ALPINE-CVE-2019-14907

All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" or above then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP...

Authentication flaw

Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.0-1.3 allows a local, unauthenticated attacker to pair a rogue keypad to an armed system...

The vulnerability of the server management application for CentOS Web Panel stems from authentication procedures that have flaws, allowing attackers to escalate their privileges.

The vulnerability of the CentOS Web Panel server management application is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...

Authentication flaw

stb stbtruetype.h through 1.22 has an assertion failure in stbttbufseek...

Design/Logic Flaw

CA Automic Sysload 5.6.0 through 6.1.2 contains a vulnerability, related to a lack of authentication on the File Server port, that potentially allows remote attackers to execute arbitrary commands...

The vulnerability of the D-Link DIR-412 A1-1.14WW router’s microprogramming software, related to authentication deficiencies, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the D-Link DIR-412 A1-1.14WW router’s microprogramming software is related to authentication deficiencies. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Authentication flaw

A vulnerability in the application environment of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to gain unauthorized access to the JBoss Enterprise Application Platform JBoss EAP on an affected device. The vulnerability is due to an incorrect configuration o...

Authentication flaw

An authentication bypass exists in the web management interface in Belkin F5D8236-4 v2...

NeuVector Authentication Vulnerability

NeuVector is an end-to-end container security platform from US-based NeuVector. The platform includes features such as image vulnerability management, access control and container process/filesystem protection. A security vulnerability exists in NeuVector version 3.1. The vulnerability can be...

The vulnerability of the ABB eSOMS software for managing production processes is related to the improper functioning of the authentication mechanism, allowing an intruder to gain unauthorized access to the system.

The vulnerability of the ABB eSOMS production process management software is related to the improper operation of the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the system. This occurs when LDAP is configured f...

Authentication flaw

An authentication issue was addressed with improved state management. This issue is fixed in tvOS 13. A local user may be able to leak sensitive user information...

Authentication flaw

The WorkflowResource class removeStatus method in Jira before version 7.13.12, from version 8.0.0 before version 8.4.3, and from version 8.5.0 before version 8.5.2 allows authenticated remote attackers who do not have project administration access to remove a configured issue status from a projec...

The vulnerability of the configuration parameters of McAfee Data Loss Prevention Endpoint for Windows allows a perpetrator to circumvent existing security restrictions and gain access to user sessions.

The vulnerability of the configuration parameters of McAfee Data Loss Prevention Endpoint for Windows-related endpoints is related to incorrect authentication. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions and gain access to user sessions...

Authentication flaw

All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the S4U MS-SFU Kerberos delegation model includes a feature allowing for a subset of clients to be opted out of constrained delegation in any way, either S4U2Self or regular Kerberos...

Authentication flaw

Monkey HTTP Daemon: broken user name authentication...

CVE-2019-17387

An authentication flaw in the AVPNCRP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated privileges through arbitrary code execution on Windows, Linux, and macOS...

CVE-2019-17387

Aviatrix VPN Client AVPNC_RP service (versions up to 2.2.10) contains an authentication flaw that allows local attackers to execute arbitrary code and escalate privileges on Windows, Linux, and macOS. The vulnerability is described as a local privilege escalation via an authentication weakness, w...

Authentication flaw

An improper authentication check in Palo Alto Networks PAN-OS may allow an authenticated low privileged non-superuser custom role user to elevate privileges and become superuser. This issue affects PAN-OS 7.1 versions prior to 7.1.25; 8.0 versions prior to 8.0.20; 8.1 versions prior to 8.1.11; 9....

CVE-2019-17387

An authentication flaw in the AVPNCRP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated privileges through arbitrary code execution on Windows, Linux, and macOS. Recent assessments: kevthehermit at March 05, 2020 9:39am UTC reported: VPN clients are commonly found ...

CVE-2019-25066

creationtimestamp| type| source ---|---|--- 2019-12-01 16:21:16+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/ajentiauthusernamecmdinjection.rb 2022-06-09 20:33:27+00:00| seen| https://t.me/cibsecurity/44116 2025-10-23 21:12:58+00:00| seen|...