Unspecified Vulnerability in D-Link DAP-2622 (CNVD-2024-24417)

The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. A security vulnerability exists in the D-Link DAP-2622 that stems from a lack of authentication in the DDP Settings SSID list. No details of the vulnerability are provided at this time...

CVE-2023-37325

The CVE-2023-37325 issue affects the D-Link DAP-2622 DDP service, where a lack of authentication allows network-adjacent attackers to remotely modify wireless authentication settings and device configuration. Exploitation is possible without credentials and without user interaction, using the DDP...

CVE-2023-42121

Control Web Panel Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Control Web Panel. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2023-41183

NETGEAR Orbi 760 SOAP API Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR Orbi 760 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2023-42121

CVE-2023-42121 concerns Control Web Panel (CWP) missing authentication in its web interface, enabling remote code execution with no privileges required. The flaw results from a lack of authentication before accessing functionality, allowing an attacker to execute code in the context of a valid CW...

CVE-2023-35750

CVE-2023-35750 affects D-Link DAP-2622 routers. The flaw resides in the DDP service, enabling information disclosure via lack of authentication. An unauthenticated, network-adjacent attacker can access credentials stored by the device, with potential to further compromise. Public metrics indicate...

The vulnerability of the WebSocket component in the Nozomi Guardian network detection and monitoring tool, as well as the Nozomi Central Management Console (CMC) – a centralized security management tool – allows attackers to influence the confidentiality of the protected information.

The vulnerability of the WebSocket component in the Nozomi Guardian network detection and monitoring tool, as well as the Nozomi Central Management Console CMC, relates to the lack of authentication for critical functions. Exploiting this vulnerability could allow an attacker to influence the...

EverShop Security Breach

EverShop is a NodeJS e-commerce platform open-sourced by EverShop. A security vulnerability exists in EverShop versions prior to 1.0.0-rc.8 that stems from a lack of authentication. An attacker exploited the vulnerability to obtain sensitive information through incorrect authorization in a GraphQ...

Cisco Unity Connection Unauthenticated Arbitrary File Upload Vulnerability

A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system and execute commands on the underlying operating system. This vulnerability is due to a lack of authentication in a...

PT-2024-1009 · Cisco · Cisco Unity Connection

Name of the Vulnerable Software and Affected Versions: Cisco Unity Connection affected versions not specified Description: A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to upload arbitrary files to an affected syste...

The vulnerability of the 5G mobile communication network organization software free5GC, related to the lack of authentication for critical functions, allows attackers to disclose protected information.

The vulnerability of the software for managing fifth-generation mobile communication networks 5G, free5GC, is related to the absence of authentication for a critical function. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...

The vulnerability of the PC Settings Tool, a software tool for configuring computers, lies in the lack of authentication for a critical function, which allows attackers to escalate their privileges.

The vulnerability of the PC Settings Tool software relates to the lack of authentication for a critical function. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Kavita Kavitareader software for reading e-books in the Kavita format lies in the lack of authentication for a critical function. This allows attackers to influence the confidentiality and integrity of the protected information.

The vulnerability of the Kavita Kavitareader software for reading e-books in the Kavita format is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to influence the confidentiality and integrity of the protected information...

CVE-2023-41255

The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abusing the lack of authentication of the ‘su’ binary file installed on the device that can be accessed through the ADB Android Debug Bridge protocol exposed on...

CVE-2023-4884 Multiple vulnerabilities in Open5GS

An attacker could send an HTTP request to an Open5GS endpoint and retrieve the information stored on the device due to the lack of Authentication...

Open5GS 访问控制错误漏洞

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. An Access Control Error vulnerability exists in Open5GS version 2.4.10 and earlier, which stems from a lack of authentication, and can be exploited by an attacker to send an HTTP request to a...

The vulnerability of the CGI microprogramming interface of the D-Link DAP-1325 wireless signal booster allows a intruder to disclose protected information.

The vulnerability of the CGI microprogramming interface of the D-Link DAP-1325 wireless signal booster exists due to the lack of authentication checks before access to functions is granted. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

PT-2023-5789 · Acronis · Acronis Cyber Protect 15 +1

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 15 versions prior to build 35979 Description: The issue is related to the lack of an authentication procedure, which can be exploited by a remote attacker to elevate their privileges. This can lead to the disclosure and...

Authentication flaw

DISPUTED Mobile Security Framework MobSF =v3.7.8 Beta is vulnerable to Insecure Permissions. NOTE: the vendor's position is that authentication is intentionally not implemented because the product is not intended for an untrusted network environment. Use cases requiring authentication could, for...

PT-2023-27296 · Softneta · Meddream Pacs

Name of the Vulnerable Software and Affected Versions: Softneta MedDream PACS affected versions not specified Description: The issue concerns a lack of authentication check in the affected product, leading to the performance of dangerous functionality. This could result in unauthenticated remote...