CVE-2024-13239

Weak Authentication vulnerability in Drupal Two-factor Authentication TFA allows Authentication Abuse.This issue affects Two-factor Authentication TFA: from 0.0.0 before 1.5.0...

CVE-2024-13239

Weak Authentication vulnerability in Drupal Two-factor Authentication TFA allows Authentication Abuse.This issue affects Two-factor Authentication TFA: from 0.0.0 before 1.5.0...

The vulnerability of the FAB_ADD_SECURITY_API component in the Apache Superset data visualization software allows a attacker to enhance their privileges.

The vulnerability of the FABADDSECURITYAPI component in the Apache Superset data visualization software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

Misconfigured Kubernetes RBAC in Azure Airflow Could Expose Entire Cluster to Exploitation

Cybersecurity researchers have uncovered three security weaknesses in Microsoft's Azure Data Factory Apache Airflow integration that, if successfully exploited, could have allowed an attacker to gain the ability to conduct various covert actions, including data exfiltration and malware deployment...

CVE-2024-47397

Weak authentication issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versions 2.0.10 and earlier. If this vulnerability is exploited, the authentication may be bypassed with an undocumented specific string...

CVE-2024-47397

CVE-2024-47397 affects FXC AE1021 and AE1021PE with firmware 2.0.10 and earlier. The root cause is a weak authentication mechanism that can be bypassed by an undocumented specific string. Documented impacts in the sources describe a bypass of authentication, with no details on exploit vectors bey...

CVE-2024-47397

Weak authentication issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versions 2.0.10 and earlier. If this vulnerability is exploited, the authentication may be bypassed with an undocumented specific string...

PT-2024-32616 · Ae1021Pe +1 · Ae1021Pe +1

Name of the Vulnerable Software and Affected Versions: AE1021 versions 2.0.10 and earlier AE1021PE versions 2.0.10 and earlier Description: A weak authentication issue exists, allowing the authentication to be bypassed with an undocumented specific string if the vulnerability is exploited...

Multiple vulnerabilities in FXC AE1021 and AE1021PE

Overview AE1021 and AE1021PE are information outlet type wireless LAN routers provided by FXC Inc. They contain multiple vulnerabilities listed below. Weak Authentication CWE-1390 - CVE-2024-47397 OS Command Injection CWE-78 - CVE-2024-53688 Inclusion of Undocumented Features CWE-1242 -...

CVE-2023-41862

Weak Authentication vulnerability in Guido VS Contact Form allows Authentication Abuse.This issue affects VS Contact Form: from n/a through 14.0...

CVE-2023-41862 WordPress VS Contact Form plugin <= 14.0 - Sum Captcha Bypass vulnerability

Weak Authentication vulnerability in Guido VS Contact Form very-simple-contact-form allows Authentication Abuse.This issue affects VS Contact Form: from n/a through = 14.0...

CVE-2023-41862 WordPress VS Contact Form plugin <= 14.0 - Sum Captcha Bypass vulnerability

Weak Authentication vulnerability in Guido VS Contact Form allows Authentication Abuse.This issue affects VS Contact Form: from n/a through 14.0...

WordPress plugin VS Contact Form 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A security vulnerability exists in WordPress plugin VS Contact For...

The vulnerability of the SYNO.SurveillanceStation.ActionRule interface of the surveillance application, which allows a intruder to increase their privileges

The vulnerability of the SYNO.SurveillanceStation.ActionRule interface of the surveillance organization application is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...

PT-2024-8789 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions WMS 4.4 and prior Description: The issue is related to an Improper Restriction of Excessive Authentication Attempts, which could be exploited by a high privileged attacker with remote access, leading to...

CVE-2024-45369

The web application uses a weak authentication mechanism to verify that a request is coming from an authenticated and authorized resource...

CVE-2024-45369

CVE-2024-45369 concerns mySCADA myPRO Manager, where a web-application parameter allows unauthorized access due to a weak authentication mechanism. Multiple connected sources corroborate an improper authentication vulnerability affecting myPRO Manager used for visualization/control of industrial ...

CVE-2024-45369 mySCADA myPRO Improper Authentication

The web application uses a weak authentication mechanism to verify that a request is coming from an authenticated and authorized resource...

CVE-2024-45369 mySCADA myPRO Improper Authentication

The web application uses a weak authentication mechanism to verify that a request is coming from an authenticated and authorized resource...

PT-2024-31583 · Myscada · Myscada Mypro Manager

Name of the Vulnerable Software and Affected Versions: mySCADA myPRO Manager affected versions not specified Description: The web application uses a weak authentication mechanism to verify that a request is coming from an authenticated and authorized resource. Recommendations: At the moment, ther...