Acronis Agent Privilege Escalation

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

WordPress Comments Like Dislike Plugin RestoreSettings Data Compromise

The vulnerability of the restoreSettings function in the WordPress content management system’s comments and dislikes module is related to authentication errors. Exploiting this vulnerability could allow an attacker to compromise data integrity...

HiviewTunner Module Interception

The vulnerability of the HiviewTunner module of the HarmonyOS operating system is related to authentication errors. Exploiting this vulnerability allows a remote attacker to intercept legitimate network traffic...

EMUI Kernel Data Compromise

The vulnerability of the EMUI operating system of HarmonyOS is related to authentication errors. Exploiting this vulnerability could allow a remote attacker to compromise data confidentiality and integrity...

Avalanche mobile device management system Privilege Escalation

The vulnerability of the dumpHeap method in the Avalanche mobile device management system is related to errors during the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

Cacti LDAP Auth Bypass

The vulnerability of the cactildapauth function in the network monitoring software Cacti is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to bypass the authentication process...

IBM Robotic Process Automation Auth Bypass Info Disclosure

The vulnerability of the software interface of the IBM Robotic Process Automation tooling lies in authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information about the vulnerable system...

OpenEMR Authentication HTML Injection

The vulnerability of the software for managing medical organizations called OpenEMR is related to authentication errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform HTML injection attacks...

OpenEMR Auth Bypass Privilege Escalation

The vulnerability of the software for managing medical organizations called OpenEMR is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

Apache Superset Authentication Bypass Read Access

The vulnerability of the Apache Superset data visualization software is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain read access to the database...

Argo CD Authentication Bypass

The vulnerability of the application programming interface for the declarative delivery tool of GitOps for Kubernetes Argo CD is related to authentication errors. Exploiting this vulnerability allows a malicious actor to bypass established access controls...

Keycloak Certificate Verification

The vulnerability of the Keycloak identity and access management software is related to errors in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

XWiki Authentication Bypass Privilege Escalation

The vulnerability of the XWiki Platform lies in authentication errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary web scripts with elevated privileges...

DEBIAN-CVE-2023-40184

xrdp is an open source remote desktop protocol RDP server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The authstartsession function can return non-zero 1 value on, e.g., PAM error which may result in in session...

Node.js process.mainModule.proto.require() Data Compromise

The vulnerability of the process.mainModule.proto.require function in the Node.js software platform is related to authentication errors. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information...

Mozilla Firefox Localstorage Unauthorized Access

The vulnerability of the localstorage storage mechanism in the Mozilla Firefox browser is related to authentication errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Perl HTTP::Tiny Authentication Error Confidential Data Compromise

The vulnerability of the Perl programming language library HTTP::Tiny is related to errors in the TLS certificate authentication process. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Sandbox Information Disclosure

The vulnerability of the Sandbox component in iOS, iPadOS, tvOS, watchOS, and macOS is related to authentication process errors. Exploiting this vulnerability can allow attackers to access confidential information and also retain user data...

PT-2023-3933 · Geovision · Geovision Gv-Adr2701

Name of the Vulnerable Software and Affected Versions: GeoVision GV-ADR2701 affected versions not specified Description: The issue is related to errors in the authentication procedure of the GeoVision GV-ADR2701 IP video surveillance system. An attacker could exploit this by editing the login...

Spring Security Configuration Error Auth Bypass Info Disclosure

The vulnerability of the Java framework for securing industrial applications using Spring Security is related to errors in authentication configuration. These errors can occur when using multiple servlets, including the DispatcherServlet in Spring MVC. Exploiting this vulnerability allows a...