512 matches found
The vulnerability of the Nagios XI monitoring tool, related to deficiencies in authentication procedures, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Nagios XI monitoring tool is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the organizational security access program for Kubernetes clusters, Teleport, is related to deficiencies in the authentication mechanism. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the organizational security access program for Kubernetes clusters, Teleport, is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of Microsoft Exchange Server servers stems from improper syntax validation during input processing, allowing attackers to escalate their privileges.
The vulnerability of Microsoft Exchange Server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the GE Vernova Smallworld geospatial data management platform, related to deficiencies in authentication mechanisms, allows attackers to bypass existing security measures and execute arbitrary codes.
The vulnerability of the GE Vernova Smallworld geospatial data management platform is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to bypass existing security measures and execute arbitrary codes...
Siemens Industrial Edge Devices Weak Authentication (CVE-2024-54092)
Affected devices do not properly enforce user authentication on specific API endpoints when identity federation is used. This could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Successful exploitation requires that identity federati...
WordPress Plugin Captcha.eu Server-Side Request Forgery Attack Vulnerability
WordPress Plugin Captcha.eu is a CAPTCHA plugin for the WordPress platform, which is mainly used to prevent bots from attacking and is also compliant with GDPR General Data Protection Regulation. WordPress Plugin Captcha.eu suffers from a server-side request forgery attack vulnerability that stem...
CVE-2025-62774
On Mercku M6a devices through 2.1.0, the authentication system uses predictable session tokens based on timestamps...
The vulnerability of Moxa network device software of the EDR-G9010, EDR-8010, EDF-G1002-BP, TN-4900, NAT-102, NAT-108, and OnCell G4302-LTE4 series is related to deficiencies in authentication mechanisms. This allows unauthorized individuals to gain access to protected information.
The vulnerability of Moxa network devices with microprogrammed software, such as EDR-G9010, EDR-8010, EDG-G1002-BP, TN-4900, NAT-102, NAT-108, and OnCell G4302-LTE4, is related to deficiencies in authentication mechanisms. Exploiting this vulnerability can allow unauthorized actors to gain...
CVE-2025-62650
The Restaurant Brands International RBI assistant platform through 2025-09-06 relies on client-side authentication for use of the diagnostic screen...
Fortinet FortiPAM OS Command Injection Vulnerability (CNVD-2025-24146)
FortiPAM is Fortinet's privileged access management solution for centralized management of sensitive enterprise credentials. A security vulnerability exists in Fortinet FortiPAM that stems from an insufficiently strong authentication mechanism. An attacker could exploit the vulnerability to execu...
The vulnerability of the industrial network access point Wi-Fi model from Rockwell Automation, model 1783-NATR, stems from the lack of authentication for a critical function. This allows attackers to trigger a service failure.
The vulnerability of the Wi-Fi network access point from Rockwell Automation model 1783-NATR lies in the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to trigger a service failure by obtaining administrator credentials or modifying NAT...
The vulnerability of the RestAPI interface of the data protection software through backup with PowerProtect DataDomain, a data protection software in the corporate environment using cloud technologies like APEX Protection Storage, the PowerProtect DD Virtual Edition data protection platform, and the DataDomain OS operating system, allows unauthorized access to the compromised system by attackers.
The vulnerability of the RestAPI interface of the data protection software through backup using PowerProtect Data Domain, the data protection software in the corporate environment using cloud technologies like APEX Protection Storage, the PowerProtect DD Virtual Edition data protection platform,...
Security Updates for Microsoft Exchange Server (October 2025)
The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the October, 2025 security bulletin. - Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate...
CVE-2025-61779
Confidential Containers's Trustee project contains tools and components for attesting confidential guests and providing secrets to them. In versions prior to 0.15.0, the attestation-policy endpoint didn't check if the kbs-client submitting the request was actually authenticated had the right key...
EUVD-2019-8026
Malware in sbrugna...
EUVD-2019-8744
Malware in sbrugna...
EUVD-2018-2429
Malware in sbrugna...
The vulnerability of the Oracle Concurrent Processing function in the Oracle E-Business Suite, which allows a perpetrator to execute arbitrary code.
The vulnerability of Oracle’s Concurrent Processing function in the Oracle E-Business Suite lies in the deficiencies of the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted HTTP request...