CVE-2023-4898

Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...

CVE-2022-33234

Memory corruption in video due to configuration weakness. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-26943

The Motorola MTM5000 series firmwares generate TETRA authentication challenges using a PRNG using a tick count register as its sole entropy source. Low boottime entropy and limited re-seeding of the pool renders the authentication challenge vulnerable to two attacks. First, due to the limited...

The vulnerability of the UniFi Network software, related to deficiencies in authentication procedures, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the UniFi Network software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of Ruckus Virtual SmartZone’s microprogrammed software controllers, related to authentication procedures that lack sufficient safeguards, allows attackers to circumvent existing security restrictions.

The vulnerability of Ruckus Virtual SmartZone wireless network controller’s microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions remotely...

The vulnerability of the ZITADEL identification data management software platform, related to deficiencies in authentication procedures, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the ZITADEL identification data management software platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

CVE-2025-67920 WordPress Neo Ocular theme < 1.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Neo Ocular neoocular allows PHP Local File Inclusion.This issue affects Neo Ocular: from n/a through 1.2...

curl: inconsistently Rejection Logic in file:// URLs with Authority

curl's file:// protocol handler inconsistently applies path sanitization. in reject file://../ as Bad File:// URL" but allows the same traversal when an authority/host e.g.,localhost is present file://localhost/../. this inconsistency misleads developers who rely on the bad file:// URL error for...

Asseco InfoMedica 安全漏洞

Asseco InfoMedica is a comprehensive medical information management system from Asseco Poland. A security vulnerability exists in Asseco InfoMedica version 4.50.1 and prior to version 5.38.0, which stems from insufficient access control granularity and could lead to the acquisition of coded...

CVE-2019-16208

Password-based encryption PBE algorithm, of Brocade SANnav versions before v2.0, has a weakness in generating cryptographic keys that may allow an attacker to decrypt passwords used with several services Radius, TACAS, etc...

PT-2026-1648

Name of the Vulnerable Software and Affected Versions Crocoblock JetEngine versions through 3.8.1.1 Description A missing authorization issue exists in Crocoblock JetEngine, allowing exploitation of incorrectly configured access control security levels. The issue concerns insufficient authorizati...

The vulnerability of the IBM API Connect application programming interface management platform stems from authentication mechanisms that have deficiencies, allowing attackers to gain unauthorized access to the platform.

The vulnerability of the IBM API Connect application programming interface platform is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to the platform remotely...

The vulnerability of the VPN Settings component of the operating system for managing network devices in Synology Router Manager allows a perpetrator to execute arbitrary commands.

The vulnerability of the VPN Settings component of the operating system used to manage Synology Router Manager relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the kcp software, related to deficiencies in the authentication process, allows a perpetrator to circumvent security restrictions.

The vulnerability of the kcp software is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions from a remote location...

The vulnerability of the API Endpoint component of the Rising Technosoft CAP Back Office Application allows a malicious individual to gain unauthorized access to user accounts.

The vulnerability of the API Endpoint component in Rising Technosoft CAP Back Office Application is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to user accounts...

CVE-2025-65212

An issue was discovered in NJHYST HY511 POE core before 2.1 and plugins before 0.1. The vulnerability stems from the device's insufficient cookie verification, allowing an attacker to directly request the configuration file address and download the core configuration file without logging into the...

The vulnerability of the command-line interface (CLI) of NPort terminal server software products, models 6100-G2/6200-G2, allows a hacker to alter the device’s configuration data.

The vulnerability of the command-line interface CLI of NPort terminal server software for models 6100-G2/6200-G2 is related to deficiencies in the access control mechanism. Exploiting this vulnerability could allow a malicious actor to alter the device’s configuration data remotely...

The vulnerability of the My Timesheet Fiori 2.0 software component, which is used for workforce management in SAP HCM, allows a hacker to escalate their privileges.

The vulnerability of the My Timesheet Fiori 2.0 software, a personnel management solution for SAP HCM, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain elevated privileges...

The vulnerability of SAP NetWeaver Application Server Java, related to deficiencies in authentication procedures, allows attackers to gain read access to data.

The vulnerability of the SAP NetWeaver Application Server Java server is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain read access to data remotely...

The vulnerability of the My Timesheet Fiori 2.0 software component, which is used for workforce management in SAP HCM, allows a hacker to escalate their privileges.

The vulnerability of the My Timesheet Fiori 2.0 software, a personnel management solution for SAP HCM, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain elevated privileges...