Broadcom CA Automic Automation Authorization Issue Vulnerability

Broadcom CA Automic Automation is an automation product from Broadcom, Inc. It provides a service orchestration and automation platform to automate complex applications, platforms, and technology environments. A security vulnerability exists in Broadcom CA Automic Automation versions 12.2 and 12....

Siemens SICAM GridEdge Authentication Error Vulnerability (CNVD-2022-45216)

SICAM GridEdge enables IoT functionality in your existing IEC 61850 devices with just a few clicks.An authentication error vulnerability in Siemens SICAM GridEdge results from the fact that the affected software does not authenticate access to privileged functions, which can be exploited to creat...

su: nobody to pgxl in console

Citrix ADM instance constantly showing su: nobody to pgxl in console RCG-ISLBADM-PRI su: in promptechooff: tcgetarrt: Inappropriate ioctl for device RCG-ISLBADM su: nobody to pgxl...

Siemens SICAM GridEdge Authentication Error Vulnerability

SICAM GridEdge enables IoT functionality in your existing IEC 61850 devices with just a few clicks.Siemens SICAM GridEdge is vulnerable to an authentication error, which stems from the fact that the affected software does not require authenticated access to privileged functions and can be exploit...

Siemens SICAM GridEdge Essential access control vulnerability

SICAM GridEdge enables IoT functionality in your existing IEC 61850 devices with just a few clicks.An authentication error vulnerability in Siemens SICAM GridEdge results from the fact that the affected software does not authenticate access to privileged functions, which can be exploited to creat...

Siemens SINEMA Remote Connect Server Access Control Vulnerability

SINEMA Remote Connect is a remote network management platform that makes it easy to manage tunnel connections VPNs between headquarters, service technicians, and installed machines or plants.An authentication error vulnerability exists in Siemens SINEMA Remote Connect Server, which could be...

Siemens SICAM GridEdge Essential access control vulnerability

SICAM GridEdge enables IoT functionality in your existing IEC61850 devices with just a few clicks.A source authentication error vulnerability in Siemens SICAM GridEdge is caused by the fact that the affected software does not apply cross-domain resource sharing CORS restrictions to critical...

Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch

Elasticsearch Security versions 6.4.0 to 6.4.2 contain an error in the way request headers are applied to requests when using the Active Directory, LDAP, Native, or File realms. A request may receive headers intended for another request if the same username is being authenticated concurrently; wh...

Elcomplus SmartPPT SCADA Privilege Escalation

The vulnerability of the Elcomplus SmartPPT SCADA server is related to authentication errors. Exploiting this vulnerability can allow attackers to increase their privileges...

GitLab Authentication Bypass DoS

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to incorrect configuration of access rights for previously deleted users. Exploiting this vulnerability allows a malicious actor to compromise data integrity and cause service interruption...

APC Smart-UPS Power Supply Auth Code Execution

The vulnerability of microprogrammed software in APC Smart-UPS power supplies of the SMT, SMC, SMTL, SCL, and SMX series is related to errors during the authentication process. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

FortiMail Authentication Token Disclosure

The vulnerability of the FortiMail email security system is related to errors during the authentication process. Exploiting this vulnerability can allow a malicious actor to obtain the authentication token of the administrative account...

TP-LINK TL-WR940N: Access control error vulnerability

The TP-LINK TL-WR940N is a wireless router from China P&L TP-LINK. An access control error vulnerability exists in TP-Link TL-WR940N version 3.20.1 Build 200316 Rel.34392n, which stems from incorrect authentication...

QNAP File Authorization Vulnerability

QNAP Qfile is a free companion application to QNAP NAS from China Weilian Technology QNAP that allows you to browse and manage files on your NAS using your iPhone or iPad. QNAP Qfile suffers from an authorization issue vulnerability that originates from an error when processing authentication...

CVE-2021-43931

The authentication algorithm of the WebHMI portal is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error...

CVE-2021-43931

The authentication algorithm of the WebHMI portal is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error...

Distributed Data Systems WebHmi Authorization Issues Vulnerability

Distributed Data Systems WebHmi is a Scada system with a built-in web server from Distributed Data Systems, Ukraine. It is used for monitoring and controlling any automation system on the local network as well as over the Internet from computers and mobile devices. Distributed Data Systems WebHmi...

iOS macOS iPadOS watchOS tvOS Logical Error DoS

The vulnerability of operating systems such as iOS, macOS, iPadOS, watchOS, and tvOS arises due to a logical error during the authentication process. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

Samsung Pass Access Authentication Error Vulnerability (CNVD-2025-02720)

Samsung Pass is a secure and easy way to log in to websites and applications on your cell phone using biometrics from Samsung South Korea. An Access Authentication Error vulnerability exists in versions prior to Samsung Pass 3.0.02.4, which stems from a lack of proper authentication logic in...

QEMU Hardware Emulation Encryption

The vulnerability of the QEMU hardware emulation software is related to a implementation error in the handling of pointer authentication. Exploiting this vulnerability can allow an attacker to gain access to confidential data...