6574 matches found
Exploit for Missing Authentication for Critical Function in Vmware Vcenter_Server
PoC exploit for CVE-2020-3952, a remote code execution vulnerabi...
Exploit for Missing Authentication for Critical Function in Vmware Vcenter_Server
This is a PoC exploit for CVE-2020-3952, a vulnerability in VMwa...
CVE-2020-7114: Missing Authentication for Critical Function
A vulnerability exists allowing attackers, when present in the same network segment as ClearPass' management interface, to make changes to certain databases in ClearPass by crafting HTTP packets. As a result of this attack, a possible complete cluster compromise might occur. Resolution: Fixed in...
Exploit for Missing Authentication for Critical Function in Vmware Vcenter_Server
It is an offensive tool for vulnerability scanning. The tool, na...
Exploit for Missing Authentication for Critical Function in Vmware Vcenter_Server
It is an offensive tool for vulnerability assessment. This repos...
CVE-2019-12524: Missing Authentication for Critical Function
An issue was discovered in Squid through 4.7. When handling requests from users, Squid checks its rules to see if the request should be denied. Squid by default comes with rules to block access to the Cache Manager, which serves detailed server information meant for the maintainer. This rule is...
CVE-2020-6235
SAP Solution Manager Diagnostics Agent, version 7.2, does not perform the authentication check for the functionalities of the Collector Simulator, leading to Missing Authentication...
CVE-2020-6235
SAP Solution Manager Diagnostics Agent, version 7.2, does not perform the authentication check for the functionalities of the Collector Simulator, leading to Missing Authentication...
Authentication flaw
SAP Solution Manager Diagnostics Agent, version 7.2, does not perform the authentication check for the functionalities of the Collector Simulator, leading to Missing Authentication...
CVE-2020-6235
SAP Solution Manager Diagnostics Agent, version 7.2, does not perform the authentication check for the functionalities of the Collector Simulator, leading to Missing Authentication...
CVE-2020-6235
CVE-2020-6235 affects SAP Solution Manager (Diagnostics Agent) 7.2, where the Collector Simulator lacks authentication checks, causing Missing Authentication. Multiple sources (NVD, Red Hat, CNVD, CVE lists) describe this issue with network-facing exposure and potential high impact on confidentia...
CVE-2019-16879
The Synergy Systems & Solutions SSS HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has a Missing Authentication for Critical Function CWE-306 vulnerability. The affected product does not require authentication for TELNET access, which may allow an attacker to change configuration or...
CVE-2019-16879
The Synergy Systems & Solutions SSS HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has a Missing Authentication for Critical Function CWE-306 vulnerability. The affected product does not require authentication for TELNET access, which may allow an attacker to change configuration or...
Design/Logic Flaw
The Synergy Systems & Solutions SSS HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has a Missing Authentication for Critical Function CWE-306 vulnerability. The affected product does not require authentication for TELNET access, which may allow an attacker to change configuration or...
CVE-2019-16879
The CVE-2019-16879 issue affects the Synergy Systems & Solutions HUSKY RTU 6049-E70 with firmware 5.0 and earlier. It is a Missing Authentication for Critical Function (CWE-306); the device does not require authentication for TELNET access, which could allow an attacker to change configurations o...
CVE-2019-16879: Missing Authentication for Critical Function
The Synergy Systems & Solutions SSS HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has a Missing Authentication for Critical Function CWE-306 vulnerability. The affected product does not require authentication for TELNET access, which may allow an attacker to change configuration or...
CVE-2020-6235: Missing Authentication for Critical Function
SAP Solution Manager Diagnostics Agent, version 7.2, does not perform the authentication check for the functionalities of the Collector Simulator, leading to Missing Authentication...
CVE-2020-11673: Missing Authentication for Critical Function
An issue was discovered in the Responsive Poll through 1.3.4 for Wordpress. It allows an unauthenticated user to manipulate polls, e.g., delete, clone, or view a hidden poll. This is due to the usage of the callback wpajaxnopriv function in Includes/Total-Soft-Poll-Ajax.php for sensitive operatio...
The vulnerability of Siemens SCALANCE X industrial switchboard web interfaces allows a intruder to gain unauthorized access to protected information.
The vulnerability of Siemens SCALANCE X industrial switchboard web interfaces lies in the absence of authentication for critical functions. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
CVE-2020-3952: Missing Authentication for Critical Function
Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller PSC, does not correctly implement access controls...