2861 matches found
Huawei HarmonyOS and EMUI Access Privilege Verification Vulnerability
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. Huawei HarmonyOS and EMUI are vulnerable to an access...
CVE-2024-7593
Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel...
Voltronic Power ViewPower Information Disclosure Vulnerability
Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. Voltronic Power ViewPower suffers from an information disclosure vulnerability that is caused by a lack of authentication before allowing access to functionality. An attacker could exploit the...
ROS-20240812-06
A vulnerability in GLPI's asset management and data center software is related to the The introduction of a malicious link by an unauthenticated user. Exploitation of the vulnerability could allow an attacker acting remotely to conduct an XSS attack Vulnerability in GLPI's request, incident and...
CVE-2024-6987 Orchid Store <= 1.5.6 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Activation
The Orchid Store theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'orchidstoreactivateplugin' function in all versions up to, and including, 1.5.6. This makes it possible for authenticated attackers, with Subscriber-level access and...
Huawei EMUI和Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. Huawei HarmonyOS and EMUI are vulnerable to an access...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. Huawei HarmonyOS and EMUI are vulnerable to an access...
The vulnerability of the Override View function in the Apache OFBiz resource planning software allows a hacker to execute arbitrary code.
The vulnerability of the Override View function in the Apache OFBiz enterprise resource planning software is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted requests remotely...
The vulnerability of the declarative delivery tool for GitOps on Kubernetes Argo CD, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.
The vulnerability of GitOps’ continuous delivery tool for Kubernetes Argo CD is related to deficiencies in the authentication process when handling the final endpoint /api/v1/settings. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the User InformationHandler component in the control panel of the software platform for integrating IBM App Connect Enterprise applications allows a perpetrator to obtain confidential calendar information using an access token with expired validity.
The vulnerability of the User Information Handler component in the software control panel for IBM App Connect Enterprise integration is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain confidential...
The vulnerability of the User InformationHandler component in the control panel of the software platform for integrating IBM App Connect Enterprise applications allows a perpetrator to obtain confidential calendar information using an access token with expired validity.
The vulnerability of the User Information Handler component in the software control panel for IBM App Connect Enterprise integration is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain confidential...
PT-2024-5590 · Neat Vnc +1 · Neat Vnc +1
Name of the Vulnerable Software and Affected Versions: Neat VNC versions prior to 0.8.1 Description: The issue is related to a flaw in the authentication procedure of the server.c file in the Neat VNC server library, which allows remote access to computers. This flaw can be exploited by a remote...
CVE-2024-7201
The login functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents...
The vulnerability of the Ivanti Endpoint Manager Mobile (EPMM) application for managing the lifecycle of mobile devices and mobile applications (formerly known as MobileIron Core) stems from authentication procedures that have flaws. This allows attackers to bypass the authentication process and gain access to confidential data.
The vulnerability of the Ivanti Endpoint Manager Mobile EPMM application for managing the lifecycle of mobile devices and mobile applications formerly known as MobileIron Core is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to...
The vulnerability of the corporate version of the GitHub Enterprise Server, related to the improper implementation of authentication algorithms, allows a perpetrator to gain full administrative privileges and access to the system.
The vulnerability of the corporate version of the GitHub Enterprise Server is related to the improper implementation of the authentication algorithm. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full access to the system with administrator privileges...
WordPress Duplica plugin <= 0.6 - Authenticated (Subscriber+) Missing Authorization to Users/Posts Duplicates Creation vulnerability
Authenticated Subscriber+ Missing Authorization to Users/Posts Duplicates Creation vulnerability discovered by Lucio Sá in WordPress Plugin Duplica versions = 0.6...
CVE-2023-4976
CVE-2023-4976 affects Pure FlashBlade. The flaw allows a local account to authenticate to the FlashBlade management interface via an unintended method, enabling privileged access to the array. The available sources (NVD/Red Hat) describe the impact as high confidentiality, integrity, and availabi...
PT-2024-5066
Name of the Vulnerable Software and Affected Versions: Cisco Smart Software Manager On-Prem versions 8-202206 and earlier Description: A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to change the password of any...
PT-2024-13796 · Unknown · Purity//Fb
Name of the Vulnerable Software and Affected Versions: Purity//FB affected versions not specified Description: A flaw in the authentication mechanism allows a local account to access the management interface using an unintended method, potentially granting an attacker privileged access to the...
The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to improper authentication, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to incorrect authentication. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...