Elcomplus SmartPPT Setting Handler Code Execution

The vulnerability of the Setting Handler component in the Elcomplus SmartPPT server is related to authentication errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

vgauth Module Data Compromise

The vulnerability of the vgauth module in the VMware Tools component of the VMware ESXi hypervisor is related to errors during authentication procedures. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

Notation: Data Forgery Vulnerabilities

Notation is a collection of libraries open-sourced by the Notary Project to support symbolic notation, validation, push and pull oci artifacts. A data forgery issue vulnerability exists in versions prior to Notation v1.0.0-rc.6, which can be exploited by an attacker to corrupt the registry and...

ARIS controller Authentication Failure DoS

The vulnerability of the built-in software of the ARIS controller is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending a specially crafted network packet...

SecurityRequestFilter Access Credentials

The vulnerability of the SecurityRequestFilter class in network printing control software such as PaperCut MF and PaperCut NG is related to errors during authentication processes. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to user credentials...

Scada-LTS Auth Bypass Privilege Escalation

The vulnerability of the multi-platform web solution for creating Scada systems is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

P5E GNSS Satellite Receiver Privilege Escalation

The vulnerability of the P5E GNSS satellite receiver’s microprogramming software is related to errors during the authentication process. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

Node.js Privilege Escalation

The vulnerability of the process.mainModule.require function in the Node.js software platform is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

ABB Symphony Plus S+ HMI Privilege Escalation

The vulnerability of the HMI software platform for control and monitoring of ABB Symphony Plus S+ Operations is related to errors during the authentication process. Exploiting this vulnerability can allow attackers who operate remotely to gain increased privileges...

Atlassian Jira Service Management Privilege Escalation

The vulnerability of the Atlassian Jira Service Management and Data Center data processing software lies in authentication errors. Exploiting this vulnerability can allow attackers to increase their privileges remotely...

IBM Navigator Mobile Unauthorized Access

The vulnerability of the IBM Navigator Mobile mobile application for collaborative document work on Android operating systems is related to authentication errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

SAP Disclosure Management Authentication Bypass

The vulnerability of the SAP Disclosure Management reporting tool is related to authentication errors. Exploiting this vulnerability can allow unauthorized actors, operating remotely, to gain unauthorized access to protected information...

Fortinet FortiClient Enterprise Management Server Certificate Validation Man-in-the-Middle

The vulnerability of the Fortinet FortiClient Enterprise Management Server EMS server is related to authentication errors. Exploiting this vulnerability allows a malicious actor to carry out “man-in-the-middle” attacks and expose the protected information...

Huawei mobile phone software Auth Bypass

The vulnerability of Huawei’s mobile phone software relates to authentication errors. Exploiting this vulnerability could allow a hacker to bypass the digital balance limit...

Azure Network Watcher Agent Authentication Error

The vulnerability of the Azure Network Watcher Agent’s performance monitoring service is related to authentication errors. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...

Linux Bluetooth Low Energy Privilege Escalation

The vulnerability of the Linux operating system’s Bluetooth Low Energy driver is related to errors during authentication processes. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

Jenkins OpenShift Deployer Plugin Controller File System Handler Privilege Bypass

The vulnerability of the Controller File System Handler component in the Jenkins OpenShift Deployer Plugin is related to authentication errors. Exploiting this vulnerability allows a malicious actor to bypass established security restrictions and escalate their privileges...

Cisco AsyncOS Email Security Exposed Information

The vulnerability in the web interface for controlling the Cisco AsyncOS operating system of the Cisco Email Security Appliance ESA, the Cisco Secure Email and Web Manager, and the Cisco Secure Web Appliance formerly Cisco Web Security Appliance WSA relates to authentication errors. Exploiting th...

Jenkins OpenShift Deployer Plugin Auth Bypass Privilege Escalation

The vulnerability of the Jenkins OpenShift Deployer Plugin is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions and gain increased privileges...

Node.js Auth Bypass Info Disclosure

The vulnerability of the Node.js software platform is related to errors in the implementation of authentication procedures. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information that is protected by the system...