CVE-2023-28377

Improper authentication in some IntelR NUC Kit NUC11PH USB firmware installation software before version 1.1 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-22663

Improper authentication for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access...

CVE-2023-22663

CVE-2023-22663 corresponds to an authentication flaw in some Intel® Unison™ software that may allow an authenticated user to escalate privileges over the network. The Intel advisory lists this alongside other Unison CVEs and confirms an escalation-of-privilege path via network access. Public refe...

CVE-2023-22663

Improper authentication for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access...

TP-Link TL-WR902AC loginFs Improper Authentication Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR902AC routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default...

Siemens SIMATIC MV500

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Authentication flaw

Improper Authentication vulnerability in Apereo CAS in jakarta.servlet.http.HttpServletRequest.getRemoteAddr method allows Multi-Factor Authentication bypass.This issue affects CAS: through 7.0.0-RC7. It is unknown whether in new versions the issue will be fixed. For the date of publication there...

CVE-2023-4612 MFA bypass in Apereo CAS

Improper Authentication vulnerability in Apereo CAS in jakarta.servlet.http.HttpServletRequest.getRemoteAddr method allows Multi-Factor Authentication bypass.This issue affects CAS: through 7.0.0-RC7. It is unknown whether in new versions the issue will be fixed. For the date of publication there...

CVE-2023-4612

CVE-2023-4612 is an Improper Authentication vulnerability in Apereo CAS via jakarta.servlet.http.HttpServletRequest.getRemoteAddr, enabling MFA bypass. Affected: Apereo CAS up to and including 7.0.0-RC7. Public patches are not available; the vendor does not treat it as a vulnerability. Related so...

The vulnerabilities of the pmdm_wp_delete_user_meta, pmdm_wp_delete_term_meta, and pmdm_wp_ajax_delete_meta functions of the WordPress Content Management Plugin, Post Meta Data Manager, allow a malicious user to delete arbitrary user metadata.

The vulnerabilities of the pmdmwpdeleteusermeta, pmdmwpdeletetermmeta, and pmdmwpajaxdeletemeta functions of the WordPress Content Management Plugin, Post Meta Data Manager, are related to incorrect authentication procedures. Exploiting these vulnerabilities could allow a malicious actor to...

PT-2023-29853 · Apereo · Apereo Cas

Name of the Vulnerable Software and Affected Versions: Apereo CAS versions through 7.0.0-RC7 Description: The issue is related to an Improper Authentication vulnerability in the jakarta.servlet.http.HttpServletRequest.getRemoteAddr method, which allows Multi-Factor Authentication bypass. There is...

CVE-2023-42554

Improper Authentication vulnerabiity in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication...

CVE-2023-42554

CVE-2023-42554 affects Samsung Pass, with vulnerable versions prior to 4.3.00.17. The issue is an improper authentication mechanism that allows a physical attacker to bypass authentication. Public risk details are supported by multiple connected sources indicating the same affected product and ve...

CVE-2023-42554

Improper Authentication vulnerabiity in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication...

CVE-2023-24852 Improper Authentication in Core

Memory Corruption in Core due to secure memory access by user while loading modem image...

Rocky Linux 8 : 389-ds:1.4 (RLSA-2022:5823)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:5823 advisory. - A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a...

Exploit for Improper Authentication in Automattic Woocommerce_Payments

WP-CVE-2023-28121 WooCommerce Payments Python 2.7 Buy Coff...

Zoom Client for Meetings < 5.15.5 Vulnerability (ZSB-23040)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.15.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-23040 advisory. - Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network...

Zoom VDI Meeting Client < 5.15.4 Vulnerability (ZSB-23040)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.15.4. It is, therefore, affected by a vulnerability as referenced in the ZSB-23040 advisory. - Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network acces...

Security Bulletin: IBM Storage Ceph is vulnerable to improper authentication in Grafana (CVE-2022-39229)

Summary Grafana is used by IBM Storage Ceph as part of the dashboard to monitor the stats for each cluster. CVE-2022-39229 Vulnerability Details CVEID: CVE-2022-39229 DESCRIPTION: Grafana could allow a remote attacker to bypass security restrictions, caused by improper authentication. By using...