1028 matches found
Cisco Catalyst Center Web Interface Access Modification
The vulnerability of the web-based interface of the Cisco Catalyst Center formerly Cisco DNA Center is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain access and modify data by sending a specially crafted HTTP request...
CVE-2023-52043
An issue in D-Link COVR 1100, 1102, 1103 AC1200 Dual-Band Whole-Home Mesh Wi-Fi System Hardware Rev B1 truncates Wireless Access Point Passwords WPA-PSK allowing an attacker to gain unauthorized network access via weak authentication controls...
CVE-2023-52043
The D-Link COVR 1100, 1102, and 1103 AC1200 Dual-Band Whole-Home Mesh Wi-Fi System (Hardware Rev B1) is affected by a vulnerability where the system truncates Wireless Access Point Passwords (WPA-PSK) . This flaw results in weak authentication controls, potentially allowing an attacker to gain un...
D-Link COVR’s various products have security vulnerabilities
D-Link COVR is a series of routers from China-based AUO D-Link. A security vulnerability exists in multiple D-Link COVR products. An attacker could exploit the vulnerability to gain unauthorized access via weak authentication. The following products and versions are affected: D-Link COVR 1100,...
CVE-2023-52043: Improper Verification of Cryptographic Signature
An issue in D-Link COVR 1100, 1102, 1103 AC1200 Dual-Band Whole-Home Mesh Wi-Fi System Hardware Rev B1 truncates Wireless Access Point Passwords WPA-PSK allowing an attacker to gain unauthorized network access via weak authentication controls...
CVE-2023-52043
An issue in D-Link COVR 1100, 1102, 1103 AC1200 Dual-Band Whole-Home Mesh Wi-Fi System Hardware Rev B1 truncates Wireless Access Point Passwords WPA-PSK allowing an attacker to gain unauthorized network access via weak authentication controls...
Tenda AC15 Router DoS
The vulnerability of the fromSysToolReboot function /goform/SysToolReboot in the Tenda AC15 router’s microprogramming software is related to insufficient verification of the authenticity of the requests being executed. Exploiting this vulnerability could allow a remote attacker to cause service...
Jupyter Server security vulnerabilities
Jupyter Server is an application used by the Jupyter organization to provide back-end services for Jupyter Web applications. A security vulnerability exists in the Jupyter Server Proxy that stems from not properly checking user authentication, which could allow unauthenticated access by anyone wi...
Janitza UMG Power Quality Measuring Weak Authentication (CVE-2015-3972)
The web interface on Janitza UMG 508, 509, 511, 604, and 605 devices supports only short PIN values for authentication, which makes it easier for remote attackers to obtain access via a brute-force attack. This plugin only works with Tenable.ot. Please visit...
PT-2024-10091 · Drupal · Two-Factor Authentication
Name of the Vulnerable Software and Affected Versions: Two-factor Authentication TFA versions 0.0.0 through 1.5.0 Description: The issue is related to a weak authentication vulnerability in the Two-factor Authentication TFA module for Drupal, which can be exploited to abuse authentication. This...
NEXO-OS File Load
The vulnerability of the NEXO-OS operating system for tools used in production line maintenance, such as the Bosch Nexo cordless nutrunner and the Bosch Nexo special cordless nutrunner, is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious acto...
PT-2024-12764 · Ibm · Ibm Openpages With Watson
Name of the Vulnerable Software and Affected Versions: IBM OpenPages with Watson versions 8.3 through 9.0 Description: The issue provides weaker than expected security in an OpenPages environment using Native authentication. An attacker with access to the OpenPages database could exploit this...
Hostinger Plugin Privilege Escalation
The vulnerability of the publicwebsite function in the Hostinger content management system’s WordPress plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
PT-2024-5113 · Solarwinds · Solarwinds Access Rights Manager
Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The SolarWinds Access Rights Manager was found to have an authentication bypass issue, allowing an unauthenticated user to gain domain admin access within the Activ...
Redfish Server Unauthorized Access
The vulnerability of the Redfish server of the MaxView Storage Manager relates to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the device...
Weak Authentication
TYPO3 is vulnerable to Weak Authentication. The vulnerability is due to the lack of proper session isolation between different sites within the same TYPO3 installation. The attacker can exploit this issue with a valid user account to reuse a session cookie generated for the first site on the seco...
CVE-2023-47127 Weak Authentication in Session Handling in typo3/cms-core
TYPO3 is an open source PHP based web content management system released under the GNU GPL. In typo3 installations there are always at least two different sites. Eg. first.example.org and second.example.com. In affected versions a session cookie generated for the first site can be reused on the...
CVE-2023-47127 Weak Authentication in Session Handling in typo3/cms-core
TYPO3 is an open source PHP based web content management system released under the GNU GPL. In typo3 installations there are always at least two different sites. Eg. first.example.org and second.example.com. In affected versions a session cookie generated for the first site can be reused on the...
TYPO3 vulnerable to Weak Authentication in Session Handling
CVSS: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N/E:X/RL:O/RC:C 4.0 Problem Given that there are at least two different sites in the same TYPO3 installation - for instance first.example.org and second.example.com - then a session cookie generated for the first site can be reused on the second si...
