2861 matches found
The vulnerability of the Continuous Integration and Deployment Application Delivery system (CI/CD) of JetBrains TeamCity, which allows a hacker to access confidential information
The vulnerability of the Continuous Integration and Application Delivery system CI/CD of JetBrains TeamCity is related to incorrect authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to access confidential information...
CVE-2022-24400
A flaw in the TETRA authentication procecure allows a MITM adversary that can predict the MS challenge RAND2 to set session key DCK to zero...
CVE-2024-2860
The PostgreSQL implementation in Brocade SANnav versions before 2.3.0a is vulnerable to an incorrect local authentication flaw. An attacker accessing the VM where the Brocade SANnav is installed can gain access to sensitive data inside the PostgreSQL database...
CVE-2024-0795
If an attacked was given access to an instance with the admin or manager role there is no backend authentication that would prevent the attacked from creating a new user with an admin role and then be able to use this new account to have elevated privileges on the instance...
The vulnerability of the Diff module in the Drupal system, related to incorrect authentication procedures, allows attackers to access confidential information.
The vulnerability of the Diff module in the Drupal system is related to incorrect authentication procedures. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information...
ChargePoint Home Flex 安全漏洞
ChargePoint Home Flex is a series of electric vehicle charging devices from ChargePoint USA. A security vulnerability exists in ChargePoint Home Flex that stems from a lack of proper authentication before executing a system call using a user-supplied string. An attacker exploiting this...
The vulnerability of the JSON-RPC API function of the Cisco Crosswork Network Services Orchestrator (NSO) and ConfD software, which is used by the web-based management interfaces for Cisco Optical Site Manager and Gigabit VPN routers Cisco RV340 Dual WAN, allows a malicious actor to escalate their privileges.
The vulnerability of the JSON-RPC API function of the Cisco Crosswork Network Services Orchestrator NSO and ConfD software, which is used by the Cisco Optical Site Manager and Gigabit VPN routers Cisco RV340 Dual WAN control web interfaces, is related to incorrect authentication checks in the API...
The vulnerability of the Commerce View Receipt module in the Drupal CMS system, related to deficiencies in the authentication process, allows attackers to circumvent security restrictions and execute a Forceful Browsing attack.
The vulnerability of the Commerce View Receipt module in the Drupal CMS system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute a Forceful Browsing attack...
Advisory ROSA-SA-2025-2585
software: xorgxrdp 0.10.2 OS: ROSA-CHROME packageevrstring: xorgxrdp-0.10.2-1 CVE-ID: CVE-2024-39917 BDU-ID: 2024-10780 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the authentication mechanism of the XRDP remote access tool is related to a flaw in the limitation of authentication attempts...
PT-2025-5312 · Apple · Ios +1
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.3 iPadOS versions prior to 18.3 Description: An authentication issue was addressed with improved state management. An attacker with physical access to an unlocked device may be able to access Photos while the app is...
The vulnerability of the Windows operating system’s Network Authentication Protocol NTLM implementation allows a perpetrator to compromise the confidentiality of protected information.
The vulnerability of the Windows operating system’s Network Authentication Protocol NTLM implementation is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to compromise the confidentiality of the protected information...
The vulnerability of the IBM Security ReaQta information protection tool lies in its authentication procedures’ flaws, which allow attackers to disclose the protected information.
The vulnerability of the IBM Security ReaQta security tool is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...
The vulnerability of the graphical interface of the Fortinet FortiManager software, a centralized device management system, allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the graphical interface of the Fortinet FortiManager device management software is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to gain unauthorized access to protected information...
Debian dla-4021 : 389-ds - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4021 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4021-1 [email protected]...
The vulnerability of the authentication mechanism for microprogramming software on the Tenda AC1200 Smart router allows a intruder to gain unauthorized access to the device.
The vulnerability of the authentication mechanism for Tenda AC1200 Smart microprogramming software is related to the lack of necessary checks during password changes. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the device by sending a...
The vulnerability of the Open Social CMS system’s Drupal module, related to deficiencies in authentication procedures, allows attackers to circumvent security restrictions and execute a forced browsing attack.
The vulnerability of the Open Social CMS system, Drupal, is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute a Forceful Browsing attack...
Advisory ROSA-SA-2025-2555
Software: cups 1.6.3 OS: rosa-server79 packageevrstring: cups-1.6.3-52.res7 CVE-ID: CVE-2023-32360 BDU-ID: 2023-07653 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the CUPS print server is related to flaws in the authentication procedure. Exploitation of the vulnerability could allow an attacker...
CVE-2024-56511 DataEase has an unauthorized vulnerability
DataEase is an open source data visualization analysis tool. Prior to 2.10.4, there is a flaw in the authentication in the io.dataease.auth.filter.TokenFilter class, which can be bypassed and cause the risk of unauthorized access. In the io.dataease.auth.filter.TokenFilter class,...
CVE-2024-56511 DataEase has an unauthorized vulnerability
DataEase is an open source data visualization analysis tool. Prior to 2.10.4, there is a flaw in the authentication in the io.dataease.auth.filter.TokenFilter class, which can be bypassed and cause the risk of unauthorized access. In the io.dataease.auth.filter.TokenFilter class,...
CVE-2024-56511
DataEase CVE-2024-56511 affects DataEase prior to version 2.10.4. The root cause is a weakness in authentication in io.dataease.auth.filter.TokenFilter where request.getRequestURI is passed to WhitelistUtils.match to decide non-authenticated interfaces; the current whitelist filtering of semicolo...