The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems, PHOENIX CONTACT WP 6xxx, is related to deficiencies in authentication procedures, allowing unauthorized individuals to gain unauthorized access to the device.

The vulnerability of microprogrammed software in web panels for controlling and monitoring processes in industrial systems, such as PHOENIX CONTACT WP 6xxx, is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

The vulnerability of microprogramming software in web panels for managing and monitoring processes in industrial systems, PHOENIX CONTACT WP 6xxx, is related to deficiencies in authentication procedures. This allows attackers to compromise the integrity and accessibility of protected information.

The vulnerability of microprogramming software in web panels for managing and monitoring processes in industrial systems, such as PHOENIX CONTACT WP 6xxx, is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to compromise the integri...

The vulnerability of the SED software “DELO” stems from deficiencies in the authentication process, allowing a perpetrator to intercept the identifier and bypass the authentication mechanism.

The vulnerability of the SED software “DELO” is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to intercept the identifier and bypass the authentication mechanism...

The vulnerability of the SAP Host Agent, a software tool for managing product lifecycles, stems from deficiencies in the authentication process. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the SAP Product Lifecycle Management Software, SAP Host Agent, is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the cloud-based messaging and streaming transmission platform Apache Pulsar, related to authentication deficiencies, allows attackers to gain access to the configuration of the cloud-based platform.

The vulnerability of the cloud-based messaging and streaming communication platform Apache Pulsar is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the configuration of the cloud-based platfo...

The vulnerability of the endpoint management application for mobile devices and mobile applications, Ivanti Endpoint Manager Mobile (EPMM) (formerly MobileIron Core), is related to authentication procedures that lack sufficient safeguards. This allows attackers to escalate their privileges.

The vulnerability of the Ivanti Endpoint Manager Mobile EPMM application for managing the lifecycle of mobile devices and mobile applications formerly known as MobileIron Core is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to...

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory processes, related to deficiencies in authentication procedures, allows attackers to disclose protected information.

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers, operating remotely, to disclose sensitive information that should be protected...

The vulnerability of the IBM Robotic Process Automation software lies in its authentication procedures’ flaws, which allow attackers to gain read, modify, or delete access to data.

The vulnerability of the IBM Robotic Process Automation software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to read, modify, or delete data...

The vulnerability of the application software interface of the Cisco Catalyst SD-WAN Manager allows a attacker to disclose sensitive information or alter the configuration of the Cisco Catalyst SD-WAN Manager instances.

The vulnerability of the application software interface of the Cisco Catalyst SD-WAN Manager is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information or alter the configuration of the Cisco Catalyst...

The vulnerability of TeamViewer Remote software for remote control of computers lies in its authentication procedures’ flaws, which allow attackers to alter the basic settings of the local device.

The vulnerability of the TeamViewer Remote software for remote control is related to deficiencies in the authentication process. Exploiting this vulnerability allows a hacker to alter the basic settings of the local device...

The vulnerability of the built-in software of the ARIS controller is related to deficiencies in the authentication process, allowing a perpetrator to execute arbitrary code.

The vulnerability of the built-in software of the ARIS controller is related to deficiencies in the authentication process, allowing a perpetrator to execute arbitrary code using a specially crafted request...

The vulnerability in the web interface for managing D-Link DIR-2640-US microprogramming software allows a hacker to bypass security restrictions.

The vulnerability of the web interface for managing D-Link DIR-2640-US microprogramming devices is related to deficiencies in the authentication process when processing requests containing XML elements. Exploiting this vulnerability can allow a malicious actor to circumvent security restrictions...

The vulnerabilities of microprogrammed software in Nexx Garage Door Controllers (NXG-100B, NXG-200), Nexx Smart Plugs (NXPG-100W), and Nexx Smart Alarms (NXAL-100) stem from authentication procedures that have flaws. This allows intruders to register a signal that has already been registered by the device.

The vulnerabilities of the microprogrammed software of the Nexx Garage Door Controller NXG-100B, NXG-200, Nexx Smart Plug NXPG-100W, and Nexx Smart Alarm NXAL-100 are related to deficiencies in authentication procedures. Exploiting these vulnerabilities could allow an attacker, operating remotely...

The vulnerability in the web interface of the Cisco Modeling Labs network modeling tool allows a hacker to gain administrator privileges.

The vulnerability of the Cisco Modeling Labs network modeling tool’s web interface is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain access to the web interface with administrator privileges...

The vulnerability of Moxa NPort asynchronous server’s microprogramming software, related to deficiencies in authentication procedures, allows attackers to execute arbitrary code.

The vulnerability of Moxa NPort asynchronous server microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...

CVE-2023-1414 WP VR < 8.3.0 - Subscriber+ Arbitrary Tour Update

The WP VR WordPress plugin before 8.3.0 does not have authorisation and CSRF checks in various AJAX actions, one in particular could allow any authenticated users, such as subscriber to update arbitrary tours...

The vulnerability of the admin.html page of the P5E GNSS satellite receiver’s microprogramming software allows a hacker to bypass the administrator password.

The vulnerability of the admin.html page of the P5E GNSS satellite receiver’s microprogrammed software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to remotely compromise the administrator’s password...

The vulnerability of Merten KNX programmable logic controllers is related to deficiencies in authentication procedures, allowing attackers to gain access to the devices.

The vulnerability of Merten KNX programmable logic controllers is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the device...

The vulnerability of the client request handler of the security access control system, IED Siemens RUGGEDCOM CROSSBOW, allows a perpetrator to perform arbitrary actions.

The vulnerability of the client request handler of the Siemens RUGGEDCOM CROSSBOW access control system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions remotely...

The vulnerability of the monitoring system for critical equipment, StruxureWare Data Center Expert, is related to deficiencies in authentication procedures. This allows unauthorized users to perform unauthorized functions, modify or delete arbitrary content.

The vulnerability of the StruxureWare Data Center Expert monitoring system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to perform unauthorized functions, modify or delete arbitrary content...