8937 matches found
CVE-2023-6483 Improper Authentication Vulnerability in ADiTaaS
The vulnerability exists in ADiTaaS Allied Digital Integrated Tool-as-a-Service version 5.1 due to an improper authentication vulnerability in the ADiTaaS backend API. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable...
CVE-2023-6907
A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /file-manager/delete.php of the component Deletion Interface. The manipulation of the argument file leads to improper...
CVE-2023-6907
A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /file-manager/delete.php of the component Deletion Interface. The manipulation of the argument file leads to improper...
CVE-2023-6907
The CVE-2023-6907 entry concerns codelyfe Stupid Simple CMS (versions up to 1.2.4). The vulnerability affects the Deletion Interface’s file-manager delete.php, where manipulation of the file parameter leads to improper authentication. Public exploit details exist, indicating potential exploitatio...
CVE-2023-6907: Improper Authentication
A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /file-manager/delete.php of the component Deletion Interface. The manipulation of the argument file leads to improper...
PT-2023-32685 · Aditaas · Aditaas
Name of the Vulnerable Software and Affected Versions: ADiTaaS version 5.1 Description: A vulnerability exists in the ADiTaaS backend API due to improper authentication. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerabl...
CVE-2023-6483: Improper Authentication
The vulnerability exists in ADiTaaS Allied Digital Integrated Tool-as-a-Service version 5.1 due to an improper authentication vulnerability in the ADiTaaS backend API. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable...
Improper Authentication
bluez is vulnerable to Improper authentication. The vulnerability due to permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. It leads to allow an attacker get access to inject a malicious message...
CVE-2023-49646
Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial of service via network access...
CVE-2023-44252
UNSUPPORTED WHEN ASSIGNED An improper authentication vulnerability CWE-287 in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1 through 5.1.2 may allow an authenticated attacker to escalate his privileges via HTTP or HTTPs requests with crafted JWT token values...
CVE-2023-44252
Fortinet FortiWAN is affected by an improper authentication vulnerability (CWE-287) in versions 5.1.1–5.1.2 and 5.2.0–5.2.1. The issue arises from using a static key when handling JWT tokens, enabling an authenticated attacker to escalate privileges by sending crafted HTTP/HTTPS requests. Impact ...
CVE-2023-45801
Improper Authentication vulnerability in Nadatel DVR allows Information Elicitation.This issue affects DVR: from 3.0.0 before 9.9.0...
Authentication flaw
Improper Authentication vulnerability in Nadatel DVR allows Information Elicitation.This issue affects DVR: from 3.0.0 before 9.9.0...
CVE-2023-45801
CVE-2023-45801 affects Nadatel DVR devices, specifically versions 3.0.0 through 9.9.0. The root cause is improper authentication, which enables information elicitation (confidentiality impact). The vulnerability is network‑accessible with low attack complexity and no user interaction required, an...
PT-2023-31277 · Zoom · Zoom
Name of the Vulnerable Software and Affected Versions: Zoom versions prior to 5.16.5 Description: The issue is related to improper authentication in some Zoom clients, which may allow an authenticated user to conduct a denial of service via network access. Recommendations: For versions prior to...
Nadatel DVR Authorization Issues Vulnerability
Nadatel DVR is a series of hard disk recorders from the US company Nadatel. A security vulnerability exists in Nadatel DVR versions 3.0.0 through 9.9.0, which stems from an attacker being able to gain access to information through improper authentication...
CVE-2023-44252: Improper Authentication
UNSUPPORTED WHEN ASSIGNED An improper authentication vulnerability CWE-287 in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1 through 5.1.2 may allow an authenticated attacker to escalate his privileges via HTTP or HTTPs requests with crafted JWT token values...
CVE-2023-45801: Improper Authentication
Improper Authentication vulnerability in Nadatel DVR allows Information Elicitation.This issue affects DVR: from 3.0.0 before 9.9.0...
Improper Authentication
github.com/treeverse/lakefs is vulnerable to Improper Authentication. The vulnerability is due to the NewSecureString function in securestring.go lacking the security measures handle environment variables. Specifically, it directly accesses environment variables using os.LookupEnv without any for...