306 matches found
GHSA-VJ36-3CCR-6563 Authentication Bypass by Spoofing in github.com/greenpau/caddy-security
All versions of the package github.com/greenpau/caddy-security are vulnerable to Authentication Bypass by Spoofing via the X-Forwarded-For header due to improper input sanitization. An attacker can spoof an IP address used in the user identity module /whoami API endpoint. This could lead to...
Authentication flaw
All versions of the package github.com/greenpau/caddy-security are vulnerable to Authentication Bypass by Spoofing via the X-Forwarded-For header due to improper input sanitization. An attacker can spoof an IP address used in the user identity module /whoami API endpoint. This could lead to...
PT-2024-40900 · Crateio · Cratedb
Name of the Vulnerable Software and Affected Versions: CrateDB version 5.5.1 Description: The issue concerns an authentication bypass in the Admin UI component. It can be exploited by setting the X-Real-IP request header to a specific value, allowing access to the Admin UI using the default user...
PT-2024-14359
Name of the Vulnerable Software and Affected Versions CrateDB version 5.5.1 Description The issue is related to an authentication bypass vulnerability in the Admin UI component. After configuring password authentication, identity authentication can be bypassed by setting the X-Real-IP request...
CVE-2023-33018 Integer Overflow to Buffer Overflow in User Identity Module
Memory corruption while using the UIM diag command to get the operators name...
Qualcomm Chipsets Security Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated. A security vulnerability exists in Qualcomm Chipsets, which is caused by an integer overflow in the User Identity module...
SAP NetWeaver AS Java Logon Security Vulnerability
SAP NetWeaver AS is a SAP network application server from SAP. It not only provides network services, but also is the basic platform for SAP software. A security vulnerability exists in SAP NetWeaver AS Java Logon version 7.50. An attacker could use this vulnerability to brute-force the login...
CVE-2023-41915
OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code with UID 0...
The Inability to Simultaneously Verify Sentience, Location, and Identity
Really interesting "systematization of knowledge" paper: "SoK: The Ghost Trilemma" Abstract: Trolls, bots, and sybils distort online discourse and compromise the security of networked platforms. User identity is central to the vectors of attack and manipulation employed in these contexts. However...
CVE-2023-21257
creationtimestamp| type| source ---|---|--- 2023-07-13 07:45:23+00:00| seen| https://t.me/cibsecurity/66623...
Authentication flaw
SAP NetWeaver Application Server ABAP and ABAP Platform - version KRNL64NUC, 7.22, KRNL64NUC 7.22EXT, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KERNEL 7.22, KERNEL, 7.53, KERNEL 7.77, KERNEL 7.81, KERNEL 7.85, KERNEL 7.89, KERNEL 7.54, KERNEL 7.92, KERNEL 7.93, under some conditions, perfor...
CVE-2022-33302
Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length...
Memory corruption
Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length...
CVE-2022-33302
CVE-2022-33302 describes a memory corruption in the Qualcomm User Identity Module caused by improper validation of an array index when the APN TLV length exceeds the command length. Documents reference this vulnerability across multiple feeds (NVD, Red Hat, PRION, CNNVD, CVE list) with the same d...
CVE-2022-33302 Improper validation of array index in User Identity Module
Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length...
PT-2023-13306 · Unknown · User Identity Module
Name of the Vulnerable Software and Affected Versions: User Identity Module affected versions not specified Description: The issue is caused by memory corruption due to improper validation of array index in the User Identity Module. This occurs when the APN TLV length is greater than the command...
CVE-2022-33302: Improper Validation of Array Index
Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length...
UBUNTU-CVE-2023-1076
A flaw was found in the Linux Kernel. The tun/tap sockets have their socket UID hardcoded to 0 due to a type confusion in their initialization function. While it will be often correct, as tuntap devices require CAPNETADMIN, it may not always be the case, e.g., a non-root user only having that...