Lucene search
+L

8673 matches found

Cvelist
Cvelist
•added 2023/01/31 12:00 a.m.•40 views

CVE-2022-30421

Improper Authentication vulnerability in Toshiba Storage Security Software V1.2.0.7413 is that allows for sensitive information to be obtained vialocal password authentication module...

7.9AI score0.00346EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/01/31 12:00 a.m.•2 views

PT-2023-13008

Name of the Vulnerable Software and Affected Versions Toshiba Storage Security Software version 1.2.0.7413 Description The issue is related to an Improper Authentication vulnerability that allows sensitive information to be obtained via the local password authentication module. Recommendations Fo...

7.8CVSS0.00346EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/31 12:00 a.m.•3 views

CVE-2022-30421: Improper Authentication

Improper Authentication vulnerability in Toshiba Storage Security Software V1.2.0.7413 is that allows for sensitive information to be obtained vialocal password authentication module...

7.8CVSS5.8AI score0.00346EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/01/31 12:00 a.m.•43 views

CVE-2022-47700

COMFAST Shenzhen Sihai Zhonglian Network Technology Co., Ltd CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Incorrect Access Control. Improper authentication allows requests to be made to back-end scripts without a valid session or authentication...

7.9AI score0.00509EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/31 12:00 a.m.•4 views

CVE-2020-20402: Improper Authentication

Westbrookadmin portfolioCMS v1.05 allows attackers to bypass password validation and access sensitive information via session fixation...

7.5CVSS5.8AI score0.00749EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/01/31 12:00 a.m.•9 views

CVE-2022-47700

COMFAST Shenzhen Sihai Zhonglian Network Technology Co., Ltd CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Incorrect Access Control. Improper authentication allows requests to be made to back-end scripts without a valid session or authentication...

7.7AI score0.00509EPSS
SaveExploits0References1
CVE
CVE
•added 2023/01/31 12:00 a.m.•61 views

CVE-2022-30421

The CVE-2022-30421 entry concerns Toshiba Storage Security Software, version 1.2.0.7413, with an improper authentication flaw that could allow a local attacker to obtain sensitive information via the password authentication module. The issue is described as a local vulnerability with high impact ...

7.8CVSS7.6AI score0.00346EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2023/01/30 11:15 p.m.•15 views

CVE-2022-32514

A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to gain control of the device when logging into a web page. Affected Products: C-Bus Network Automation Controller - LSS5500NAC Versions prior to V1.10.0, Wiser for C-Bus Automation Controller - LSS5500SHAC...

9.8CVSS5.8AI score0.00788EPSS
SaveExploits0References1
NVD
NVD
•added 2023/01/30 11:15 p.m.•39 views

CVE-2022-32514

A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to gain control of the device when logging into a web page. Affected Products: C-Bus Network Automation Controller - LSS5500NAC Versions prior to V1.10.0, Wiser for C-Bus Automation Controller - LSS5500SHAC...

9.8CVSS9.7AI score0.00788EPSS
SaveExploits0References1
Prion
Prion
•added 2023/01/30 11:15 p.m.•27 views

Authentication flaw

A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to gain control of the device when logging into a web page. Affected Products: C-Bus Network Automation Controller - LSS5500NAC Versions prior to V1.10.0, Wiser for C-Bus Automation Controller - LSS5500SHAC...

7.5CVSS9.5AI score0.00788EPSS
SaveExploits0References1Affected Software6
Github Security Blog
Github Security Blog
•added 2023/01/30 6:30 p.m.•46 views

Withdrawn Advisory: Apache IoTDB contains Improper Authentication

Withdrawn Advisory This advisory has been withdrawn because the affected component, org.apache.iotdb.admin:iotdb-web-workbench, is not in a supported ecosystem. This link is maintained to preserve external references. Original Description Improper Authentication vulnerability in Apache Software...

7.5CVSS7.2AI score0.01331EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2023/01/30 6:30 p.m.•35 views

GHSA-PP4W-9X82-6R47 Withdrawn Advisory: Apache IoTDB contains Improper Authentication

Withdrawn Advisory This advisory has been withdrawn because the affected component, org.apache.iotdb.admin:iotdb-web-workbench, is not in a supported ecosystem. This link is maintained to preserve external references. Original Description Improper Authentication vulnerability in Apache Software...

7.5CVSS7.4AI score0.01331EPSS
SaveExploits0References3
NVD
NVD
•added 2023/01/30 5:15 p.m.•51 views

CVE-2023-24830

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects iotdb-web-workbench component: from 0.13.0 before 0.13.3...

7.5CVSS7.6AI score0.01331EPSS
SaveExploits0References1
PyPA
PyPA
•added 2023/01/30 5:15 p.m.•18 views

PYSEC-2023-6

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 before 0.13.3...

7.5CVSS7AI score0.01331EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/01/30 4:25 p.m.•8 views

CVE-2023-24830 Apache IoTDB Workbench: apache/iotdb-web-workbench: create a user without authorization

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects iotdb-web-workbench component: from 0.13.0 before 0.13.3...

7.8AI score0.01331EPSS
SaveExploits0References1
Mend
Mend
•added 2023/01/30 4:25 p.m.•2 views

CVE-2023-24830

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects iotdb-web-workbench component: from 0.13.0 before 0.13.3...

8.7CVSS0.01331EPSS
SaveExploits0References4
CVE
CVE
•added 2023/01/30 4:25 p.m.•114 views

CVE-2023-24830

CVE-2023-24830 affects Apache IoTDB, specifically the iotdb-web-workbench component (0.13.0 before 0.13.3). The issue is described as an improper authentication vulnerability that can allow a remote attacker to bypass authorization. The most concrete exploitation detail in the connected sources n...

7.5CVSS7.5AI score0.01331EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/01/30 4:25 p.m.•57 views

CVE-2023-24830 Apache IoTDB Workbench: apache/iotdb-web-workbench: create a user without authorization

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects iotdb-web-workbench component: from 0.13.0 before 0.13.3...

7.8AI score0.01331EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/30 12:00 a.m.•6 views

CVE-2022-32514: Improper Authentication

A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to gain control of the device when logging into a web page. Affected Products: C-Bus Network Automation Controller - LSS5500NAC Versions prior to V1.10.0, Wiser for C-Bus Automation Controller - LSS5500SHAC...

9.8CVSS5.9AI score0.00788EPSS
SaveExploits0References2
CVE
CVE
•added 2023/01/30 12:00 a.m.•73 views

CVE-2022-32514

CVE-2022-32514 describes an improper authentication vulnerability that could let an attacker gain control of the device by logging into a web page. Affected products include Schneider Electric C‑Bus Network Automation Controller (LSS5500NAC), Wiser for C‑Bus Automation Controller (LSS5500SHAC), C...

9.8CVSS9.5AI score0.00788EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder