The vulnerability of SCADA systems with integrated web servers, related to deficiencies in authentication procedures, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of SCADA systems with integrated web servers relates to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the IBM QRadar SIEM system for event collection and analysis, related to authentication procedures that allow unauthorized access by attackers to protected information.

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of iOS operating systems, related to deficiencies in authentication procedures, allows a perpetrator to activate the Apple Pay transaction card on a locked or drained phone.

The vulnerability of iOS operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to enable the Apple Pay payment card on a locked or drained phone using a static 15-byte string...

The vulnerabilities of the Azure Active Directory (AAD) identity management and protection platform, the Azure Automation service, the Azure Site Recovery disaster recovery tool, and the Azure Migrate data transfer service are related to authentication process flaws, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of the Azure Active Directory AAD identity management and protection platform, the Azure Automation service, the Azure Site Recovery disaster recovery tool, and the Azure Migrate data transfer service are related to authentication process flaws. Exploiting these vulnerabilitie...

The vulnerability of the Brocade Fabric OS operating system, related to deficiencies in authentication procedures, allows attackers to gain access to the system.

The vulnerability of the Brocade Fabric OS operating system is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to gain access to the system via telnet, SSH, or REST...

The vulnerability of the Content Library component of the VMware vCenter Server management tool allows a attacker to gain unauthorized access to protected information.

The vulnerability of the Content Library component in the VMware vCenter Server management tool is related to deficiencies in the authentication mechanism for end points. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information by sending a...

The vulnerability in the web interface of the Cisco BroadWorks CommPilot Application Software allows a hacker to delete arbitrary user accounts.

The vulnerability of the Cisco BroadWorks CommPilot Application Software’s web interface is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to delete arbitrary user accounts remotely...

The vulnerabilities of the Azure Active Directory Connect Provisioning Agent and Azure Active Directory Connect, related to authentication mechanism flaws, allow attackers to bypass security measures.

The vulnerability of the Azure Active Directory Connect Provisioning Agent and Azure Active Directory Connect lies in the authentication mechanism’s flaws. Exploiting this vulnerability can allow attackers to bypass security measures...

The vulnerabilities of BIG-IP’s access control and remote authentication mechanisms (LTM, AAM, AFM, Analytics, APM, ASM, DNS, FPS, GTM, Link Controller, PEM) are related to the lack of protective measures for the website structure. This allows attackers to carry out cross-site scripting attacks.

The vulnerabilities of BIG-IP access control and remote authentication mechanisms LTM, AAM, AFM, Analytics, APM, ASM, DNS, FPS, GTM, Link Controller, PEM are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to perfor...

B. Braun Infusomat Pumps Could Let Attackers Remotely Alter Medication Dosages

Cybersecurity researchers have disclosed five previously unreported security vulnerabilities affecting B. Braun's Infusomat Space Large Volume Pump and SpaceStation that could be abused by malicious parties to tamper with medication doses without any prior authentication. McAfee, which discovered...

Intel Ethernet Controllers 输入验证错误漏洞

Intel Ethernet Controllers is an Ethernet controller from Intel Corporation USA. A security vulnerability exists in the Intel Ethernet Controllers X722 and 800 series, which stems from incorrect input authentication in the Linux RMDA driver. The vulnerability could allow an authenticated user to...

Multiple vulnerabilities in the HTTPd daemon of the microprogrammed Netgear DGN2200v router software, allowing a hacker to execute arbitrary code.

The multiple vulnerabilities of the HTTPd daemon of the microprogrammed Netgear DGN2200v router software are related to deficiencies in authentication procedures. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code...

The vulnerability of the HBS 3 (Hybrid Backup Sync) application for backup and disaster recovery operations on QNAP’s operating systems, related to authentication procedures that allow unauthorized users to escalate their privileges.

The vulnerability of the HBS 3 Hybrid Backup Sync application for backup and disaster recovery functions on QNAP network storage operating systems is related to deficiencies in the server authentication process of RTSS. Exploiting this vulnerability could allow a malicious actor to gain increased...

The vulnerability of the Google Chrome browser’s Payment function, related to deficiencies in authentication procedures, allows attackers to compromise data integrity.

The vulnerability of the Google Chrome browser’s Payment function is related to the insufficient implementation of security policies. Exploiting this vulnerability could allow a malicious actor to compromise data integrity remotely...

The vulnerability of Western Digital WD My Book Live and WD My Book Live Duo disk storage devices stems from authentication procedures that have flaws. This allows attackers to reset the device to its factory settings.

The vulnerability of the microprogrammed software in Western Digital WD My Book Live and WD My Book Live Duo storage devices is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the elFinder file manager stems from the incorrect implementation of authentication mechanisms, allowing attackers to execute arbitrary code.

The vulnerability of the elFinder file manager is related to the unlimited loading of files of a dangerous type. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created .phar file...

The vulnerability of the PackageKit package for the Aurora operating system, related to authentication flaws, allows attackers to escalate their privileges.

The vulnerability of PackageKit in the Aurora operating system is related to authentication deficiencies. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the cryptographic functions of the GoLang development library used by Aurora Application Software Center is related to errors in the authentication process for certificates. This error allows a perpetrator to cause service failures.

The vulnerability of the cryptographic functions of the GoLang development library used by Aurora Application Software Center is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...

The vulnerability of the administration interface of the VMware Carbon Black Cloud Workload security platform allows a perpetrator to increase their privileges.

The vulnerability of the administration interface of the VMware Carbon Black Cloud Workload security platform is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to increase their privileges remotely...

The vulnerabilities of Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Small Office Security, and Kaspersky Security Cloud antivirus protection systems are related to authentication mechanism flaws, which allow attackers to trigger service denial-of-service attacks.

The vulnerabilities of Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Small Office Security, and Kaspersky Security Cloud are related to deficiencies in the authentication mechanism. Exploiting these vulnerabilities can allow attackers to trigger a service...