475 matches found
Intelbras Router RF 301K 跨站请求伪造漏洞
The Intelbras Router RF 301K is a router from Intelbras in China. A cross-site request forgery vulnerability exists in Intelbras Router RF 301K Firmware 1.1.2, which stems from a lack of authentication and insecure configuration in inputs and modules...
PT-2021-17511
Name of the Vulnerable Software and Affected Versions Emote Remote Mouse versions through 4.0.0.0 Description An issue allows attackers to maximize or minimize the window of a running process by sending the process name in a crafted packet. The information is sent in cleartext and lacks...
The vulnerability of the User Experience Monitoring component of the SAP Solution Manager platform allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the User Experience Monitoring component of the SAP Solution Manager software platform is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility ...
The vulnerability of the Generic Market Data component of the SAP Banking Services software allows a perpetrator to compromise the integrity of data and expose confidential information.
The vulnerability of the Generic Market Data component of the SAP Banking Services software for automating banking activities is related to the lack of authentication checks. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the system and disclose sensitive...
PT-2021-15322
Name of the Vulnerable Software and Affected Versions BIG-IQ versions 6.x through 7.x Description The issue concerns BIG-IQ high availability HA when using a Quorum device for automatic failover, which does not implement any form of authentication with the Corosync daemon. Recommendations For...
Emerson Smart Wireless Gateway 访问控制错误漏洞
The Emerson Smart Wireless Gateway is an infinite gateway from Emerson. It is used to interconnect networks above the network layer. An access control error vulnerability exists in the Emerson Smart Wireless Gateway that stems from a lack of authentication...
PT-2021-7068
Name of the Vulnerable Software and Affected Versions TrueConf Server affected versions not specified Description The issue is related to a lack of authentication for a critical function in the software. Exploitation of this issue could allow a remote attacker to cause a denial of service by...
PT-2021-5475
Name of the Vulnerable Software and Affected Versions WISE-4060, Adam-6050 D, Adam.NET Utility affected versions not specified Description The issue is related to a lack of authentication attempt limitations in the Ethernet module software. This could allow a remote attacker to gain full access t...
Advantech iView Critical Functions Lack Authentication Vulnerability
Advantech iView is a device management application for the energy, water and wastewater industries. A vulnerability exists in Advantech iView prior to version 5.7.03.6112 due to a lack of authentication for critical functions. An attacker could use this vulnerability to make unauthorized changes ...
Advantech Iview 访问控制错误漏洞
Advantech iView is a device management application for the energy, water and wastewater industries. A vulnerability exists in Advantech iView prior to version 5.7.03.6112 due to a lack of authentication for critical functions. An attacker could use this vulnerability to make unauthorized changes ...
PT-2021-5477
Name of the Vulnerable Software and Affected Versions WISE-4060 and Adam-6050 D affected versions not specified Description The issue is related to a lack of authentication for a critical function in the Ethernet module software, which can be exploited by a remote attacker to cause a denial of...
Exploit for Out-of-bounds Write in Accfly 720P_Firmware
PoC exploit for CVE-2020-25782, CVE-2020-25783, CVE-2020-25784,...
PT-2021-12254
Name of the Vulnerable Software and Affected Versions IBM Security Identity Governance and Intelligence version 5.2.6 Description The issue is related to the lack of authentication for certain functionality that requires a provable user identity or consumes significant resources. Recommendations...
CVE-2020-9208
There is an information leak vulnerability in iManager NetEco 6000 versions V600R021C00. A module is lack of authentication. Attackers without access to the module can exploit this vulnerability to obtain extra information, leading to information leak...
PT-2020-20524
Name of the Vulnerable Software and Affected Versions iManager NetEco 6000 version V600R021C00 Description The issue is related to an information leak due to a lack of authentication in a module. Attackers without access to the module can exploit this to obtain extra information. Recommendations...
CVE-2020-13931
If Apache TomEE 8.0.0-M1 - 8.0.3, 7.1.0 - 7.1.3, 7.0.0-M1 - 7.0.8, 1.0.0 - 1.7.5 is configured to use the embedded ActiveMQ broker, and the broker config is misconfigured, a JMX port is opened on TCP port 1099, which does not include authentication. CVE-2020-11969 previously addressed the creatio...
Apache Solr Remote Code Execution Vulnerability (CNVD-2020-57571)
Apache Solr is the United States Apache Apache Software Foundation of a Lucene a full-text search engine based on the search server . The product supports level search , vertical search , highlighting search results and so on. Apache Solr suffers from a remote code execution vulnerability that...
The vulnerability in the web interface of the Cisco Data Center Network Manager system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Web interface for controlling the Cisco Data Center Network Manager DCNM system is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected informatio...
GitLab Authentication Vulnerability
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An authentication vulnerability was discovered in GitLab...