EUVD-2023-28590

Malicious code in bioql PyPI...

CVE-2024-28056

Amazon AWS Amplify CLI before 12.10.1 incorrectly configures the role trust policy of IAM roles associated with Amplify projects. When the Authentication component is removed from an Amplify project, a Condition property is removed but "Effect":"Allow" remains present, and consequently...

CVE-2022-45546

Information Disclosure in Authentication Component of ScreenCheck BadgeMaker 2.6.2.0 application allows internal attacker to obtain credentials for authentication via network sniffing...

PT-2025-6118 · Code Projects · Code-Projects Vehicle Parking Management System

Name of the Vulnerable Software and Affected Versions: code-projects Vehicle Parking Management System version 1.0 Description: A critical issue was found in the Authentication component, specifically affecting the login function. The manipulation of the username argument leads to a stack-based...

PT-2025-48145

Уязвимость компонента аутентификации программного комплекса для защиты платформ виртуализации vGate R2 связана с чрезмерным количеством неэффективных обращений к данным на стороне сервера. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании...

Privilege escalation from low privilege administrator

...

PT-2024-22004 · Unknown · Eskooly Free Online School Management

Name of the Vulnerable Software and Affected Versions: Eskooly Free Online School management Software versions 3.0 and earlier Description: An issue in the User Account Management component of the authentication mechanism allows a remote attacker to escalate privileges. Recommendations: For...

Privilege Escalation

Amazon AWS Amplify CLI is vulnerable to Privilege Escalation. The vulnerability is due to the mishandling of role trust policies when the Authentication component is removed, leaving "Effect":"Allow" in place without conditions, thus exposing sts:AssumeRoleWithWebIdentity to potential misuse...

PT-2024-22240 · Amazon · Amazon Aws Amplify Cli

Name of the Vulnerable Software and Affected Versions: Amazon AWS Amplify CLI versions prior to 12.10.1 Description: The issue arises when the Authentication component is removed from an Amplify project, resulting in the removal of a Condition property but leaving "Effect":"Allow" present. This...

CVE-2024-28056

The Amazon AWS Amplify CLI before version 12.10.1 contains a vulnerability where incorrectly managed role trust policies can lead to unauthorized access. When an authorized user removes the Authentication component from an Amplify project, the CLI removes the Condition property but leaves the "Ef...

PT-2024-2841 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Authentication component of Windows operating systems. It is caused by incorrect link resolution before...

Windows Authentication DoS

The vulnerability of the Windows Authentication component in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2023-6944

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insufficient input validation in the Windows Authentication component, which can be exploited to cause a denial of service. This allows an attacker to affect the syste...

PT-2023-3191 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Windows Authentication component in Windows operating systems and is associated with inadequate access control. It allows an attacker to elevate their privileges...

CVE-2022-45546

Information Disclosure in Authentication Component of ScreenCheck BadgeMaker 2.6.2.0 application allows internal attacker to obtain credentials for authentication via network sniffing...

CVE-2022-45546

Information Disclosure in Authentication Component of ScreenCheck BadgeMaker 2.6.2.0 application allows internal attacker to obtain credentials for authentication via network sniffing...

CVE-2022-45546

Information Disclosure in Authentication Component of ScreenCheck BadgeMaker 2.6.2.0 application allows internal attacker to obtain credentials for authentication via network sniffing...

CVE-2022-45546: Cleartext Transmission of Sensitive Information

Information Disclosure in Authentication Component of ScreenCheck BadgeMaker 2.6.2.0 application allows internal attacker to obtain credentials for authentication via network sniffing...

CVE-2022-45546

Information Disclosure in Authentication Component of ScreenCheck BadgeMaker 2.6.2.0 application allows internal attacker to obtain credentials for authentication via network sniffing...

CVE-2022-45546

CVE-2022-45546 affects ScreenCheck BadgeMaker 2.6.2.0. The information disclosure occurs in the Authentication component, enabling an internal attacker to obtain authentication credentials via network sniffing. Public sources in the connected documents consistently describe credential exposure th...