The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server relates to improper authorization, allowing a perpetrator to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to improper authentication. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Modbus TCP Packet Handler component in the Ethernet module software for WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN allows a hacker to execute arbitrary commands.

The vulnerability of the Modbus TCP Packet Handler component in the Ethernet module software of WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the HarmonyOS operating system, related to deficiencies in authentication procedures, allows a perpetrator to gain access to the camera without notifying the user.

The vulnerability of the HarmonyOS operating system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the camera without notifying the user...

The vulnerability of the container management system and the virtual machine manager Incus, related to deficiencies in the authentication mechanism, allows attackers to circumvent existing security restrictions and perform spear-phishing attacks.

The vulnerability of the container management system and the virtual machine manager Incus is related to deficiencies in the authentication mechanism, resulting from incorrect rule generation based on the access control list. Exploiting this vulnerability allows a malicious actor to bypass existi...

The vulnerability of the Blitz Identity Provider software, related to deficiencies in authentication mechanisms, allows attackers to elevate their privileges and gain unauthorized access to protected information.

The vulnerability of the Blitz Identity Provider software is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain unauthorized access to protected information...

The vulnerability of hybrid cloud solutions for managing thin clients in the Dell Wyse Management Suite stems from deficiencies in authentication mechanisms, allowing unauthorized access to protected information.

The vulnerability of the hybrid cloud solution for managing thin clients in the Dell Wyse Management Suite is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected...

The vulnerability of the Xiaomi Mi Connect Service device’s software, related to deficiencies in authentication procedures, allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Xiaomi Mi Connect Service device management software is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the device...

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

The vulnerability of the PostgreSQL PgBouncer connection pool program, related to authentication process flaws, allows attackers to gain unauthorized access to the application.

The vulnerability of the PgBouncer connection pool program in PostgreSQL involves deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to the application...

The vulnerability of the IBM Storage Protect data protection software platform for virtual environments lies in its authentication mechanisms’ deficiencies, which allow attackers to circumvent existing security restrictions.

The vulnerability of the IBM Storage Protect data protection software for virtual environments is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions from a remote location...

The vulnerability of the SAP Plug-In Basis plugin of the SAP Business Warehouse system, related to deficiencies in the authentication process, allows an intruder to gain unauthorized access to protected information.

The vulnerability of the SAP Plug-In Basis component of the SAP Business Warehouse system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Region Mapping component of the Oracle Advanced Outbound Telephony application, which allows a perpetrator to compromise the confidentiality and integrity of the protected information

The vulnerability of the Region Mapping component in the Oracle Advanced Outbound Telephony application is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

The vulnerability of the Activity Guide Composer component in the PeopleSoft Enterprise CC Common Application Objects suite allows a malicious individual to gain unauthorized access to read, add, modify, or delete data.

The vulnerability of the Activity Guide Composer component, a toolset for managing and processing data in PeopleSoft Enterprise CC Common Application Objects, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized acces...

The vulnerability of the SimpleOne ITSM automation system, related to deficiencies in authentication procedures, allows a perpetrator to gain access to user accounts.

The vulnerability of the SimpleOne ITSM automation system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to user accounts...

The vulnerability of the Grade Report Handler component in the virtual learning environment Moodle allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Grade Report Handler component in the virtual training environment is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the sub_497DE4 function in D-Link DI-7003GV2 router microprogramming software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the sub497DE4 function in D-Link DI-7003GV2 router microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2019-8292

Online Store System v1.0 deleteproduct.php doesn't check to see if a user authtenticated or has administrative rights allowing arbitrary product deletion...

CVE-2013-1205

The Event Center module in Cisco WebEx Meetings Server does not perform request authentication in all intended circumstances, which allows remote attackers to discover host keys and event passwords via crafted URLs, aka Bug ID CSCue62485...

Security Bulletin: Multiple Vulnerabilities in IBM Event Streams

Summary Multiple vulnerabilities were addressed in IBM Event Streams version 11.7.0. Vulnerability Details CVEID:CVE-2024-52798 DESCRIPTION: path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular expression that can be exploited to cau...

The vulnerability of D-Link DIR-859 router’s microprogramming software, related to deficiencies in authentication procedures, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of D-Link DIR-859 router microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...