Samba Authorization Issues Vulnerability

Samba is a set of free software from the Samba team that enables UNIX series operating systems to connect to the SMB/CIFS network protocol of Microsoft Windows operating systems. The program supports sharing printers, transferring data files to each other, and so on. An authorization issue...

The vulnerability of Cortana’s voice assistant in Windows 10 Mobile operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Cortana’s voice assistant in Windows 10 Mobile operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information through a locked screen...

Unspecified vulnerability in ShapeShift KeepKey finite state machine

ShapeShift KeepKey is an e-wallet device for cryptocurrency storage. An unspecified vulnerability exists in the ShapeShift KeepKey finite state machine, which stems from the program not being sufficiently authenticated. The vulnerability can be exploited to reset a portion of the encryption key t...

Multiple NETGEAR Products Licensing Issues Vulnerabilities

The NETGEAR AC1450, among others, is a wireless router from NETGEAR. An authorization issue vulnerability exists in multiple NETGEAR products. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in the network system or product. No detailed...

V-Zug Combi-Steam MSLQ Authorization Issue Vulnerability (CNVD-2019-42365)

The V-Zug Combi-Steam MSLQ is an all-in-one microwave, oven, and steam machine unit from Swiss Swiss V-Zug. An authorization issue vulnerability exists in the V-Zug Combi-Steam MSLQ using firmware versions prior to Ethernet R07 and firmware versions prior to WLAN R05. The vulnerability stems from...

Red Hat Wildfly wildfly-core Authorization Issues Vulnerability

Red Hat Wildfly is the United States Red Hat Red Hat a lightweight JavaEE-based open source application server . wildfly-core is Wildfly use a core runtime program . An authorization issue vulnerability exists in Red Hat wildfly-core versions prior to 7.2.5.GA. The vulnerability stems from a lack...

GitLab Authorization Issues Vulnerability (CNVD-2019-31314)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An authorization issue vulnerability exists in GitLab...

The vulnerability in the web interface for managing Cisco Enterprise NFV Infrastructure Software (NFVIS) allows a attacker to gain limited access to the web interface for management purposes.

The vulnerability of the Cisco Enterprise NFV Infrastructure Software’s software infrastructure management web interface is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain limited access to the management web interface...

The vulnerability affects the web interface for managing the Cisco Integrated Management Controller (IMC) Supervisor, as well as tools for managing physical infrastructure and virtual environments like Cisco UCS Director and Cisco UCS Director Express for Big Data. This allows an attacker to obtain a valid session token with administrator privileges on the target system.

The vulnerability of the Cisco Integrated Management Controller IMC Supervisor web interface, as well as the tools for managing physical infrastructure and virtual environments such as Cisco UCS Director and Cisco UCS Director Express for Big Data, is related to authentication procedures that hav...

cPanel Authorization Issues Vulnerability (CNVD-2019-29008)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An authorization issue vulnerability exists in versions prior to cPanel 57.9999.54. The vulnerability stems from a lack of...

CVE-2019-1895

A vulnerability in the Virtual Network Computing VNC console implementation of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an unauthenticated, remote attacker to access the VNC console session of an administrative user on an affected device. The vulnerability is due to an...

CVE-2019-10689

VVX products using UCS software version 5.9.2 and earlier with Better Together over Ethernet Connector BToE application version 3.9.1 and earlier provides insufficient authentication between the BToE application and the BToE component, resulting in leakage of sensitive information...

ASUS Vivobaby for Android License Issue Vulnerability

ASUS Vivobaby for Android is an Android-based baby physiological monitor control and management application from Asus Taiwan, China. An authorization issue vulnerability exists in versions of ASUS Vivobaby prior to 1.1.09 for Android-based platforms. The vulnerability stems from a lack of...

SHEKAR Technology Endoscope License Issue Vulnerability

SHEKAR Technology Endoscope is a portable endoscopic device from SHEKAR Technology, China. An authorization issue vulnerability exists in SHEKAR Technology Endoscope. The vulnerability arises from a lack of authentication measures or insufficient authentication strength in a networked system or...

GitLab Authorization Issues Vulnerability (CNVD-2019-43039)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An authorization issue vulnerability exists in GitLab. Th...

PT-2019-2081 · Palo Alto Networks · Globalprotect Agent

Name of the Vulnerable Software and Affected Versions: GlobalProtect Agent version 4.1.0 for Windows GlobalProtect Agent versions 4.1.10 and earlier for macOS Description: The issue is related to weaknesses in the authentication procedure of the GlobalProtect Agent, which may allow a local...

PT-2019-6215

Name of the Vulnerable Software and Affected Versions ILC 1x0 versions affected versions not specified ILC 1x1 versions affected versions not specified ILC 1x1 GSM/GPRS versions affected versions not specified ILC 3xx versions affected versions not specified AXC 1050 versions affected versions no...

PT-2019-6346 · D Link · D-Link Dir-878

Name of the Vulnerable Software and Affected Versions: D-Link DIR-878 version 1.12B01 Description: An issue was discovered that allows an attacker to log in with a blank password at the /HNAP1 URI. The vulnerability is related to weaknesses in the HNAP1 protocol implementation, specifically in th...

Bomb Threat, Sextortion Spammers Abused Weakness at GoDaddy.com

Two of the most disruptive and widely-received spam email campaigns over the past few months -- including an ongoing sextortion email scam and a bomb threat hoax that shut down dozens of schools, businesses and government buildings late last year -- were made possible thanks to an authentication...

Streamworks Job Scheduler Release 7 Authentication Weakness

Affected Products Streamworks Job Scheduler Release 7 older/newer releases have not been tested References Secuvera-SA-2016-01 https://www.secuvera.de/advisories/secuvera-SA-2016-01.txt used for updates No CVE number could be assigned vendor not listed under...