CVE-2021-3391

CVE-2021-3391 affects MobileIron Mobile@Work up to 2021-03-22. The vulnerability enables an attacker to distinguish valid, disabled, and nonexistent user accounts by measuring the number of failed login attempts required to trigger a Lockout message, effectively enabling account enumeration. The ...

Unauthorized Access Vulnerability in EKECMS

EKECMS is based on the eFrameWork rapid development framework under the application, the main purpose is for the eFrameWork framework for the use of examples. An unauthorized access vulnerability exists in EKECMS, which can be exploited by an attacker to bypass login authentication...

Logic Flaw Vulnerability in the Basic Platform Management System of Beijing Zhongchuang Vision Technology Co.

Ltd. is a high-tech company specializing in the research and development of video conference system hardware and software. A logic flaw exists in the management system of the basic platform of Beijing Zhongchuang Vision Technology Co. An attacker can exploit the vulnerability by replacing the...

Guangzhou Jiuan Intelligent Technology Co., Ltd JA7208 Has Logic Flaw Vulnerability

Guangzhou Jiuan Intelligent Technology Co., Ltd. is a leading global provider of mobile mapping infrastructure and IoT platform. A logic flaw vulnerability exists in JA7208 of Guangzhou Jiuan Intelligent Technology Company Limited, which can be exploited by an attacker to bypass login...

CVE-2019-18235

Advantech Spectre RT ERT351 Versions 5.1.3 and prior has insufficient login authentication parameters required for the web application may allow an attacker to gain full access using a brute-force password attack...

CVE-2019-18235

Advantech Spectre RT ERT351 Versions 5.1.3 and prior has insufficient login authentication parameters required for the web application may allow an attacker to gain full access using a brute-force password attack...

Sql injection

Project Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as demonstrated by the email and parameters account.php, uname and pass parameters login.php, and id parameter bookcar.php This allows an attacker to dump the MySQL database and to bypass the login...

CVE-2020-11545

Project Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as demonstrated by the email and parameters account.php, uname and pass parameters login.php, and id parameter bookcar.php This allows an attacker to dump the MySQL database and to bypass the login...

CVE-2019-15088

An issue was discovered in PRiSE adAS 1.7.0. Password hashes are compared using the equality operator. Thus, under specific circumstances, it is possible to bypass login authentication...

CVE-2019-15088

An issue was discovered in PRiSE adAS 1.7.0. Password hashes are compared using the equality operator. Thus, under specific circumstances, it is possible to bypass login authentication...

CVE-2019-15088

PRiSE adAS 1.7.0 contains an authentication bypass vulnerability where password hashes are compared using the equality operator. This improper comparison can allow bypassing login under certain conditions, as described in CVE-2019-15088 and reflected in multiple sources (NVD, Red Hat advisory, CV...

JVN#89046645: A map plugin for Minecraft server "Dynmap" fails to restrict access permissions

A map plugin for Minecraft server "Dynmap" fails to restrict access permissions CWE-284. Impact Under the circumstance where a user is required to login Dynmap, a remote attacker may bypass the login authentication and be able to see a map image that requires authentication. Solution Update the...

CVE-2018-16203

PgpoolAdmin 4.0 and earlier allows remote attackers to bypass the login authentication and obtain the administrative privilege of the PostgreSQL database via unspecified vectors...

Authentication flaw

PgpoolAdmin 4.0 and earlier allows remote attackers to bypass the login authentication and obtain the administrative privilege of the PostgreSQL database via unspecified vectors...

CVE-2018-16203

CVE-2018-16203 affects PgpoolAdmin 4.0 and earlier. The issue is an access-control flaw (CWE-264) that allows remote attackers to bypass login authentication and gain administrative privileges on the PostgreSQL database via unspecified vectors. Impact per sources is remote code/privilege elevatio...

CVE-2018-0315

A vulnerability in the authentication, authorization, and accounting AAA security services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device or cause an affected device to reload, resulting in a denial of service DoS condition...

CVE-2018-0315

A vulnerability in the authentication, authorization, and accounting AAA security services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device or cause an affected device to reload, resulting in a denial of service DoS condition...

CVE-2016-9196

A vulnerability in login authentication management in Cisco Aironet 1800, 2800, and 3800 Series Access Point platforms could allow an authenticated, local attacker to gain unrestricted root access to the underlying Linux operating system. The root Linux shell is provided for advanced...

Design/Logic Flaw

A vulnerability in login authentication management in Cisco Aironet 1800, 2800, and 3800 Series Access Point platforms could allow an authenticated, local attacker to gain unrestricted root access to the underlying Linux operating system. The root Linux shell is provided for advanced...

CVE-2016-8352

An issue was discovered in Schneider Electric ConneXium firewalls TCSEFEC23F3F20 all versions, TCSEFEC23F3F21 all versions, TCSEFEC23FCF20 all versions, TCSEFEC23FCF21 all versions, and TCSEFEC2CF3F20 all versions. A stack-based buffer overflow can be triggered during the SNMP login authenticatio...