8750 matches found
CVE-2023-22663
Improper authentication for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access...
CVE-2023-28377: Improper Authentication
Improper authentication in some IntelR NUC Kit NUC11PH USB firmware installation software before version 1.1 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-22663: Improper Authentication
Improper authentication for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access...
CVE-2023-32661: Improper Authentication
Improper authentication in some IntelR NUC Kits NUC7PJYH and NUC7CJYH Realtek SD Card Reader Driver installation software before version 10.0.19041.29098 may allow an authenticated user to potentially enable escalation of privilege via local access...
PT-2023-23941
Name of the Vulnerable Software and Affected Versions IntelR NUC Kits NUC7PJYH and NUC7CJYH Realtek SD Card Reader Driver installation software versions prior to 10.0.19041.29098 Description The issue is related to improper authentication in the Realtek SD Card Reader Driver installation software...
PT-2023-18611
Name of the Vulnerable Software and Affected Versions Intel Unison affected versions not specified Description The issue concerns improper authentication in Intel Unison software, potentially allowing an authenticated user to escalate privileges via network access. Recommendations At the moment,...
TP-Link TL-WR902AC loginFs Improper Authentication Information Disclosure Vulnerability
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR902AC routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default...
Siemens SIMATIC MV500
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
Authentication flaw
Improper Authentication vulnerability in Apereo CAS in jakarta.servlet.http.HttpServletRequest.getRemoteAddr method allows Multi-Factor Authentication bypass.This issue affects CAS: through 7.0.0-RC7. It is unknown whether in new versions the issue will be fixed. For the date of publication there...
CVE-2023-4612
CVE-2023-4612 is an Improper Authentication vulnerability in Apereo CAS via jakarta.servlet.http.HttpServletRequest.getRemoteAddr, enabling MFA bypass. Affected: Apereo CAS up to and including 7.0.0-RC7. Public patches are not available; the vendor does not treat it as a vulnerability. Related so...
CVE-2023-4612 MFA bypass in Apereo CAS
Improper Authentication vulnerability in Apereo CAS in jakarta.servlet.http.HttpServletRequest.getRemoteAddr method allows Multi-Factor Authentication bypass.This issue affects CAS: through 7.0.0-RC7. It is unknown whether in new versions the issue will be fixed. For the date of publication there...
CVE-2023-29975: Improper Authentication
An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification...
CVE-2023-4612: Authentication Bypass by Assumed-Immutable Data
Improper Authentication vulnerability in Apereo CAS in jakarta.servlet.http.HttpServletRequest.getRemoteAddr method allows Multi-Factor Authentication bypass.This issue affects CAS: through 7.0.0-RC7. It is unknown whether in new versions the issue will be fixed. For the date of publication there...
PT-2023-29853 · Apereo · Apereo Cas
Name of the Vulnerable Software and Affected Versions: Apereo CAS versions through 7.0.0-RC7 Description: The issue is related to an Improper Authentication vulnerability in the jakarta.servlet.http.HttpServletRequest.getRemoteAddr method, which allows Multi-Factor Authentication bypass. There is...
The vulnerabilities of the pmdm_wp_delete_user_meta, pmdm_wp_delete_term_meta, and pmdm_wp_ajax_delete_meta functions of the WordPress Content Management Plugin, Post Meta Data Manager, allow a malicious user to delete arbitrary user metadata.
The vulnerabilities of the pmdmwpdeleteusermeta, pmdmwpdeletetermmeta, and pmdmwpajaxdeletemeta functions of the WordPress Content Management Plugin, Post Meta Data Manager, are related to incorrect authentication procedures. Exploiting these vulnerabilities could allow a malicious actor to...
CVE-2023-42554
Improper Authentication vulnerabiity in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication...
CVE-2023-42554
Improper Authentication vulnerabiity in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication...
CVE-2023-42554
CVE-2023-42554 affects Samsung Pass, with vulnerable versions prior to 4.3.00.17. The issue is an improper authentication mechanism that allows a physical attacker to bypass authentication. Public risk details are supported by multiple connected sources indicating the same affected product and ve...