B2B2C Multi-User Mall System Existing Vulnerabilities in B2B2C Multi-User Mall System

Business Amoy software B2B2C multi-user mall system is a comprehensive mall platform to support multi-store stationed. Business Amoy software B2B2C multi-user mall system there is an override access vulnerability, the vulnerability stems from the failure to set the rights of strict authentication...

Nextcloud Android Authorization Issues Vulnerability

Nextcloud Android is an Android-based mobile application from Nextcloud Germany for accessing Nextcloud servers. Nextcloud Android is vulnerable to an authorization issue. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in a networked system ...

Amcrest IPM-721S License Issue Vulnerability

The Amcrest IPM-721S is a wireless IP camera from Amcrest. An authorization issue vulnerability exists in the Amcrest IPM-721S V2.420.AC00.16.R.20160909 release. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in a networked system or product...

Cisco Enterprise Chat and Email Attachment Download Vulnerability

Cisco Enterprise Chat and Email CEC is a suite of enterprise chat and email solutions from Cisco. The product focuses on providing e-mail, chat, and Web callback capabilities, among other things, for other Cisco solutions. An attachment download vulnerability exists in the HTTP API for Cisco...

Siemens Siveillance VMS Authorization Issues Vulnerability

Siemens Siveillance VMS is a set of surveillance video management software from Siemens Germany. An authorization issue vulnerability exists in Siemens Siveillance VMS. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in a networked system or...

Siemens LOGO!8 License Issue Vulnerability

LOGO!8 is the 8th generation of Siemens intelligent logic controllers, the Nano PLC in the Siemens PLC family, which simplifies programming configurations, has an integrated panel for more displays, and can be easily networked and efficiently interconnected via the integrated Ethernet interface. ...

Weak Authentication

hybridgroup/gobot is vulnerable to weak authentication vulnerability. A remote attacker can successfully initiate an exploitation without any form of authentication which affects the functionality of the component mqtt subsystem by skiping verification of root CA certificates by default...

Weak Authentication

OpenSSH uses a weak authentication mechanism. It was discovered that OpenSSH clients did not correctly verify DNS SSHFP records. A malicious server could use this flaw to force a connecting client to skip the DNS SSHFP record check and require the user to perform manual host verification of the D...

Weak Authentication

An attack technique against the W3C XML Encryption Standard when block ciphers were used in CBC mode could allow a remote attacker to conduct chosen-ciphertext attacks, leading to the recovery of the entire plain text of a particular cryptogram. CVE-2011-1096 JBoss Web Services leaked side-channe...

Cybozu Garoon Information Disclosure Vulnerability (CNVD-2019-12694)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An information disclosure vulnerability exists in Cybozu Garoon versions 4.2.4 through 4.10.1. The vulnerability...

CVE-2019-5890

An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows an authenticated user to obtain access to the Administrative control panel and execute administrative functions...

Authentication flaw

An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows an authenticated user to obtain access to the Administrative control panel and execute administrative functions...

CVE-2019-5890

An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows an authenticated user to obtain access to the Administrative control panel and execute administrative functions...

CVE-2019-5890

Affected software: OverIT Geocall 6.3 (before build 2:346977). Vulnerability: Weak authentication and session management allow an authenticated user to access the Administrative control panel and execute administrative functions. Root cause (as described): Improper session handling enabling eleva...

CVE-2019-5890

An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows an authenticated user to obtain access to the Administrative control panel and execute administrative functions...

PT-2019-17848 · Overit · Overit Geocall

Name of the Vulnerable Software and Affected Versions: OverIT Geocall version 6.3 before build 2:346977 Description: An issue in OverIT Geocall allows an authenticated user to obtain access to the Administrative control panel and execute administrative functions due to weak authentication and...

The vulnerability of the Quality of Voice Reporting component of the Cisco Prime Collaboration Assurance software solution allows attackers to enhance their privileges.

The vulnerability of the Quality of Voice Reporting component in the highly converged Cisco HyperFlex infrastructure is related to insufficient authentication control. Exploiting this vulnerability can allow attackers operating remotely to enhance their privileges...

CVE-2019-1666

A vulnerability in the Graphite service of Cisco HyperFlex software could allow an unauthenticated, remote attacker to retrieve data from the Graphite service. The vulnerability is due to insufficient authentication controls. An attacker could exploit this vulnerability by sending crafted request...

Cisco Prime Collaboration Assurance Authorization Issues Vulnerability

Cisco Prime Collaboration Assurance PCA is a suite of enterprise collaboration network management solutions from Cisco. The product supports a unified management console to simplify the management of unified communications and video collaboration networks, as well as rapid deployment of...

Mozilla: Privilege escalation through IPC channel messages

An earlier fix for an Inter-process Communication IPC vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the...