Atlassian Jira < 7.13.9 Multiple Vulnerabilties

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 7.13.9 or 8.0.x 8.4.2. It is, therefore, affected by multiple vulnerabilities: - A Cross-Site Scripting XSS vulnerability in Issue Navigator Basic Search. - A Improper...

Atlassian Jira 8.0.x < 8.4.2 Multiple Vulnerabilties

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 7.13.9 or 8.0.x 8.4.2. It is, therefore, affected by multiple vulnerabilities: - A Cross-Site Scripting XSS vulnerability in Issue Navigator Basic Search. - A Improper...

CVE-2022-33242

CVE-2022-33242: Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned libraries in the audio processing domain (audio PD). Based on multiple sources, the issue affects Qualcomm closed-source components and is characterized by local attack vector with low privileg...

CVE-2022-33242 Improper authentication in Qualcomm IPC

Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD...

PT-2023-13256 · Qualcomm · Qualcomm Ipc

Name of the Vulnerable Software and Affected Versions: Qualcomm IPC affected versions not specified Description: The issue is related to memory corruption due to improper authentication in Qualcomm IPC while loading unsigned libraries in the audio processing domain. Recommendations: At the moment...

Exploit for Improper Authentication in Redhat Keycloak

PoC for CVE-2023-0264 Keycloak vulnerability that allows ses...

CVE-2023-0228

Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2...

Authentication flaw

Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2...

CVE-2023-0228 Improper authentication vulnerability in S+ Operations

Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2...

CVE-2023-0228 Improper authentication vulnerability in S+ Operations

Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2...

CVE-2023-0228

Summary of CVE-2023-0228 : ABB Symphony Plus S+ Operations is affected by an improper authentication flaw (CWE-287) that allows an unauthorized client on the HMI network to connect and impersonate a legitimate S+ Operations client, potentially reading data, changing configurations, causing data c...

Exploit for Improper Authentication in Fortinet Fortiproxy

CVE-2022-40684 One-click enumeration of all usernames and wr...

K98394530: Intel CPU vulnerability CVE-2019-14598

Security Advisory Description Improper Authentication in subsystem in IntelR CSME versions 12.0 through 12.0.48 IOT only: 12.0.56, versions 13.0 through 13.0.20, versions 14.0 through 14.0.10 may allow a privileged user to potentially enable escalation of privilege, denial of service or informati...

K84141859: Apache Traffic Control vulnerability CVE-2019-12405

Security Advisory Description Improper authentication is possible in Apache Traffic Control versions 3.0.0 and 3.0.1 if LDAP is enabled for login in the Traffic Ops API component. Given a username for a user that can be authenticated via LDAP, it is possible to improperly authenticate as that use...

K56213806: Intel SSD INTEL-SA-00563 vulnerabilities

Security Advisory Description CVE-2021-33069 Improper resource shutdown or release in firmware for some IntelR SSD, IntelR SSD DC, IntelR OptaneTM SSD and IntelR OptaneTM SSD DC may allow a privileged user to potentially enable denial of service via local access. CVE-2021-33074 Protection mechani...

CVE-2015-10083

A vulnerability has been found in harrystech Dynosaur-Rails and classified as critical. Affected by this vulnerability is the function basicauth of the file app/controllers/applicationcontroller.rb. The manipulation leads to improper authentication. This product does not use versioning. This is w...

CVE-2015-10083 harrystech Dynosaur-Rails application_controller.rb basic_auth improper authentication

A vulnerability has been found in harrystech Dynosaur-Rails and classified as critical. Affected by this vulnerability is the function basicauth of the file app/controllers/applicationcontroller.rb. The manipulation leads to improper authentication. This product does not use versioning. This is w...

CVE-2015-10083

CVE-2015-10083 affects harrystech Dynosaur-Rails; the vulnerability is in the basic_auth function of app/controllers/application_controller.rb, leading to improper authentication. The issue is documented across multiple sources and is tied to the patch named 04b223813f0e336aab50bff140d0f5889c31db...

CVE-2023-0905

A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file changePasswordForEmployee.php. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has...

CVE-2023-0905 SourceCodester Employee Task Management System changePasswordForEmployee.php improper authentication

A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file changePasswordForEmployee.php. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has...