CVE-2022-26508: Improper Authentication

Improper authentication in the IntelR SDP Tool before version 3.0.0 may allow an unauthenticated user to potentially enable information disclosure via network access...

PT-2022-19899 · Intel · Intel Amt

Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.93 IntelR AMT versions prior to 11.12.93 IntelR AMT versions prior to 11.22.93 IntelR AMT versions prior to 12.0.92 IntelR AMT versions prior to 14.1.67 IntelR AMT versions prior to 15.0.42 IntelR AMT version...

PT-2022-23938 · Intel · Intel Nuc Kit

Name of the Vulnerable Software and Affected Versions: IntelR NUC Kits versions prior to RY0386 Description: The issue is related to improper authentication in BIOS firmware, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For...

CVE-2022-29893: Improper Authentication

Improper authentication in firmware for IntelR AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an authenticated user to potentially enable escalation of privilege via network access...

CVE-2022-27874: Improper Authentication

Improper authentication in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow a privileged user to potentially enable escalation of privilege via physical access...

PT-2022-23333 · Intel · Intel Nuc Kit +1

Name of the Vulnerable Software and Affected Versions: IntelR NUC Boards and IntelR NUC Kits versions prior to MYi30060 Description: The issue concerns improper authentication in BIOS firmware, potentially allowing a privileged user to enable escalation of privilege via local access...

CVE-2022-34331: Improper Authentication

After performing a sequence of Power FW950, FW1010 maintenance operations a SRIOV network adapter can be improperly configured leading to desired VEPA configuration being disabled. IBM X-Force ID: 229695...

CVE-2022-21794: Improper Authentication

Improper authentication in BIOS firmware for some IntelR NUC Boards, IntelR NUC Business, IntelR NUC Enthusiast, IntelR NUC Kits before version HN0067 may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2022-17909 · Intel · Intel Sdp Tool

Name of the Vulnerable Software and Affected Versions: IntelR SDP Tool versions prior to 3.0.0 Description: The issue is related to improper authentication, which may allow an unauthenticated user to potentially enable information disclosure via network access. Recommendations: For versions prior...

CVE-2022-39038

Agentflow BPM enterprise management system has improper authentication. A remote attacker with general user privilege can change the name of the user account to acquire arbitrary account privilege, and access, manipulate system or disrupt service...

Authentication flaw

Agentflow BPM enterprise management system has improper authentication. A remote attacker with general user privilege can change the name of the user account to acquire arbitrary account privilege, and access, manipulate system or disrupt service...

CVE-2022-39038

The CVE concerns Flowring Technology’s Agentflow BPM Enterprise Management System. Affected component: improper authentication that allows a remote attacker with general user privileges to rename a user account, enabling arbitrary account privilege escalation and potential to access, manipulate, ...

CVE-2022-38119: Improper Authentication

UPSMON Pro login function has insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and get administrator privilege to access, control system or disrupt service...

Flowring Technology Agentflow BPM 授权问题漏洞

Flowring Technology Agentflow BPM is an enterprise process management system from Flowring Technology. Flowring Technology Agentflow BPM suffers from an authorization vulnerability that arises from improper authentication of its enterprise management system, which could allow a remote attacker wi...

CVE-2022-39038: Improper Authentication

Agentflow BPM enterprise management system has improper authentication. A remote attacker with general user privilege can change the name of the user account to acquire arbitrary account privilege, and access, manipulate system or disrupt service...

PT-2022-24692 · Unknown · Agentflow Bpm

Name of the Vulnerable Software and Affected Versions: Agentflow BPM enterprise management system affected versions not specified Description: The issue is related to improper authentication in the Agentflow BPM enterprise management system. A remote attacker with general user privilege can explo...

CVE-2022-39892: Improper Authentication

Improper access control in Samsung Pass prior to version 4.0.05.1 allows attackers to unauthenticated access via keep open feature...

Authentication Bypass

dovecot, edge is vulnerable to improper authentication. The vulnerability exists due to lack of password validation in dovecot, edge which allows a remote attacker access confidential information in the system...

JVN#09409909: Multiple vulnerabilities in WordPress

WordPress contains multiple vulnerabilities listed below which are to the WordPress Post by Email Feature. Stored Cross-site scripting CWE-79 - CVE-2022-43497 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...

WordPress Ocean Extra Plugin <= 1.5.8 Improper Authentication Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...