4D SAS 4D Server 授权问题漏洞

4D SAS 4D Server is a rapid development platform for business applications from 4D. A security vulnerability exists in the 4D SAS 4D Server Application that stems from the presence of an authentication vulnerability...

The configuration file authorize.conf of the Splunk Enterprise platform is vulnerable, allowing attackers to increase their privileges.

The vulnerability of the authorize.conf configuration file on the Splunk Enterprise operating system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to increase their privileges by sending a specially crafted web request remotely...

PT-2023-3518 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions prior to 8 Description: The issue is related to a flaw in the TCP/IP protocol implementation in Windows operating systems, specifically concerning authentication procedure weaknesses. This can be exploited by a remote attacke...

The vulnerability of the Message and Bulletin components of the Cybozu Garoon data exchange platform, which allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the Message and Bulletin components of the Cybozu Garoon data exchange platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of the ksmbd module in Linux operating systems allows attackers to execute a brute-force attack.

The vulnerability of the ksmbd module in Linux operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to carry out an attack using brute-force methods...

The vulnerability of the application software interface of the Cisco DNA Center allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the application programming interface of the Cisco DNA Center relates to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially creat...

The vulnerability of the application programming interface of the Cisco DNA Center allows a attacker to execute arbitrary commands with root privileges.

The vulnerability of the application programming interface of the Cisco DNA Center relates to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands with root privileges using a specially created API...

The vulnerability of Backup Exec’s software for backup and data restoration lies in its lack of authentication procedures. This allows attackers to elevate their privileges and execute arbitrary commands.

The vulnerability of Backup Exec’s backup and recovery software is related to deficiencies in authentication procedures when using the SHA cryptographic algorithm. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary commands...

The vulnerability of the GRand Unified Bootloader (GRUB) of the Cisco IOS XR router operating system from Network Convergence System’s 540 Series and Cisco 9000 Series routers allows a hacker to execute arbitrary code.

The vulnerability of the GRand Unified Bootloader GRUB in Cisco IOS XR routers from the Network Convergence System 540 Series and Cisco 9000 Series is related to deficiencies in the authentication process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the file-sharing mechanism of Nighthawk WiFi 6 Router (RAX30) allows a hacker to increase their privileges.

The vulnerability of the file-sharing mechanism of the Nighthawk WiFi 6 Router RAX30 software lies in the deficiencies of its authentication process. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...

PT-2023-2623 · Nexx · Nexx Garage Door Controller +3

Name of the Vulnerable Software and Affected Versions: Nexx Smart Home devices affected versions not specified Nexx Garage Door Controller NXG-100B, NXG-200 Nexx Smart Plug NXPG-100W Nexx Smart Alarm NXAL-100 Description: The issue is related to weaknesses in the authentication procedure of Nexx...

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the lack of authentication procedures, which allow attackers to circumvent existing security restrictions.

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions remotely...

The vulnerability of the Kubernetes cloud platform Red Hat OpenShift Data Science (RHODS) allows a hacker to send arbitrary API requests.

The vulnerability of the Kubernetes cloud platform Red Hat OpenShift Data Science RHODS is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to send arbitrary API requests remotely...

Intel Quartus Prime Pro 授权问题漏洞

Intel Quartus Prime Pro is a set of multi-platform design environments from the U.S. company Intel Intel. The product is primarily used for programming programmable logic devices. A security vulnerability exists in Intel Quartus Prime Pro that stems from incorrect authentication. An attacker coul...

SUSE CVE-2005-2395

Mozilla Firefox 1.0.4 and 1.0.5 does not choose the challenge with the strongest authentication scheme available as required by RFC2617, which might cause credentials to be sent in plaintext even if an encrypted channel is available...

SUSE CVE-2006-2224

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly enforce RIPv2 authentication requirements, which allows remote attackers to modify routing state via RIPv1 RESPONSE packets...

SUSE CVE-2018-18505

An earlier fix for an Inter-process Communication IPC vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the...

PT-2023-2270 · Solarwinds · Solarwinds Server/Application Monitor

Name of the Vulnerable Software and Affected Versions: Solarwinds Server & Application Monitor affected versions not specified Description: The issue is related to weaknesses in the authentication procedure, allowing a remote attacker to bypass authentication and access confidential information...

The vulnerability of the Git-based software platform for collaborative code development on GitLab allows a hacker to circumvent security restrictions.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to shortcomings in the authentication process when managing keys and tokens using deployment scripts. Exploiting this vulnerability allows a malicious actor to circumvent security...

plugin: Lack of authentication mechanism in Git Plugin webhook

A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit...