QNAP QTS Music Station Improper Authentication Vulnerability (QSA-24-25)

QNAP Music Station is prone to an improper authentication vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2024-7015

Missing Authentication for Critical Function vulnerability in Profelis Informatics and Consulting PassBox allows Authentication Abuse. This issue affects PassBox: before v1.2...

CVE-2024-7015

CVE-2024-7015 affects Profelis Informatics and Consulting’s PassBox prior to v1.2. The issue is described as missing authentication for critical functions, resulting in authentication abuse and potential unauthorized access to protected operations. Technical detail from PT-2024-38032 confirms aff...

CVE-2024-7015 Improper Authentication in Profelis Informatics and Consulting's PassBOX

Missing Authentication for Critical Function vulnerability in Profelis Informatics and Consulting PassBox allows Authentication Abuse. This issue affects PassBox: before v1.2...

PT-2024-38032 · Profelis Informatics Consulting · Passbox

Name of the Vulnerable Software and Affected Versions: Profelis Informatics and Consulting PassBox versions prior to 1.2 Description: The issue is related to improper authentication, missing authentication for critical functions, and improper authorization, allowing authentication abuse. This can...

CVE-2023-45038

An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following version: Music Station 5.4.0 and later...

CVE-2023-45038 Music Station

An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following version: Music Station 5.4.0 and later...

PT-2024-13211

Name of the Vulnerable Software and Affected Versions Music Station versions prior to 5.4.0 Description An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to compromise the security of the system via a network...

DiCal-RED 4009 Log Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2024-040 Product: DiCal-RED Manufacturer: Swissphone Wireless AG Affected Versions: Unknown Tested Versions: 4009 Vulnerability Type: Improper Authentication CWE-287 Risk Level: High Solution Status: Open Manufacturer Notification:...

GO-2022-1239 usememos/memos Improper Authentication vulnerability in github.com/usememos/memos

usememos/memos Improper Authentication vulnerability in github.com/usememos/memos...

GO-2022-0774 Improper Authentication in github.com/containous/traefik

Improper Authentication in github.com/containous/traefik...

CVE-2024-43409 Ghost's improper authentication allows access to member information and actions

Ghost is a Node.js content management system. Improper authentication on some endpoints used for member actions would allow an attacker to perform member-only actions, and read member information. This security vulnerability is present in Ghost v4.46.0-v5.89.4. v5.89.5 contains a fix for this iss...

CVE-2024-42336

Servision - CWE-287: Improper Authentication...

CVE-2024-42336 Servision - CWE-287: Improper Authentication

Servision - CWE-287: Improper Authentication...

CVE-2024-42336 Servision - CWE-287: Improper Authentication

Servision - CWE-287: Improper Authentication...

CVE-2024-42336

CVE-2024-42336 affects Servision IVG Webmax (version 1.0.57 per CNNVD) with improper authentication as the root cause. The vulnerability enables authentication bypass or unauthorized access due to weaknesses in the authentication mechanism, per multiple sources. The CVE is consistently described ...

PT-2024-29876 · Servision · Servision

Name of the Vulnerable Software and Affected Versions: Servision affected versions not specified Description: The issue concerns improper authentication, which is a type of security flaw where authentication mechanisms are not properly implemented, potentially allowing unauthorized access. The...

Servision IVG Webmax 安全漏洞

Servision IVG Webmax is a video gateway platform from Servision. A security vulnerability exists in Servision IVG Webmax version 1.0.57 that stems from improper authentication...

Ghost 安全漏洞

Ghost is a hosting service from Ghost Open Source. A security vulnerability exists in Ghost versions v4.46.0 through prior to v5.89.5 that stems from improper authentication and allows an attacker to perform member-only actions and read member information...

Ewon Cosy+ / Talk2M Remote Access Solution Improper Authentication

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2024-043 Product: Ewon Cosy+ / Talk2M Remote Access Solution Manufacturer: HMS Industrial Networks AB Affected Versions: N.A. Tested Versions: N.A. Vulnerability Type: Improper Authentication CWE-287 Risk Level: High Solution Statu...