Grain and oil storage information management platform of Zhejiang ZDZ Information Technology Co., Ltd. suffers from universal password bypass vulnerability

Zhejiang ZDZC Information Technology Co., Ltd. is a smart city solution provider. A universal password bypass vulnerability exists in the Grain and Oil Storage Information Management Platform of Zhejiang ZDAC Information Technology Co. Ltd, which can be exploited by an attacker to log in to the...

CVE-2020-6242

SAP Business Objects Business Intelligence Platform Live Data Connect, versions 1.0, 2.0, 2.1, 2.2, 2.3, allows an attacker to logon on the Central Management Console without password in case of the BIPRWS application server was not protected with some specific certificate, leading to Missing...

Universal Password Bypass Vulnerability in Energy Information Management System of Chongqing Jutai Internet of Things Group Co.

Chongqing Jutai Internet of Things Group Co., Ltd. is a company engaged in the research and development, production, and sales/computer system integration of hardware and software for Internet of Things products. There is a universal password bypass vulnerability in the energy information...

CVE-2020-10876

The OKLOK 3.1.1 mobile companion app for Fingerprint Bluetooth Padlock FB50 2.3 does not correctly implement its timeout on the four-digit verification code that is required for resetting passwords, nor does it properly restrict excessive verification attempts. This allows an attacker to brute...

Universal Password Bypass Vulnerability in Driving School Management System V5.0 of Beijing 1039 Technology Development Co.

Beijing 1039 Technology Development Co., Ltd. is a focus on driving school management system, driving school mobile office system, driving school management software, driving school enrollment program development, etc., for the driving school to provide a dead-end driving school management system...

Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-31270)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have a security vulnerability that can be exploited by attackers to run applications in a locked Secure Folder without a password...

Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-30180)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have a security vulnerability that can be exploited by attackers to bypass password requirements switched by tablet users by folding the...

CVE-2017-18646

An issue was discovered on Samsung mobile devices with M6.x and N7.x software. An attacker can bypass the password requirement for tablet user switching by folding the magnetic cover. The Samsung ID is SVE-2017-10602 December 2017...

CVE-2017-18646

An issue was discovered on Samsung mobile devices with M6.x and N7.x software. An attacker can bypass the password requirement for tablet user switching by folding the magnetic cover. The Samsung ID is SVE-2017-10602 December 2017...

CVE-2017-18646

This CVE reports a bypass of the password requirement for tablet user switching on Samsung mobile devices running M(6.x) and N(7.x) software. The underlying issue allows an attacker to bypass protection by folding the magnetic cover, as described in multiple sources (Samsung ID SVE-2017-10602). C...

CVE-2017-18646

An issue was discovered on Samsung mobile devices with M6.x and N7.x software. An attacker can bypass the password requirement for tablet user switching by folding the magnetic cover. The Samsung ID is SVE-2017-10602 December 2017...

CVE-2020-10601

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure permissions which may allow a local attacker to bypass the password-protected mechanism through brute-force attacks, cracking techniques, or overwriting the password hash...

VISAM VBASE Weak Encryption Vulnerability

VISAM VBASE is a data acquisition and monitoring system from VISAM Germany, VBASE Editor is one of the editors, VBASE Web-Remote Module is one of the web-based remote modules. A security vulnerability exists in the VISAM VBASE Editor version 11.5.0.2 and the VBASE Web-Remote Module that stems fro...

Samsung Mobile Device Authorization Issue Vulnerability (CNVD-2020-34738)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An authorization issue vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to use blocked applications without a password...

CVE-2019-20550

An issue was discovered on Samsung mobile devices with O8.x released in China and India software. The S Secure app can access the content of a locked app without a password. The Samsung ID is SVE-2019-13805 October 2019...

CVE-2019-20550

CVE-2019-20550 affects certain Samsung mobile devices running O(8.x) software (China/India releases). The issue, described across multiple sources, is that the S Secure app can access the contents of a locked application without requiring a password. The Red Hat and NVD entries mirror this descri...

CVE-2019-20550

An issue was discovered on Samsung mobile devices with O8.x released in China and India software. The S Secure app can access the content of a locked app without a password. The Samsung ID is SVE-2019-13805 October 2019...

OneThink Pu***.cl***.php file suffers from a universal password bypass vulnerability

OneThink is an open source content management framework. A universal password bypass vulnerability exists in the OneThink Pu.cl.php file. An attacker can exploit the vulnerability to obtain data-sensitive information...

Public-Link Password-Bypass via Image-Previews – ownCloud

------- It was possible to access the preview-image of a password-protected public-link. The severity of the issue is reduced to low because the attacker needs to know the public-link hash and the original filename of the image. Affected ----- - owncloud/core v10.4 Action taken -------- Applied...

Public-Link Password-Bypass via Image-Previews - ownCloud security advisory

Platform: ownCloud Server Versions: 10.3 Date: 2/28/2020 Risk: Low CVSS v3 Base Score: 3.1 CVSS v3 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CWE ID: 284 CWE Name: Improper Access Control...