4263 matches found
CVE-2025-22477
Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2025-22477
Dell Storage Center - Dell Storage Manager, versions 20.1.20, contains an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2025-22477
Dell Storage Center (Dell Storage Manager) version 20.1.20 is affected by an Improper Authentication vulnerability that enables Elevation of Privileges when an unauthenticated, adjacent-network attacker accesses the system. The connected PT-2025-19885 entry reinforces this and provides a remediat...
CVE-2025-46584
Vulnerability of improper authentication logic implementation in the file system module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-46584
Vulnerability of improper authentication logic implementation in the file system module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
PT-2025-19885 · Dell · Dell Storage Manager
Name of the Vulnerable Software and Affected Versions: Dell Storage Center - Dell Storage Manager version 20.1.20 Description: The issue is related to an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this, leading to...
TOTOLINK A720R 安全漏洞
TOTOLINK A720R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A720R suffers from an improper authentication vulnerability that stems from improper handling of the parameter topicurl in the file /cgi-bin/cstecgi.cgi, no details of the vulnerability are provided at this...
The vulnerability of the NextCloud calendar application, a cloud-based software for creating and using NextCloud storage, relates to improper authentication procedures. This vulnerability allows attackers to bypass authentication checks.
The vulnerability of the Nextcloud calendar application, a cloud-based software for creating and using Nextcloud data storage, is related to improper authentication procedures. Exploiting this vulnerability allows an attacker to bypass authentication checks remotely...
The vulnerability of the org.xwiki.platform:xwiki-platform-wiki-rest-default component of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability allows attackers to escalate their privileges.
The vulnerability of the “org.xwiki.platform:xwiki-platform-wiki-rest-default” component of the XWiki Platform’s collaborative web application framework is related to improper authentication. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...
Improper Authentication
Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Improper Authentication. An attacker can circumvent required actions configured by an administrator such as...
CVE-2021-47664
Due to improper authentication mechanism an unauthenticated remote attacker can enumerate valid usernames...
CVE-2025-3850
A vulnerability, which was classified as problematic, has been found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This issue affects some unknown processing of the component API. The manipulation leads to improper authentication. The attack may be initiated remotely. The complexity of an attack is...
CVE-2025-2492
An improper authentication control vulnerability exists in AiCloud. This vulnerability can be triggered by a crafted request, potentially leading to unauthorized execution of functions. Refer to the 'ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information...
Improper Authentication
Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Improper Authentication due to improper handling of user session states during the multi-factor authentication process. An attacker can access sensitive information about other users by exploiting t...
Improper Authentication
Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Improper Authentication due to improper enforcement of multi-factor authentication during the self-enrollment process. An attacker can bypass the intended security controls by exploiting this weakne...
Security Bulletin: Multiple vulnerabilities have been identified in Apache Solr shipped with IBM Operations Analytics - Log Analysis
Summary Multiple vulnerabilities in Apache Solr affect IBM Operations Analytics - Log Analysis. These have been addressed. Vulnerability Details CVEID:CVE-2024-45216 DESCRIPTION: Apache Solr could allow a remote attacker to bypass security restrictions, caused by improper authentication validatio...
Improper Authentication
rasapro is vulnerable to Improper Authentication. The vulnerability is due to voice connectors not properly implementing authentication, even when a token is configured in the credentials.yml file, allowing an attacker to submit voice data from an unauthenticated source...
CVE-2021-47664
CVE-2021-47664 describes an authentication issue that allows an unauthenticated remote attacker to enumerate valid usernames. The initial entry provides a CVSS v3.1 base score of 5.3 (Medium) with Network attack vector, Low attack complexity, and no privileges required. The connected sources reit...