8935 matches found
CVE-2023-50430: Improper Authentication
The Goodix Fingerprint Device, as shipped in Dell Inspiron 15 computers, does not follow the Secure Device Connection Protocol SDCP when enrolling via Linux, and accepts an unauthenticated configuration packet to select the Windows template database, which allows bypass of Windows Hello...
CVE-2023-45866: Improper Authentication
Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such...
CVE-2023-36655: Improper Authentication
The login REST API in ProLion CryptoSpike 3.0.15P2 when LDAP or Active Directory is used as the users store allows a remote blocked user to login and obtain an authentication token by specifying a username with different uppercase/lowercase character combination...
Authentication flaw
Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass...
CVE-2023-5970
CVE-2023-5970 affects SonicWall SMA100 SSL-VPN virtual office portal. The issue is improper authentication that lets a remote authenticated attacker create an identical external-domain user using accent characters, resulting in an MFA bypass. Affected devices include SMA100 and other SMA families...
CVE-2023-5970
Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass...
Exploit for Improper Authentication in Owncloud Owncloud_Server
ownCloud exploits for CVE-2023-49105...
CVE-2023-42575
Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid flag setting...
CVE-2023-33070
Transient DOS in Automotive OS due to improper authentication to the secure IO calls...
CVE-2023-33070
CVE-2023-33070 describes a Transient DOS in Automotive OS caused by improper authentication to secure IO calls. Affected component: Automotive OS' secure IO interface; root cause is improper authentication enabling local access to IO calls, leading to availability impact (DoS). According to conne...
CVE-2023-33070 Improper Authentication in Automotive OS
Transient DOS in Automotive OS due to improper authentication to the secure IO calls...
CVE-2023-33054 Improper Authentication in GPS HLOS Driver
Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data...
CVE-2023-42576
Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid exception handler...
CVE-2023-42575
Samsung Pass on mobile devices is impacted by CVE-2023-42575, affecting versions prior to 4.3.00.17. The issue is an improper authentication flaw caused by an invalid flag setting that allows physical attackers with direct device access to bypass authentication. Remediation requires updating to v...
CVE-2023-33070: Improper Authentication
Transient DOS in Automotive OS due to improper authentication to the secure IO calls...
CVE-2023-42575: Incorrect Authorization
Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid flag setting...
CVE-2023-5970: Improper Authentication
Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass...
CVE-2023-42576: Improper Authentication
Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid exception handler...
PT-2023-32452 · Sonicwall · Sma100 Ssl-Vpn
Name of the Vulnerable Software and Affected Versions: SMA100 SSL-VPN virtual office portal affected versions not specified Description: The issue is related to improper authentication in the SMA100 SSL-VPN virtual office portal. This allows a remote authenticated attacker to create an identical...