The vulnerability of the Design Tools component of the JD Edwards EnterpriseOne Tools system, which manages enterprise resources, allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the Design Tools component of the JD Edwards EnterpriseOne Tools system’s resource management system is related to the absence of authentication. Exploiting this vulnerability allows a malicious actor to gain access to read, modify, add, or delete data through HTTP requests...

The vulnerability of Veeam Backup & Replication’s protection mechanism for cloud, virtual, and physical systems lies in the lack of authentication for a critical function, allowing attackers to escalate their privileges.

The vulnerability of Veeam Backup & Replication’s protection tools for cloud, virtual, and physical systems stems from the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker operating remotely to increase their privileges...

CVE-2024-46054

OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files...

The vulnerability of the application programming interface of the Cisco Nexus Dashboard platform for analyzing and automating operations in cloud computing data centers arises from the lack of authentication mechanisms. This vulnerability allows attackers to influence the integrity of the protected information.

The vulnerability of the application programming interface of the Cisco Nexus Dashboard platform for analyzing and automating operations in cloud computing data centers is related to the lack of authentication. Exploiting this vulnerability could allow a malicious actor to influence the integrity...

CVE-2024-40091

Vilo 5 Mesh WiFi System = 5.16.1.33 lacks authentication in the Boa webserver, which allows remote, unauthenticated attackers to retrieve logs with sensitive system...

MOXA Service 安全漏洞

MOXA Service is a hardware device infrastructure service from China MOXA MOXA. A security vulnerability exists in MOXA Service, which stems from a lack of authentication during command sending and could allow an attacker to execute specific commands, resulting in unauthorized configuration file...

The vulnerability of the Single Sign-On (SSO) function of the SAP BusinessObjects Business Intelligence platform allows a hacker to gain full access to the device.

The vulnerability of the Single Sign-On SSO function of the SAP BusinessObjects Business Intelligence platform is related to the absence of authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full access to the device by obtaining an...

The vulnerability of the My Overtime Request component of the SAP Fiori business application platform allows a perpetrator to elevate their privileges and gain unauthorized access to protected information.

The vulnerability of the My Overtime Request component of the SAP Fiori business application design platform is related to the absence of an authentication process. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain unauthorized access to protected...

The vulnerability of the BMC (Baseboard Management Controller) on the NVIDIA DGX A100 server allows a hacker to enhance their privileges, gain access to read, modify, or delete data, execute arbitrary code, or cause a service failure.

The vulnerability of the BMC Baseboard Management Controller in NVIDIA’s DGX A100 server lies in the absence of authentication procedures for critical functions. Exploiting this vulnerability allows an attacker to enhance their privileges, gain read, write, or delete access to data, execute...

The vulnerability in the web interface of Cisco SPA112 dual-port telephone adapters allows a hacker to execute arbitrary code.

The vulnerability of the web-based management interface for Cisco SPA112 dual-port telephone adapters is related to the absence of authentication for a critical function. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code by loading a specially crafted...

The vulnerability of the centralized control system for network devices and ports of Advantech iView, related to the absence of authentication procedures, allows a perpetrator to execute arbitrary codes or cause service failures.

The vulnerability of the centralized control system for network devices and ports of Advantech iView lies in the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger service failures remotely...

PT-2023-2726 · NetGear · Netgear Rax30

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX30 affected versions not specified Description: This issue allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR RAX30 routers. The specific flaw exists within the handling of SOAP...

The vulnerability of the APC Easy UPS Online Monitoring Software lies in the lack of authentication for a critical function, allowing attackers to gain access to the software.

The vulnerability of the APC Easy UPS Online Monitoring Software relates to the absence of authentication for a critical function. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the software...

The vulnerability of the Valmet System 2019 software suite (Metso DNA) lies in the lack of authentication for a critical function, allowing an intruder to perform basic operations on system files.

The vulnerability of the Valmet System 2019 software suite Metso DNA is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to perform basic operations on system files...

The vulnerability of the microprogrammed software of the digital video recorders UNIMO models UDR-JA1004, JA1008, and JA1016 lies in the absence of authentication for a critical function, allowing attackers to execute arbitrary OS commands.

The vulnerability of the microprogrammed software of the UNIMO digital video recorders models UDR-JA1004, JA1008, and JA1016 is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to execute arbitrary OS...

CVE-2022-29951

JTEKT TOYOPUC PLCs through 2022-04-29 mishandle authentication. They utilize the CMPLink/TCP protocol configurable on ports 1024-65534 on either TCP or UDP for a wide variety of engineering purposes such as starting and stopping the PLC, downloading and uploading projects, and changing...

The vulnerability of the OAS Engine SecureAddUser function in the platform for data transmission between devices and applications allows a perpetrator to gain unauthorized access to the system.

The vulnerability of the OAS Engine SecureAddUser function on the platform for data transfer between devices and applications is related to the lack of authentication checks for this critical function. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized...

The vulnerability of the external data integration driver Magnitude Simba Amazon Redshift ODBC in cloud services like Azure Data Factory and Azure Synapse allows a hacker to execute arbitrary code.

The vulnerability of the external data integration driver Magnitude Simba Amazon Redshift ODBC in cloud services like Azure Data Factory and Azure Synapse lies in the lack of authentication for the critical function. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

CVE-2021-38878

IBM QRadar 7.3, 7.4, and 7.5 could allow a malicious actor to impersonate an actor due to key exchange without entity authentication. IBM X-Force ID: 208756...

The vulnerability of the Jenkins automation server, related to the absence of authentication procedures, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Jenkins automation server lies in the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to remotely influence the confidentiality, integrity, and accessibility of the protected information...