CVE-2021-37100

There is a Improper Authentication vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to account authentication bypassed...

CVE-2021-37100

There is a Improper Authentication vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to account authentication bypassed...

CVE-2021-37100

CVE-2021-37100 affects Huawei HarmonyOS smartphones. The vulnerability is described as an improper authentication issue that can lead to account authentication bypass. According to NVD, the CVSS v3.1 base score is 7.5 (HIGH) with network attack vector and no user interaction required; impact is c...

PT-2021-21519

Name of the Vulnerable Software and Affected Versions Huawei Smartphone affected versions not specified Description The issue is related to an Improper Authentication vulnerability. Successful exploitation of this vulnerability may lead to account authentication being bypassed. Recommendations At...

CVE-2021-37100: Improper Authentication

There is a Improper Authentication vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to account authentication bypassed...

CVE-2021-39890: Improper Authentication

It was possible to bypass 2FA for LDAP users and access some specific pages with Basic Authentication in GitLab 14.1.1 and above...

CVE-2021-43786: Improper Authentication

Nodebb is an open source Node.js based forum software. In affected versions incorrect logic present in the token verification step unintentionally allowed master token access to the API. The vulnerability has been patch as of v1.18.5. Users are advised to upgrade as soon as possible...

CVE-2021-38686

An improper authentication vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later...

Authentication flaw

An improper authentication vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later...

CVE-2021-38686 Improper Authentication Vulnerability in VioStor

An improper authentication vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later...

CVE-2021-38686

CVE-2021-38686 is an improper authentication vulnerability impacting QNAP VioStor/NVR via QVR. The issue allows remote compromise; CVSSv3.1 base score 8.8 (HIGH) with network access and required user interaction. A fix is available in QVR FW 5.1.6 build 20211109 and later. Exploitation status is ...

CVE-2021-38686

An improper authentication vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later...

CVE-2021-38686: Improper Authentication

An improper authentication vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later...

PT-2021-22257

Name of the Vulnerable Software and Affected Versions QNAP VioStor versions prior to QVR FW 5.1.6 build 20211109 Description An improper authentication issue has been reported, allowing attackers to compromise the system's security if exploited. Recommendations For QNAP VioStor versions prior to...

Ivanti Avalanche User Management Improper Authentication Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of Ivanti Avalanche. Authentication is required to exploit this vulnerability. The specific flaw exists within the userManagement.jsf page. The issue results from improper authentication. An attacker can...

CVE-2021-0096

Improper authentication in the software installer for the IntelR NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN, NUC7i7DN before version 1.78.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33087

Improper authentication in the installer for the IntelR NUC M15 Laptop Kit Management Engine driver pack before version 15.0.10.1508 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2021-33087

Mode C: CVE-2021-33087 affects the Intel NUC M15 Laptop Kit driver pack (Management Engine) installer prior to version 15.0.10.1508. The Red Hat advisory and Intel advisory confirm an improper authentication issue in the installer that may allow an authenticated user to cause a denial of service ...

PT-2021-20039

Name of the Vulnerable Software and Affected Versions IntelR NUC M15 Laptop Kit Management Engine driver pack versions prior to 15.0.10.1508 Description The issue is related to improper authentication in the installer for the IntelR NUC M15 Laptop Kit Management Engine driver pack. This may allow...

CVE-2021-33087: Improper Authentication

Improper authentication in the installer for the IntelR NUC M15 Laptop Kit Management Engine driver pack before version 15.0.10.1508 may allow an authenticated user to potentially enable denial of service via local access...