4132 matches found
Authentication flaw
A vulnerability classified as critical has been found in Supcon InPlant SCADA up to 20230901. Affected is an unknown function of the file Project.xml. The manipulation leads to improper authentication. An attack has to be approached locally. The exploit has been disclosed to the public and may be...
CVE-2023-4985 Supcon InPlant SCADA Project.xml improper authentication
A vulnerability classified as critical has been found in Supcon InPlant SCADA up to 20230901. Affected is an unknown function of the file Project.xml. The manipulation leads to improper authentication. An attack has to be approached locally. The exploit has been disclosed to the public and may be...
CVE-2023-4985 Supcon InPlant SCADA Project.xml improper authentication
A vulnerability classified as critical has been found in Supcon InPlant SCADA up to 20230901. Affected is an unknown function of the file Project.xml. The manipulation leads to improper authentication. An attack has to be approached locally. The exploit has been disclosed to the public and may be...
CVE-2023-4985
CVE-2023-4985 affects Supcon InPlant SCADA up to 20230901. The issue stems from an unknown function in Project.xml that enables improper authentication. It requires local access to exploit, and public disclosure of exploits is noted. Several sources (NVD/Red Hat/CVE listings) corroborate the loca...
Supcon InPlant SCADA Authorization Issues Vulnerability
Supcon InPlant SCADA is a SCADA program from Supcon. An authorization issue vulnerability exists in Supcon InPlant SCADA that stems from the presence of an unknown function in Project.xml, which results in improper authentication...
PT-2023-5276 · Supcon · Supcon Inplant Scada
Name of the Vulnerable Software and Affected Versions: Supcon InPlant SCADA up to 20230901 Description: A critical issue has been discovered related to improper authentication in the handling of project file loading. This could potentially allow an attacker to elevate their privileges. The issue ...
Zoom Client < 5.15.5 Multiple Vulnerabilities (ZSB-23039, ZSB-23040) - Mac OS X
The Zoom Client is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zoom:zoom"; ifdescription...
Rockwell Automation Pavilion8
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : Pavilion8 Vulnerability : Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to retrieve other...
Missing Authorization Checks
matrixsynapse is vulnerable to Improper Authentication. The vulnerability is due to the completelogin function as It fails to verify the deactivated status of users during login. This only applies if any of the following are true: 1. JSON Web Tokens are enabled for login via the jwtconfig.enabled...
CVE-2023-39215
Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access...
U.S. Dept Of Defense: authentication bypass
An authentication bypass vulnerability was discovered in the login page of a web portal, allowing unauthorized access without providing valid credentials...
Eight vulnerabilities in Open Automation Software Platform could lead to information disclosure, improper authentication
Cisco Talos recently disclosed eight vulnerabilities in the engine configuration functionality in Open Automations Software Platform. OAS Platform is commonly found in industrial operations and enterprise environments. It allows various devices, including PLCs, servers, files, databases and...
CVE-2023-30725
Improper authentication in LocalProvier of Gallery prior to version 14.5.01.2 allows attacker to access the data in content provider...
CVE-2023-30725
Improper authentication in LocalProvier of Gallery prior to version 14.5.01.2 allows attacker to access the data in content provider...
CVE-2023-30724
Improper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows attacker to access search history...
CVE-2023-30724
Improper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows attacker to access search history...
CVE-2023-30711
Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data to the provider...
CVE-2023-30711
Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data to the provider...