Qualcomm Wlan Firmware Security Vulnerability

Qualcomm Wlan Firmware is a Wlan support firmware from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Wlan Firmware that could result in a denial of service due to improper authentication when processing host WMI commands...

CVE-2021-3282: Improper Authentication

HashiCorp Vault Enterprise 1.6.0 & 1.6.1 allowed the remove-peer raft operator command to be executed against DR secondaries without authentication. Fixed in 1.6.2...

CVE-2021-25910 ZIV AUTOMATION 4CCT vulnerable to improper authentication

Improper Authentication vulnerability in the cookie parameter of ZIV AUTOMATION 4CCT-EA6-334126BF allows a local attacker to perform modifications in several parameters of the affected device as an authenticated user...

CVE-2021-25910

The CVE-2021-25910 entry involves ZIV AUTOMATION 4CCT-EA6-334126BF with an improper authentication flaw in the cookie parameter. This allows a local attacker, as an authenticated user, to modify several device parameters (impacting integrity). The primary affected component is the cookie handling...

CVE-2021-25910: Improper Authentication

Improper Authentication vulnerability in the cookie parameter of ZIV AUTOMATION 4CCT-EA6-334126BF allows a local attacker to perform modifications in several parameters of the affected device as an authenticated user...

PT-2021-16841

Name of the Vulnerable Software and Affected Versions ZIV AUTOMATION 4CCT-EA6-334126BF affected versions not specified Description The issue concerns an Improper Authentication vulnerability in the cookie parameter, allowing a local attacker to modify several parameters of the affected device as ...

CVE-2021-25910

Improper Authentication vulnerability in the cookie parameter of ZIV AUTOMATION 4CCT-EA6-334126BF allows a local attacker to perform modifications in several parameters of the affected device as an authenticated user...

CVE-2021-26117: Improper Authentication

The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to verify a valid users password in error...

CVE-2020-28874: Improper Authentication

reset-password.php in ProjectSend before r1295 allows remote attackers to reset a password because of incorrect business logic. Errors are not properly considered an invalid token parameter...

CVE-2021-3297: Improper Authentication

On Zyxel NBG2105 V1.00AAGU.2C0 devices, setting the login cookie to 1 provides administrator access...

CVE-2021-25863: Improper Authentication

Open5GS 2.1.3 listens on 0.0.0.0:3000 and has a default password of 1423 for the admin account...

The vulnerability of the command-line interface of the Cisco Connected Mobile Experiences software allows a hacker to obtain information about users of the CMX system.

The vulnerability of the command-line interface of the Cisco Connected Mobile Experiences software is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to gain access and disclose information about users of the CMX system...

CVE-2020-4983: Improper Authentication

IBM Spectrum LSF 10.1 and IBM Spectrum LSF Suite 10.2 could allow a user on the local network who has privileges to submit LSF jobs to execute arbitrary commands. IBM X-Force ID: 192586...

CVE-2021-22171: Improper Authentication

Insufficient validation of authentication parameters in GitLab Pages for GitLab 11.5+ allows an attacker to steal a victim's API token if they click on a maliciously crafted link...

CVE-2020-5686: Improper Authentication

Incorrect implementation of authentication algorithm issue in UNIVERGE SV9500 series from V1 to V7and SV8500 series from S6 to S8 allows an attacker to access the remote system maintenance feature and obtain the information by sending a specially crafted request to a specific URL...

CVE-2020-5633: Improper Authentication

Multiple NEC products Express5800/T110j, Express5800/T110j-S, Express5800/T110j 2nd-Gen, Express5800/T110j-S 2nd-Gen, iStorage NS100Ti, and Express5800/GT110j where Baseboard Management Controller BMC firmware Rev1.09 and earlier is applied allows remote attackers to bypass authentication and the...

CVE-2020-27488: Improper Authentication

Loxone Miniserver devices with firmware before 11.1 aka 11.1.9.3 are unable to use an authentication method that is based on the "signature of the update package." Therefore, these devices or attackers who are spoofing these devices can continue to use an unauthenticated cloud service for an...

CVE-2021-1725: Improper Authentication

Bot Framework SDK Information Disclosure Vulnerability...

Hitachi ABB Power Grids FOX615 Multiservice-Multiplexer

1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Hitachi ABB Power Grids Equipment: FOX615 Multiservice-Multiplexer Vulnerability: Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker...

CVE-2012-10001: Improper Authentication

The Limit Login Attempts plugin before 1.7.1 for WordPress does not clear auth cookies upon a lockout, which might make it easier for remote attackers to conduct brute-force authentication attempts...