PT-2022-5796

Name of the Vulnerable Software and Affected Versions VMware Workspace ONE Assist versions prior to 22.10 Description The issue is related to insufficient authentication procedure in VMware Workspace ONE Assist, allowing a remote attacker to elevate their privileges. A malicious actor with networ...

Sanitization Management System 访问控制错误漏洞

Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. An access control error vulnerability exists in Sanitialization Management System version 1.0 that stems from insufficient authentication...

Cisco Touch 10 Authentication Error Vulnerability

Cisco Touch 10 is a video conferencing system control unit from Cisco. It is designed for intuitive touch-based interaction with Webex Room Kit Series, Webex Rome Series, and Panorama Series systems, providing instant access to meetings, contacts, directories, and content. An authentication error...

PT-2022-5115 · Dell Emc · Dell Emc Xtremio

Name of the Vulnerable Software and Affected Versions: Dell EMC XtremIO versions prior to X2 6.4.0-22 Description: The issue is related to insufficient authentication attempt limitation, allowing a remote unauthenticated attacker to potentially exploit it and gain access to an admin account throu...

PT-2022-4908 · Jenkins · Jenkins Security Inspector Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Security Inspector Plugin versions 117.v6eecc36919c2 and earlier Description: The issue is related to insufficient authentication of executed POST requests, allowing a remote attacker to perform a cross-site request forgery CSRF attac...

PT-2022-6522 · Unknown · Wlan Module

Name of the Vulnerable Software and Affected Versions: WLAN module affected versions not specified Description: The issue is related to a vulnerability in permission verification within the WLAN module. This vulnerability can be exploited by third-party apps to affect WLAN functions. The problem ...

WordPress plugin Accordions 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

SOFTCREATE L2Blocker authentication error vulnerability

SOFTCREATE L2Blocker is a device type security system from SOFTCREATE Japan. It detects and blocks unauthorized connections from network devices to the internal network to prevent information leakage.An authentication error vulnerability exists in SOFTCREATE L2Blockeron-premise version 4.8.5 and...

CVE-2021-26627

Real-time image information exposure is caused by insufficient authentication for activated RTSP port. This vulnerability could allow to remote attackers to send the RTSP requests using ffplay command and lead to leakage a live image...

CVE-2021-26627 EDrhyme QCP 200W Information Exposure Vulnerability

Real-time image information exposure is caused by insufficient authentication for activated RTSP port. This vulnerability could allow to remote attackers to send the RTSP requests using ffplay command and lead to leakage a live image...

PT-2022-9776

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue is related to real-time image information exposure due to insufficient authentication for the activated RTSP port. This could allow remote attackers to send RTSP requests,...

Authentication flaw

An improper authentication vulnerability leading to information leakage was discovered in iptime NAS2dual. Remote attackers are able to steal important information in the server by exploiting vulnerabilities such as insufficient authentication when accessing the shared folder and changing user’s...

Rockwell Automation MicroLogix Improper Authentication (CVE-2017-12093)

An exploitable insufficient resource pool vulnerability exists in the session communication functionality of Allen Bradley Micrologix 1400 Series B Firmware 21.2 and before. A specially crafted stream of packets can cause a flood of the session resource pool resulting in legitimate connections to...

CVE-2021-23196 Fresenius Kabi Agilia Connect Infusion System insufficiently protected credentials

The web application on Agilia Link+ version 3.0 implements authentication and session management mechanisms exclusively on the client-side and does not protect authentication attributes sufficiently...

Silicon Labs 700 数据伪造问题漏洞

Silicon Labs 700 is a family of chips from Silicon Labs, Inc. The Silicon Labs 700 suffers from a data forgery vulnerability that stems from the presence of insufficient authentication or encryption in the Silicon Labs 700 series chips using S2. An attacker could exploit the vulnerability by...

Jenkins Authorization Issues Vulnerability (CNVD-2021-88716)

Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plug-ins to support building, deploying and automating any project . Jenkins has an authorization issue vulnerability that stems from a lack of authentication measures or insufficient...

IBM Business Automation Workflow 安全漏洞

IBM Business Automation Workflow is a workflow automation solution from IBM Corporation in the United States. The product is primarily used for workflow management, compliance management, and has features such as workflow visibility and scalability.IBM Business Automation Workflow has a security...

Jenkins 授权问题漏洞

Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plug-ins to support building, deploying and automating any project . Jenkins has an authorization issue vulnerability that stems from a lack of authentication measures or insufficient...

Element Android 加密问题漏洞

Element Android is the Android Matrix client provided by Element. A cryptographic issue vulnerability exists in Element Android prior to version 1.2.2 and matrix-android-sdk2 prior to version 1.2.2, which stems from a logic error in the device's room key sharing functionality that results in...

Mitel Interaction Recording Multitenancy 输入验证错误漏洞

Mitel Interaction Recording Multitenancy is an interactive call recording system from Mitel Canada. A security vulnerability exists in the PowerPlay Web component of the Mitel Interaction Recording Multitenancy system prior to 6.7, which arises from insufficient authentication and replay of a...