8708 matches found
CVE-2023-39531: Improper Authentication
Sentry is an error tracking and performance monitoring platform. Starting in version 10.0.0 and prior to version 23.7.2, an attacker with sufficient client-side exploits could retrieve a valid access token for another user during the OAuth token exchange due to incorrect credential validation. Th...
CVE-2023-21626 Improper Authentication in HLOS.
Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key...
CVE-2023-21626: Improper Authentication
Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key...
PT-2023-18289 · Hlos · Hlos
Name of the Vulnerable Software and Affected Versions: HLOS affected versions not specified Description: The issue is related to a cryptographic problem in HLOS due to improper authentication during key velocity checks when using more than one key. Recommendations: At the moment, there is no...
Improper Authentication
gitlab is vulnerable to Improper Authentication. The vulnerability occurs due to incorrect authentication with package registries when IP restrictions are configured resulting in allowing a malicious attacker to misuse a deploy token from any location...
Improper Authentication
gitlab is vulnerable to Improper Authentication. The vulnerability exists due to missing authentication which allows an attacker with access to a victim's session to disable two-factor authentication...
Improper Authentication
gitlab is vulnerable to Improper Authentication. The vulnerability allows a malicious attacker to steal a users API token via a malicious link due to insufficient validation...
Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile
🕵️ Vulnerability Scanner 🛡️ This Python script helps you scan...
CVE-2023-0264: Improper Authentication
A flaw was found in Keycloaks OpenID Connect user authentication, which may incorrectly authenticate requests. An authenticated attacker who could obtain information from a user request within the same realm could use that data to impersonate the victim and generate new session tokens. This issue...
CVE-2023-38691: Improper Authentication
matrix-appservice-bridge provides an API for setting up bridges. Starting in version 4.0.0 and prior to versions 8.1.2 and 9.0.1, a malicious Matrix server can use a foreign user's MXID in an OpenID exchange, allowing a bad actor to impersonate users when using the provisioning API. The library...
The vulnerability of Google Chrome’s Autofill function allows attackers to circumvent navigation restrictions.
The vulnerability of Google Chrome’s Autofill function is related to improper authentication procedures. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...
CVE-2023-34196: Improper Authentication
In the Keyfactor EJBCA before 8.0.0, the RA web certificate distribution servlet /ejbca/ra/cert allows partial denial of service due to an authentication issue. In configurations using OAuth, disclosure of CA certificates attributes and public keys to unauthenticated or less privileged users may...
CVE-2023-20214: Improper Authentication
A vulnerability in the request authentication validation for the REST API of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to gain read permissions or limited write permissions to the configuration of an affected Cisco SD-WAN vManage instance. This vulnerability is...
Improper Authentication
silverstripe/framework is vulnerable to Improper Authentication. The vulnerability exists due to the user creation process in Member.php, which inserts an empty password when a new user is created. While the default member authenticator and login form require a non-empty password, other...
Moxa OnCell Improper Authentication (CVE-2016-8362)
An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series...
Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile
nmap-CVE-2023-35078-Exploit Nmap script to exploit CVE-2023-35...
CVE-2023-33563: Improper Authentication
In PHP Jabbers Time Slots Booking Calendar 3.3 , lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts...
Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile
CVE-2023-35078 This script ethically checks for the presence...