Lucene search
+L

8750 matches found

Cvelist
Cvelist
•added 2023/12/05 8:20 p.m.•56 views

CVE-2023-5970

Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass...

8.7AI score0.00911EPSS
SaveExploits0References1
CVE
CVE
•added 2023/12/05 8:20 p.m.•70 views

CVE-2023-5970

CVE-2023-5970 affects SonicWall SMA100 SSL-VPN virtual office portal. The issue is improper authentication that lets a remote authenticated attacker create an identical external-domain user using accent characters, resulting in an MFA bypass. Affected devices include SMA100 and other SMA families...

8.8CVSS8.4AI score0.00911EPSS
SaveIn wildExploits0References1Affected Software1
GithubExploit
GithubExploit
•added 2023/12/05 11:35 a.m.•19 views

Exploit for Improper Authentication in Owncloud Owncloud_Server

ownCloud exploits for CVE-2023-49105...

10CVSS7AI score0.78428EPSS
SaveExploits9
OSV
OSV
•added 2023/12/05 3:15 a.m.•10 views

CVE-2023-42575

Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid flag setting...

6.8CVSS5.8AI score0.0038EPSS
SaveExploits0References1
NVD
NVD
•added 2023/12/05 3:15 a.m.•39 views

CVE-2023-33070

Transient DOS in Automotive OS due to improper authentication to the secure IO calls...

7.1CVSS0.00141EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/12/05 3:04 a.m.•42 views

CVE-2023-33070 Improper Authentication in Automotive OS

Transient DOS in Automotive OS due to improper authentication to the secure IO calls...

7.1CVSS7.2AI score0.00141EPSS
SaveExploits0References1
CVE
CVE
•added 2023/12/05 3:04 a.m.•93 views

CVE-2023-33070

CVE-2023-33070 describes a Transient DOS in Automotive OS caused by improper authentication to secure IO calls. Affected component: Automotive OS' secure IO interface; root cause is improper authentication enabling local access to IO calls, leading to availability impact (DoS). According to conne...

7.1CVSS5.8AI score0.00141EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/12/05 3:04 a.m.•54 views

CVE-2023-33054 Improper Authentication in GPS HLOS Driver

Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data...

9.1CVSS9.4AI score0.00361EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/12/05 2:44 a.m.•13 views

CVE-2023-42576

Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid exception handler...

5.4CVSS6.7AI score0.0038EPSS
SaveExploits0References1
CVE
CVE
•added 2023/12/05 2:44 a.m.•50 views

CVE-2023-42575

Samsung Pass on mobile devices is impacted by CVE-2023-42575, affecting versions prior to 4.3.00.17. The issue is an improper authentication flaw caused by an invalid flag setting that allows physical attackers with direct device access to bypass authentication. Remediation requires updating to v...

6.8CVSS6.6AI score0.0038EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/12/05 12:00 a.m.•15 views

PT-2023-32452 · Sonicwall · Sma100 Ssl-Vpn

Name of the Vulnerable Software and Affected Versions: SMA100 SSL-VPN virtual office portal affected versions not specified Description: The issue is related to improper authentication in the SMA100 SSL-VPN virtual office portal. This allows a remote authenticated attacker to create an identical...

8.8CVSS7.1AI score0.00911EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/05 12:00 a.m.•8 views

CVE-2023-33054: Improper Authentication

Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data...

9.1CVSS8.2AI score0.00361EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/12/05 12:00 a.m.•16 views

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. The Qualcomm Chipsets have a security vulnerability that stems from a denial of service in the automotive operating system due to improper authentication of secure IO calls...

7.1CVSS5.7AI score0.00141EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/05 12:00 a.m.•3 views

CVE-2023-33070: Improper Authentication

Transient DOS in Automotive OS due to improper authentication to the secure IO calls...

7.1CVSS6AI score0.00141EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/05 12:00 a.m.•6 views

CVE-2023-42576: Improper Authentication

Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid exception handler...

6.8CVSS6.8AI score0.0038EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/05 12:00 a.m.•4 views

CVE-2023-42575: Incorrect Authorization

Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid flag setting...

6.8CVSS6.8AI score0.0038EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/05 12:00 a.m.•7 views

CVE-2023-5970: Improper Authentication

Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass...

8.8CVSS7.5AI score0.00911EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/12/04 12:00 a.m.•20 views

PT-2023-28445 · Samsung · Samsung Pass

Name of the Vulnerable Software and Affected Versions: Samsung Pass versions prior to 4.3.00.17 Description: The issue allows physical attackers to bypass authentication due to invalid flag setting. This is related to an Improper Authentication vulnerability. Recommendations: For versions prior t...

6.8CVSS6.7AI score0.0038EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/12/04 12:00 a.m.•5 views

PT-2023-29200

Name of the Vulnerable Software and Affected Versions Dell DM5500 versions 5.14.0.0 and prior Description The issue is related to an improper authentication vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to resources or functionality...

9.8CVSS6.3AI score0.01117EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2023/12/04 12:00 a.m.•19 views

Dell DM5500 授权问题漏洞

The Dell DM5500 is an integrated solution from Dell, Inc. It provides industry-leading deduplication, data protection solutions and multi-cloud capabilities. The Dell DM5500 suffers from an Authentication Error vulnerability that originates from incorrect authentication of the system and can be...

9.8CVSS7.5AI score0.01117EPSS
SaveExploits0References1
Rows per page
Query Builder