CVE-2016-7836

SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program...

PT-2017-9387

Name of the Vulnerable Software and Affected Versions SKYSEA Client View versions 11.221.03 and earlier Description The issue allows remote code execution due to a flaw in processing authentication on the TCP connection with the management console program. Recommendations For versions 11.221.03 a...

Authentication flaw

Blue Coat Advanced Secure Gateway 6.6, CacheFlow 3.4, ProxySG 6.5 and 6.6 allows remote attackers to bypass blocked requests, user authentication, and payload scanning...

My NJ Client APP has an overstepping vulnerability

My Nanjing Client APP is a city-level public service mobile application that integrates all kinds of living information in Nanjing. There is a vulnerability in the authentication mechanism of the social security payment query function of My Nanjing Client APP, which allows an attacker to view the...

Authentication flaw

The Toshiba FlashAir SD-WD/WC series Class 6 model with firmware version 1.00.04 and later, FlashAir SD-WD/WC series Class 10 model W-02 with firmware version 2.00.02 and later, FlashAir SD-WE series Class 10 model W-03, FlashAir Class 6 model with firmware version 1.00.04 and later, FlashAir II...

Authentication flaw

An Improper Authentication issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may be able to gain unauthorized access to the user firewall when RADIUS servers are unreachable...

PUMA PUMATRAC app for iOS Authentication Vulnerability

PUMA PUMATRAC app for iOS is a running management app from Puma Germany. The program has features such as recording running distance, speed and calories burned. An authentication vulnerability exists in version 3.0.2 of the PUMA PUMATRAC app for iOS, which stems from the program's failure to...

Life Before Us Yo app for iOS Authentication Vulnerability

Life Before Us Yo app for iOS is an iOS based social mobile application developed by Yo Inc. An authentication vulnerability exists in version 2.5.8 of the Life Before Us Yo app for iOS, which stems from the program failing to validate an X.509 certificate on the server side of an SSL server. The...

Detcon SiteWatch Gateway Authentication Vulnerability

Detcon SiteWatch Gateway is a gateway device from Detcon. An authentication vulnerability exists in Detcon SiteWatch Gateway. The vulnerability can be exploited by an attacker to change settings via a specially crafted URL...

Authentication flaw

Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Workflow and the "MultiReport" function to alter or delete information via unspecified vectors...

Authentication flaw

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious attacker to compromise the systems confidentiality or integrity without authentication, leading to managed systems being compromised or services being denied to authent...

Authentication flaw

An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious, network based, unauthenticated attacker to perform privileged actions to gain complete control over the environment...

Authentication flaw

Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restrictions to view the names of unauthorized projects via a breadcrumb trail...

Authentication flaw

Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restriction to view unauthorized project information via the Project function...

Authentication flaw

Summer Baby Zoom Wifi Monitor & Internet Viewing System allows remote attackers to bypass authentication, related to the MySnapCam web service...

CVE-2016-9196

A vulnerability in login authentication management in Cisco Aironet 1800, 2800, and 3800 Series Access Point platforms could allow an authenticated, local attacker to gain unrestricted root access to the underlying Linux operating system. The root Linux shell is provided for advanced...

VMSA-2010-0020 : VMware ESXi 4.1 Update Installer SFCB Authentication Flaw

a. ESXi 4.1 Update Installer SFCB Authentication Flaw Under certain conditions, the ESXi 4.1 installer that upgrades an ESXi 3.5 or ESXi 4.0 host to ESXi 4.1 incorrectly handles the SFCB authentication mode. The result is that SFCB authentication could allow login with any username and password...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the DCOM application in Windows operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to enhance their privileges by using a specially created application...

Authentication flaw

Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.1.2, 9.0.6, and 8.2.9 suffer from SMB User Authentication Bypass. Nextcloud/ownCloud include an optional and not by default enabled SMB authentication component that allows authenticating users against an SMB server. This backen...

Authentication flaw

The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a " double quote character and a command substitution metacharacter...