZebOS shell.
The vulnerability of the FortiOS operating system is caused by errors in the authentication mechanism. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the ZebOS shell...
The vulnerability of the web interface of the EMG12 Ethernet Modbus Gateway allows a intruder to execute arbitrary code.
The vulnerability of the web interface of the EMG12 Ethernet Modbus Gateway arises from errors in the authentication mechanism. Operating the system allows a malicious actor to bypass the authentication mechanism and execute arbitrary code using a specially crafted URI...
The vulnerability of the EAFS_BCA_BUSOPR_SEPA function in the SAP Enterprise Financial Services software platform, which allows a perpetrator to enhance their privileges.
The vulnerability of the EAFSBCABUSOPRSEPA function in the SAP Enterprise Financial Services software platform is related to authentication process errors. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...
The vulnerability of the EAFS_BCA_BUSOPR_2 function in the SAP Enterprise Financial Services software platform, which allows attackers to enhance their privileges.
The vulnerability of the EAFSBCABUSOPR2 function in the SAP Enterprise Financial Services software platform is related to errors in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...
WS-2018-0630
“cockroachdb/cockroach” vbeta-20161027 to v2.1.0-beta.20181008 are vulnerable against user enumeration as a result of different authentication errors...
The vulnerability of the iOS operating system, which allows a hacker to bypass existing authentication policies
The vulnerability of the Accounts component in the iOS operating system is related to authentication errors. Exploiting this vulnerability allows a malicious actor to circumvent existing authentication policies by exploiting errors in the application uninstallation process...
MS16-110: Description of the security update for Windows: September 13, 2016
None None...
CURL-CVE-2016-5420 Reusing connections with wrong client cert
libcurl did not consider client certificates when reusing TLS connections. libcurl supports reuse of established connections for subsequent requests. It does this by keeping a few previous connections "alive" in a connection pool so that a subsequent request that can use one of them instead of...
CVE-2016-5797
Tollgrade LightHouse SMS before 5.1 patch 3 provides different error messages for failed authentication attempts depending on whether the username exists, which allows remote attackers to enumerate account names via a series of attempts...
The vulnerability of the Mac OS X operating system, which allows a hacker to increase their privileges
The vulnerability of the Mac OS X operating system is caused by authentication errors during new sessions. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges...
PT-2016-1058
Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.1 Description The issue is caused by authentication errors during new sessions. It may allow a local attacker to elevate their privileges. The estimated number of potentially affected devices worldwide is not...
PT-2015-6270
Name of the Vulnerable Software and Affected Versions Admin Framework in Apple OS X versions prior to 10.10.4 Description The issue is related to the improper handling of authentication errors by the Admin Framework, allowing local users to gain admin privileges. Recommendations For Apple OS X...
Debian DSA-2979-1 : fail2ban - security update
Two vulnerabilities were discovered in Fail2ban, a solution to ban hosts that cause multiple authentication errors. When using Fail2ban to monitor Postfix or Cyrus IMAP logs, improper input validation in log parsing could enable a remote attacker to trigger an IP ban on arbitrary addresses,...
DSA-2979-1 fail2ban - security update
Bulletin has no description...
Telepark.wiki Multiple Vulnerabilities
This host is running Telepark wiki and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbteleparkwikimultvuln.nasl 4892 2016-12-30 15:39:07Z teissa $ Telepark.wiki Multiple Vulnerabilities Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone Networks GmbH,...
CVE-2006-2976
Unspecified vulnerability in usermgr.php in Coppermine Photo Gallery before 1.4.7 has unknown impact and remote attack vectors, possibly related to authorization/authentication errors...
CVE-2006-2976
CVE-2006-2976 affects Coppermine Photo Gallery, specifically the file usermgr.php, with the vulnerability present in releases prior to 1.4.7. The available documents describe an unspecified vulnerability with unknown impact and remote attack vectors, potentially tied to authorization/authenticati...
