Authentication flaw

A vulnerability has been identified in SIMATIC PCS 7 V8.2 All versions, SIMATIC PCS 7 V9.0 All versions V9.0 SP3 UC04, SIMATIC PCS 7 V9.1 All versions V9.1 SP1, SIMATIC WinCC V15 and earlier All versions V15 SP1 Update 7, SIMATIC WinCC V16 All versions V16 Update 5, SIMATIC WinCC V17 All versions...

UBUNTU-CVE-2016-2124

A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required...

Authentication flaw

The Simple Download Monitor WordPress plugin before 3.9.6 saves logs in a predictable location, and does not have any authentication or authorisation in place to prevent unauthenticated users to download and read the logs containing Sensitive Information such as IP Addresses and Usernames...

GNU Hurd 授权问题漏洞

Gnu Hurd is a Gnu project replacement for the Unix kernel. It is used to implement the file system, network protocols, file access control, and other features implemented by the Unix kernel or similar kernels such as Linux. GNU Hurd suffers from a security vulnerability that stems from the use of...

PT-2021-23841 · Gnu Hurd · Gnu Hurd

Name of the Vulnerable Software and Affected Versions: GNU Hurd versions prior to 0.9 20210404-9 Description: An issue in the authentication protocol used by the proc server makes it vulnerable to man-in-the-middle attacks. This can be exploited for local privilege escalation, allowing attackers ...

Authentication flaw

An issue was discovered in Talend Data Catalog before 7.3-20210930. After setting up SAML/OAuth, authentication is not correctly enforced on the native login page. Any valid user from the SAML/OAuth provider can be used as the username with an arbitrary password, and login will succeed...

Authentication flaw

Improper authentication in Samsung Pass prior to 3.0.02.4 allows to use app without authentication when lockscreen is unlocked...

Authentication flaw

Lack of email address ownership verification in the CODEOWNERS feature in all versions of GitLab EE starting from 11.3 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 allows an attacker to bypass CODEOWNERS Merge Request approval...

Apache Traffic Server 授权问题漏洞

Apache Traffic Server, referred to as ATS or TS, is a high-performance, modular HTTP proxy and caching server. an improper authentication vulnerability exists in TLS source authentication in Apache Traffic Server versions 8.0.0-8.0.8. An attacker could exploit the vulnerability to conduct a...

The vulnerability of the command-line utility package util-linux relates to deficiencies in access control during user authentication. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the util-linux command-line utility package is related to deficiencies in access control during user authentication. Exploiting this vulnerability can allow attackers to gain access to confidential data, compromise its integrity, and cause service failures...

Ubuntu 18.04 LTS : Ceph vulnerabilities (USN-5128-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5128-1 advisory. Goutham Pacha Ravi, Jahson Babel, and John Garbutt discovered that user credentials in Ceph could be manipulated in certain environments. An attacker cou...

Authentication flaw

Several web interfaces in D-Link DIR-868LW 1.12b have no authentication requirements for access, allowing for attackers to obtain users' DNS query history...

Authentication flaw

Nextcloud is an open-source, self-hosted productivity platform. Prior to Nextcloud Server versions 20.0.13, 21.0.5, and 22.2.0, the Two-Factor Authentication wasn't enforced for pages marked as public. Any page marked as @PublicPage could thus be accessed with a valid user session that isn't...

CVE-2020-23058

An issue in the authentication mechanism in Nong Ge File Explorer v1.4 unauthenticated allows to access sensitive data...

CVE-2020-23058

CVE-2020-23058 describes an authentication flaw in Nong Ge File Explorer v1.4 that allows unauthenticated access to sensitive data . The root cause, per the connected records, is a weakness in the authentication mechanism. Multiple sources (including Red Hat and NVD entries) corroborate the same ...

Authentication flaw

The server permits communication without any authentication procedure, allowing the attacker to initiate a session with the server without providing any form of authentication...

Nong Ge File Explorer 授权问题漏洞

Nong Ge File Explorer is a privacy application by Nong Ge Personal Developer for organizing and viewing all files on your Iphone or Ipad. A security vulnerability exists in Nong Ge File Explorer that stems from an issue with the authentication mechanism that allows access to sensitive data withou...

Authentication flaw

BubblewrapLauncher.cpp in WebKitGTK and WPE WebKit before 2.34.1 allows a limited sandbox bypass that allows a sandboxed process to trick host processes into thinking the sandboxed process is not confined by the sandbox, by abusing VFS syscalls that manipulate its filesystem namespace. The impact...

CVE-2021-38476

InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 authentication process response indicates and validates the existence of a username. This may allow an attacker to enumerate different user accounts...

Authentication flaw

A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager versions: ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for...