CVE-2022-34919: Improper Authentication

The file upload wizard in Zengenti Contensis Classic before 15.2.1.79 does not correctly check that a user has authenticated. By uploading a crafted aspx file, it is possible to execute arbitrary commands...

CVE-2022-34149: Improper Authentication

Authentication Bypass vulnerability in miniOrange WP OAuth Server plugin = 3.0.4 at WordPress...

Improper Authentication

Overview omniauth is a generalized Rack framework for multiple-provider authentication. Affected versions of this package are vulnerable to Improper Authentication. It does not escape the messagekey value. Remediation Upgrade omniauth to version 1.9.2 or higher. References - GitHub Commit...

CVE-2022-22730

Improper authentication in the IntelR Edge Insights for Industrial software before version 2.6.1 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2022-22730

The CVE concerns Intel® Edge Insights for Industrial software with improper authentication that could allow an unauthenticated user to escalate privileges via network access. Affected product: Intel® Edge Insights for Industrial software prior to version 2.6.1. Root cause: improper authentication...

CVE-2022-22730

Improper authentication in the IntelR Edge Insights for Industrial software before version 2.6.1 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

PT-2022-15650 · Intel · Intel Edge Insights For Industrial

Name of the Vulnerable Software and Affected Versions: IntelR Edge Insights for Industrial versions prior to 2.6.1 Description: The issue is related to improper authentication, which may allow an unauthenticated user to potentially enable escalation of privilege via network access. Recommendation...

CVE-2022-35198: Improper Authentication

Contract Management System v2.0 contains a weak default password which gives attackers to access database connection information...

CVE-2022-22730: Improper Authentication

Improper authentication in the IntelR Edge Insights for Industrial software before version 2.6.1 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2022-2336 Softing Secure Integration Server Improper Authentication

Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as admin and password as admin. This allows Softing to log in to the server directly to perform administrative functions. Upon installation or upon first login, the...

CVE-2022-2336 Softing Secure Integration Server Improper Authentication

Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as admin and password as admin. This allows Softing to log in to the server directly to perform administrative functions. Upon installation or upon first login, the...

CVE-2022-2336: Improper Authentication

Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as admin and password as admin. This allows Softing to log in to the server directly to perform administrative functions. Upon installation or upon first login, the...

EulerOS 2.0 SP8 : curl (EulerOS-SA-2022-2217)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections...

CVE-2022-2662

Sequi PortBloque S has a improper authentication issues which may allow an attacker to bypass the authentication process and gain user-level access to the device...

Authentication flaw

Sequi PortBloque S has a improper authentication issues which may allow an attacker to bypass the authentication process and gain user-level access to the device...

CVE-2022-2662 Sequi PortBloque S Improper Authentication

Sequi PortBloque S has a improper authentication issues which may allow an attacker to bypass the authentication process and gain user-level access to the device...

CVE-2022-2662

CVE-2022-2662 relates to the Sequi PortBloque S firewall and is described as an improper authentication vulnerability that may allow an attacker to bypass the authentication process and gain user‑level access to the device. Public sources in the connected set confirm affected product: Sequi PortB...

CVE-2022-2662 Sequi PortBloque S Improper Authentication

Sequi PortBloque S has a improper authentication issues which may allow an attacker to bypass the authentication process and gain user-level access to the device...

CVE-2022-2662: Improper Authentication

Sequi PortBloque S has a improper authentication issues which may allow an attacker to bypass the authentication process and gain user-level access to the device...

Sequi PortBloque S

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Sequi Equipment: Sequi PortBloque S Vulnerabilities : Improper Authentication, Improper Authorization 2. RISK EVALUATION Successful exploitation of these vulnerabilities could result in unauthorized...