Cisco Prime Collaboration Assurance Information Disclosure Vulnerability

Cisco Prime Collaboration Assurance is an enterprise collaboration network management solution. The solution supports simplified management of unified communications and video collaboration networks through a unified management console, as well as rapid deployment of communications sites. Cisco...

Cisco Content Security Management Appliance Security Bypass Vulnerability

The Cisco Content Security Management Appliance is a content security management appliance. The appliance is primarily used to manage all policies, reports, audit information, etc. for email and web security appliances. The Cisco Content Security Management Appliance fails to set authentication...

Authentication flaw

The HybridAuth Social Login module 7.x-2.x before 7.x-2.13 for Drupal allows remote attackers to bypass the user registration by administrator only configuration and create an account via a social login...

Authentication flaw

Apple OS X before 10.10.5 does not properly implement authentication, which allows local users to obtain admin privileges via unspecified vectors...

Authentication flaw

Foreman before 1.7.5 allows remote authenticated users to bypass organization and location restrictions by connecting through the REST API...

Authentication flaw

IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service disk consumption via a crafted byte sequence in authentication data, a different vulnerability than CVE-2015-1958 and CVE-2015-1987...

Authentication flaw

IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service CPU consumption via a crafted byte sequence in authentication data...

Authentication flaw

The management console in Symantec Endpoint Protection Manager SEPM 12.1 before 12.1-RU6-MP1 allows remote attackers to bypass authentication via a crafted password-reset action that triggers a new administrative session...

Research Artisan Lite Security Bypass Vulnerability

Research Artisan Lite is a set of tools developed by the Research Artisan project in Japan for statistical analysis of website visits. A security vulnerability exists in Research Artisan Lite prior to version 1.18, which is caused by the program failing to properly perform authentication. A remot...

Authentication flaw

Research Artisan Lite before 1.18 does not ensure that a user has authenticated, which allows remote attackers to perform unspecified actions via unknown vectors...

Authentication flaw

Siemens SICAM MIC devices with firmware before 2404 allow remote attackers to bypass authentication and obtain administrative access via unspecified HTTP requests...

Authentication flaw

interface/globals.php in OpenEMR 2.x, 3.x, and 4.x before 4.2.0 patch 2 allows remote attackers to bypass authentication and obtain sensitive information via an ignoreAuth=1 value to certain scripts, as demonstrated by 1 interface/fax/faxdispatchnewpid.php and 2 interface/billing/sleobsearch.php...

Authentication flaw

Admin Framework in Apple OS X before 10.10.4 does not properly verify XPC entitlements, which allows local users to bypass authentication and obtain admin privileges via unspecified vectors...

XWayland Arbitrary File Read Vulnerability

Wayland is a simple "display server. A security vulnerability in the authentication settings of XWayland version 1.16.x and version 1.17.x prior to 1.17.2 can be exploited by a local attacker to read information from or send information to any X11 client with the help of a UNIX socket...

CVE-2015-1330

unattended-upgrades before 0.86.1 does not properly authenticate packages when the 1 force-confold or 2 force-confnew dpkg options are enabled in the DPkg::Options:: apt configuration, which allows remote man-in-the-middle attackers to upload and execute arbitrary packages via unspecified vectors...

Authentication flaw

IBM PowerVC Standard Edition 1.2.2.1 through 1.2.2.2 does not require authentication for access to the Python interpreter with nova credentials, which allows KVM guest OS users to discover certain PowerVC credentials and bypass intended access restrictions via unspecified Python code...

postgresql: unanticipated errors from the standard library

It was discovered that PostgreSQL did not properly check the return values of certain standard library functions. If the system was in a state that would cause the standard library functions to fail for example, memory exhaustion, an authenticated user could possibly exploit this flaw to disclose...

Authentication flaw

The remote-support feature on Cisco Web Security Virtual Appliance WSAv, Email Security Virtual Appliance ESAv, and Security Management Virtual Appliance SMAv devices before 2015-06-25 uses the same default SSH root authorized key across different customers' installations, which makes it easier f...

DEBIAN-CVE-2015-4171

strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or pre-shared keys for authenticating an IKEv2 connection, does not enforce server authentication restrictions until the entire authentication process is complete, which allows remote servers to obtai...

Authentication flaw

IBM PowerVC 1.2.0.x through 1.2.0.4, 1.2.1.x through 1.2.1.2, and 1.2.2.x through 1.2.2.2 does not require authentication for the ceilometer NoSQL database, which allows remote attackers to read or write to arbitrary database records, and consequently obtain administrator privileges, via a sessio...