Lucene search
K

31 matches found

OSV
OSV
added 2026/06/11 12:0 a.m.5 views

UBUNTU-CVE-2026-48860

Reliance on IP Address for Authentication vulnerability in Erlang/OTP...

7.5CVSS5.2AI score0.00194EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2026/06/05 7:23 p.m.5 views

CVE-2026-25660

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication bypass occurs when the URL ends with Authentication with certain function calls. This bypass allows assigning arbitrary permission to any user existing in...

10CVSS5.5AI score0.00413EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/16 6:32 p.m.2 views

EUVD-2026-12470

A vulnerability was identified in Tenda AC8 16.03.50.11. Affected by this issue is the function checkisipv6 of the component IPv6 Handler. The manipulation leads to reliance on ip address for authentication. It is possible to initiate the attack remotely. The exploit is publicly available and mig...

10CVSS5.5AI score0.0126EPSS
Exploits1References6
Cvelist
Cvelist
added 2026/03/16 4:32 p.m.21 views

CVE-2026-4252 Tenda AC8 IPv6 check_is_ipv6 ip address for authentication

A vulnerability was identified in Tenda AC8 16.03.50.11. Affected by this issue is the function checkisipv6 of the component IPv6 Handler. The manipulation leads to reliance on ip address for authentication. It is possible to initiate the attack remotely. The exploit is publicly available and mig...

10CVSS0.0126EPSS
Exploits1References5
Snyk
Snyk
added 2026/03/04 7:17 p.m.1 views

Reliance on IP Address for Authentication

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Reliance on IP Address for Authentication in the authorizeCanvasRequest process. An attacker can gain unauthorized access to canvas endpoints and sensitive interface content by sending HT...

7.6CVSS5.8AI score
Exploits0References2
CNNVD
CNNVD
added 2025/12/03 12:0 a.m.2 views

OpenVPN 安全漏洞

OpenVPN is a software package for creating encrypted tunnels for virtual private networks VPNs from US-based OpenVPN, which uses the OpenSSL library to encrypt data and control information and allows the created VPN to be authenticated using a public key, an electronic certificate, or a...

8.2CVSS7.7AI score0.0061EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2008-1263

Malware in sbrugna...

10CVSS7.6AI score0.03911EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/07/01 8:15 p.m.9 views

CVE-2025-24292

A misconfigured query in UniFi Network v9.1.120 and earlier could allow users to authenticate to Enterprise WiFi or VPN Server l2tp and OpenVPN using a device’s MAC address from 802.1X or MAC Authentication, if both services are enabled and share the same RADIUS profile...

6.8CVSS7.1AI score0.00311EPSS
Exploits0References1
NVD
NVD
added 2025/06/29 8:15 p.m.9 views

CVE-2025-24292

A misconfigured query in UniFi Network v9.1.120 and earlier could allow users to authenticate to Enterprise WiFi or VPN Server l2tp and OpenVPN using a device’s MAC address from 802.1X or MAC Authentication, if both services are enabled and share the same RADIUS profile...

6.8CVSS0.00311EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/29 7:25 p.m.19 views

CVE-2025-24292

A misconfigured query in UniFi Network v9.1.120 and earlier could allow users to authenticate to Enterprise WiFi or VPN Server l2tp and OpenVPN using a device’s MAC address from 802.1X or MAC Authentication, if both services are enabled and share the same RADIUS profile...

6.8CVSS0.00311EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:45 a.m.5 views

CVE-2024-54450

An issue was discovered in Kurmi Provisioning Suite 7.9.0.33. If an X-Forwarded-For header is received during authentication, the Kurmi application will record the possibly forged IP address mentioned in that header rather than the real IP address that the user logged in from. This fake IP addres...

9.4CVSS6.8AI score0.00512EPSS
Exploits0References1
OSV
OSV
added 2024/11/22 8:15 p.m.4 views

CVE-2024-6248

Wyze Cam v3 Cloud Infrastructure Improper Authentication Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Wyze Cam v3 IP cameras. Authentication is not required to exploit this vulnerability. The...

7.5CVSS5.8AI score0.01176EPSS
Exploits0References2
CNVD
CNVD
added 2024/07/12 12:0 a.m.1 views

D-Link DAP-2622 Stack Buffer Overflow Remote Code Execution Vulnerability (CNVD-2025-29684)

D-Link DAP-2622 is a wireless access point AP from AUO D-Link that supports POE power supply and is mainly used for wireless network coverage in enterprise or commercial scenarios. The D-Link DAP-2622 suffers from a stack buffer overflow remote code execution vulnerability, which stems from a...

8.8CVSS9.1AI score0.00637EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/05/03 12:0 a.m.3 views

D-Link DAP-2622 安全漏洞

D-Link DAP-2622 is a wireless access point AP from AUO D-Link that supports POE power supply and is mainly used for wireless network coverage in enterprise or commercial scenarios. The D-Link DAP-2622 suffers from a stack buffer overflow remote code execution vulnerability, which stems from a...

8.8CVSS8.9AI score0.00637EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/05/03 12:0 a.m.3 views

D-Link DAP-2622 安全漏洞

The D-Link DAP-2622 is a wireless access point Access Point device from China's AUO D-Link. A security vulnerability exists in the D-Link DAP-2622 that stems from a stack-based buffer overflow remote code execution vulnerability in the DDP Set IPv6 Address Authentication Password...

8.8CVSS9.3AI score0.00637EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/05/03 12:0 a.m.1 views

D-Link DAP-2622 安全漏洞

The D-Link DAP-2622 is a wireless access point Access Point device from China's AUO D-Link. A security vulnerability exists in the D-Link DAP-2622 that stems from a stack-based buffer overflow remote code execution vulnerability in the DDP Set IPv4 Address Authentication Password...

8.8CVSS9.2AI score0.0075EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/05/03 12:0 a.m.3 views

D-Link DAP-2622 安全漏洞

D-Link DAP-2622 is a wireless access point AP from AUO D-Link that supports POE power supply and is mainly used for wireless network coverage in enterprise or commercial scenarios. The D-Link DAP-2622 suffers from a stack buffer overflow remote code execution vulnerability, which stems from a...

8.8CVSS8.9AI score0.00637EPSS
Exploits0References3
OSV
OSV
added 2024/01/07 10:15 a.m.2 views

CVE-2023-7211

A vulnerability was found in Uniway Router 2.0. It has been declared as critical. This vulnerability affects unknown code of the component Administrative Web Interface. The manipulation leads to reliance on ip address for authentication. The attack can be initiated remotely. The complexity of an...

8.1CVSS4.9AI score0.00937EPSS
Exploits1References3
NVD
NVD
added 2024/01/07 10:15 a.m.22 views

CVE-2023-7211

A vulnerability was found in Uniway Router 2.0. It has been declared as critical. This vulnerability affects unknown code of the component Administrative Web Interface. The manipulation leads to reliance on ip address for authentication. The attack can be initiated remotely. The complexity of an...

8.1CVSS6.5AI score0.00937EPSS
Exploits1References3
Prion
Prion
added 2024/01/07 10:15 a.m.22 views

Design/Logic Flaw

A vulnerability was found in Uniway Router 2.0. It has been declared as critical. This vulnerability affects unknown code of the component Administrative Web Interface. The manipulation leads to reliance on ip address for authentication. The attack can be initiated remotely. The complexity of an...

5.1CVSS7.1AI score0.00937EPSS
Exploits1References3Affected Software5
Rows per page
Query Builder