4263 matches found
CVE-2025-4755
A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R68125. It has been classified as critical. This affects the function sub497DE4 of the file /H5/netconfig.asp. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclose...
CVE-2025-4755
A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R68125. It has been classified as critical. This affects the function sub497DE4 of the file /H5/netconfig.asp. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclose...
CVE-2025-4755 D-Link DI-7003GV2 netconfig.asp sub_497DE4 improper authentication
A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R68125. It has been classified as critical. This affects the function sub497DE4 of the file /H5/netconfig.asp. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclose...
CVE-2025-4755 D-Link DI-7003GV2 netconfig.asp sub_497DE4 improper authentication
A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R68125. It has been classified as critical. This affects the function sub497DE4 of the file /H5/netconfig.asp. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclose...
CVE-2025-4755
CVE-2025-4755 affects D-Link DI-7003GV2 (Firmware 24.04.18D1 R(68125)). The vulnerability is in the function sub_497DE4 in the file /H5/netconfig.asp , leading to improper authentication . Exploitation can be performed remotely and public disclosures exist. A PT-Security advisory recommends a tem...
PT-2025-21621 · D Link · D-Link Di-7003Gv2
Name of the Vulnerable Software and Affected Versions: D-Link DI-7003GV2 version 24.04.18D1 R68125 Description: A critical issue has been found, affecting the function sub 497DE4 of the file /H5/netconfig.asp. This leads to improper authentication. The attack can be initiated remotely...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication due to the CookieStore configuration. An attacker can gain unauthorized access by brute-forcing the authentication tags of the session cookies. Note: This is only exploitable if the user has configured the sessio...
CVE-2025-20083
Improper authentication in the firmware for the IntelR Slim Bootloader may allow a privileged user to potentially enable escalation of privilege via local access...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication due to the improper validation of authentication claims from the WSO2 realm. An attacker can gain unauthorized access and impersonate any user by submitting any username and password combination, even for account...
CVE-2025-3659
Improper authentication handling was identified in a set of HTTP POST requests affecting the following product families: Digi PortServer TS - prior to and including 82000747AA, build date 06/17/2022 Digi One SP/Digi One SP IA/Digi One IA - prior to and including 82000774Z, build date 10/19/2020...
Alibaba Cloud Linux 3 : 0156: 389-ds:1.4 (ALINUX3-SA-2022:0156)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0156 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-0918: A vulnerability was...
CVE-2025-20083
Improper authentication in the firmware for the IntelR Slim Bootloader may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2025-20083
Improper authentication in the firmware for the IntelR Slim Bootloader may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2025-20083
Improper authentication in the firmware for the IntelR Slim Bootloader may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2025-20083
CVE-2025-20083 affects Intel® Slim Bootloader. Description: improper authentication in the firmware may allow a privileged user to escalate privileges via local access. References indicate Intel issued an advisory (INTEL-SA-01290) with mitigation guidance and affected platforms; CVSS scores shown...
Intel Slim Bootloader 授权问题漏洞
Intel Slim Bootloader is a lightweight secure boot solution from Intel Corporation USA designed for the Intel platform. Intel Slim Bootloader suffers from an authorization issue vulnerability that stems from improper authentication and could lead to elevation of privilege...
CVE-2025-3659 Improper authentication handling for Digi PortServer TS; Digi One SP, SP IA, IA; Digi One IAP
Improper authentication handling was identified in a set of HTTP POST requests affecting the following product families: Digi PortServer TS - prior to and including 82000747AA, build date 06/17/2022 Digi One SP/Digi One SP IA/Digi One IA - prior to and including 82000774Z, build date 10/19/2020...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B, related to improper authentication procedures, allows attackers to bypass existing security restrictions and gain unauthorized access to protected information.
The vulnerabilities of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to improper authentication processes. Exploiting these vulnerabilities allows a malicious actor to bypass existing security restrictions...
CVE-2025-4494
A vulnerability, which was classified as critical, was found in JAdmin-JAVA JAdmin 1.0. Affected is the function toLogin of the file NoNeedLoginController.java of the component Admin Backend. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The...