160 matches found
The vulnerability of the FOQUZ platform, related to deficiencies in the authentication process, allows unauthorized users to gain access to protected information.
The vulnerability of the FOQUZ platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the FOQUZ platform, related to deficiencies in the authentication process, allows unauthorized users to gain access to protected information.
The vulnerability of the FOQUZ platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the FOQUZ platform, related to deficiencies in the authentication process, allows unauthorized users to gain access to protected information.
The vulnerability of the FOQUZ platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2026-4894
A vulnerability has been identified regarding insufficient validation in the Frappe Cloud/ERPNext authentication process, which allows multiple email addresses to be accepted by manipulating the email field in the /api/method/press.api.account.signup endpoint. The vulnerability occurs when an...
The vulnerability of the software platform for conducting marketing campaigns in Adobe Campaign Classic lies in the authentication procedures’ deficiencies, which allow a perpetrator to execute arbitrary code.
The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
CVE-2026-86134
A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the management daemon by sending a specially request to the login interface, resulting in a denial of service...
EUVD-2026-89605
A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the management daemon by sending a specially request to the login interface, resulting in a denial of service...
PT-2026-103017
A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the management daemon by sending a specially request to the login interface, resulting in a denial of service...
The vulnerability of the AWS CLI command-line interface, related to authentication process flaws, allows attackers to execute arbitrary operating system commands.
The vulnerability of the AWS CLI command-line interface is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on the operating system remotely...
The vulnerabilities in the following scripts allow for manipulation of the confidentiality and integrity of protected information: includes/api/apiChangeAuthenticationData.php, includes/api/apiLinkAccount.php, includes/api/apiRemoveAuthenticationData.php, includes/specials/specialLinkAccounts.php, and includes/specials/specialUnlinkAccounts.php. These scripts are part of the MediaWiki software, which provides a hypertext environment for websites.
The vulnerabilities of the scripts including/api/apiChangeAuthenticationData.php, including/api/apiLinkAccount.php, including/api/apiRemoveAuthenticationData.php, including/specials/specialLinkAccounts.php, and including/specials/specialUnlinkAccounts.php, related to the MediaWiki hypertext...
Incorrect Authorization
Overview @openclaw/nextcloud-talk is an OpenClaw Nextcloud Talk channel plugin Affected versions of this package are vulnerable to Incorrect Authorization in the auth process. An attacker can gain unauthorized access by sending requests with add-on principals that are not bound to the intended...
PT-2026-27988
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 7.11 through 18.8.6 GitLab CE/EE versions 18.9 through 18.9.2 GitLab CE/EE versions 18.10 through 18.10.0 Description An issue existed in GitLab CE/EE where an unauthenticated user could bypass WebAuthn two-factor...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the UEAuthentication process when a nil SuciSupiMap interface is converted. An attacker can cause the application to panic and terminate unexpectedly by sending specially crafted authentication requests...
The vulnerability of Netmaker’s virtual network platform, related to deficiencies in authentication procedures, allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of Netmaker’s virtual network platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...
Incorrect Authorization
Overview github.com/mattermost/mattermost/server/channels/app is a private-cloud Slack alternative Affected versions of this package are vulnerable to Incorrect Authorization in the authentication process. An attacker can change another user's account password without confirmation by falsely...
Timing Attack
Overview @perfood/couch-auth is an Easy and secure authentication for CouchDB/Cloudant. Based on SuperLogin, updated and rewritten in Typescript. Affected versions of this package are vulnerable to Timing Attack via a timing side-channel in the authentication process. An attacker can obtain...
LDAP Injection
pgAdmin is vulnerable to LDAP Injection. The vulnerability is due to improper sanitization of special LDAP characters in the username during the LDAP authentication flow, which allows an attacker to inject crafted input and cause the DC/LDAP server and client to process excessive data...
EUVD-2019-6046
Malware in sbrugna...