527 matches found
CVE-2021-41638
The authentication checks of the MELAG FTP Server in version 2.2.0.4 are incomplete, which allows a remote attacker to access local files only by using a valid username...
ZITADEL identification data management software Authentication Bypass
The vulnerability of the ZITADEL identification data management software platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...
Ruckus Virtual SmartZone Authentication Bypass
The vulnerability of Ruckus Virtual SmartZone wireless network controller’s microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions remotely...
UniFi Network Authentication Bypass
The vulnerability of the UniFi Network software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
IBM API Connect Authentication Bypass
The vulnerability of the IBM API Connect application programming interface platform is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to the platform remotely...
Rising Technosoft CAP Back Office API Endpoint Unauthorized Access
The vulnerability of the API Endpoint component in Rising Technosoft CAP Back Office Application is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to user accounts...
kcp Authentication Bypass
The vulnerability of the kcp software is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions from a remote location...
SAP NetWeaver Authorization Read Data
The vulnerability of the SAP NetWeaver software integration platform is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain read access to system data remotely...
My Timesheet Fiori 2.0 Privilege Escalation
The vulnerability of the My Timesheet Fiori 2.0 software, a personnel management solution for SAP HCM, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain elevated privileges...
SAP NetWeaver Application Server Java Authentication Bypass Read Data
The vulnerability of the SAP NetWeaver Application Server Java server is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain read access to data remotely...
httpd module implementation TP-Link TL-WA850RE V2 V3 Download Configuration Files
The vulnerability of the httpd module implementation in microprogramming software for TP-Link’s wireless signal amplifiers TL-WA850RE V2 and V3 is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to download the configuration file remote...
My Timesheet Fiori 2.0 Privilege Escalation
The vulnerability of the My Timesheet Fiori 2.0 software, a personnel management solution for SAP HCM, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain elevated privileges...
CVE-2025-15105 getmaxun auth.ts hard-coded key
A security flaw has been discovered in getmaxun maxun up to 0.0.28. Impacted is an unknown function of the file /getmaxun/maxun/blob/develop/server/src/routes/auth.ts. Performing manipulation of the argument apikey results in use of hard-coded cryptographic key . Remote exploitation of the attack...
PT-2025-52522
Name of the Vulnerable Software and Affected Versions Ever Gauzy version 0.281.9 Description The software contains a JWT authentication issue due to a weak HMAC secret key implementation. This allows attackers to exploit the exposed JWT token to authenticate and gain unauthorized access,...
Mattermost Open in Channel Unauthorized Access
The vulnerability of the Open in Channel function in the Mattermost instant messaging application is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
Mattermost API Data Compromise
The vulnerability of the Mattermost instant messaging application’s API component is related to deficiencies in the authentication process when processing the teamid parameter. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the protected information...
GNCC GC2 Indoor Security Camera Authentication Bypass
The vulnerability of the microprogrammed video surveillance camera software from GNCC GC2 Indoor Security Camera is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a intruder to bypass the authentication process...
PT-2025-49765
The SAP Internet Communication Framework does not conduct any authentication checks for features that need user identification allowing an attacker to reuse authorization tokens, violating secure authentication practices causing low impact on Confidentiality, Integrity and Availability of the...
Exchange Web Services GetPasswordExpirationDate Unauthorized Access
The vulnerability of the GetPasswordExpirationDate component in the Exchange Web Services application programming interface is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Splunk Cloud Platform and Splunk Enterprise security vulnerabilities
Splunk Cloud Platform and Splunk Enterprise are both products of Splunk Corporation, U.S.A. Splunk Cloud Platform is a powerful data collection, processing, and analytics service.Splunk Enterprise is a suite of data collection and analytics software. A security vulnerability exists in Splunk Clou...