Android notifyProfileAdded notifyProfileRemoved Disclosure

The vulnerability of the notifyProfileAdded and notifyProfileRemoved functions in the SipService.java file of the Android operating system is related to authentication errors. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by these functions...

Red Hat OpenShift Container Platform Auth Bypass Info Disclosure

The vulnerability of the Red Hat OpenShift Container Platform is related to errors in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain access to protected information remotely...

MinIO Authentication Bypass

The vulnerability of the MinIO object storage server is related to authentication errors. Exploiting this vulnerability allows a malicious actor to bypass the readOnly policy and compromise the integrity of the protected information by creating a temporary URL address “mc share upload”...

Magento Commerce Authentication Bypass

The vulnerability of the Magento Commerce development and management software platform is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information and modify user data...

Tree Sitemap WordPress Code Execution

The vulnerability of the cppluginsdobuttonjoblatercallback function in the Tree Sitemap WordPress plugin is related to authentication process errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

Magento Commerce Authentication Bypass

The vulnerability of the Magento Commerce development and management software platform is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

OpenClinic shared/view_source.php Code Execution

The vulnerability of the shared/viewsource.php component in the OpenClinic medical record management software is related to authentication errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

VMware Carbon Black App Control Auth Bypass

The vulnerability of the VMware Carbon Black App Control server is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

Cisco SD-WAN Messaging Service Privilege Escalation

The vulnerability of the programmatically defined Cisco SD-WAN messaging service is related to authentication errors. Exploiting this vulnerability could allow a malicious actor to create new administrative user accounts remotely...

Pulse Connect Secure Authentication Code Execution

The vulnerability of the Pulse Connect Secure VPN server for corporate networks is related to authentication errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Mitsubishi Electric Graphic Control Panel Authentication Bypass

The vulnerability of Mitsubishi Electric’s GOT2000 and GOT SIMPLE graphic control panels relates to authentication errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2021-2984 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the software, which could allow an unauthenticated, remote attacker to execute arbitrary code, gain access to...

SAP NetWeaver Java Application Server Auth Bypass

The vulnerability of the SAP NetWeaver Java Application Server, a software integration platform of SAP NetWeaver, is related to authentication errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

GlobalProtect SSL VPN Unauthorized Access

The vulnerability of the GlobalProtect SSL VPN implementation for the PAN-OS operating system is related to errors in the certificate authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Magento Commerce Authentication Bypass

The vulnerability of the integration component of the Magento Commerce software development and management platform is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by using...

Bluetooth Service Privilege Escalation

The vulnerability of the Bluetooth service for Windows operating systems is related to authentication errors. Exploiting this vulnerability can allow an attacker to increase their privileges and gain unauthorized access to protected information...

Bluetooth Service Privilege Escalation

The vulnerability of the Bluetooth service for Windows operating systems is related to authentication errors. Exploiting this vulnerability can allow an attacker to increase their privileges and gain unauthorized access to protected information...

PT-2021-2949 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.4.1 and earlier Magento versions 2.4.0-p1 and earlier Magento versions 2.3.6 and earlier Description: The issue is related to an insecure direct object reference IDOR in the product module, which could lead to unauthorized...

Cisco Data Center Network Manager Data Compromise

The vulnerability of the Data Center Network Manager DCNM of the Cisco Data Center Network system is related to errors in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the integrity of data...

Istio Authentication Data Compromise

The vulnerability of the Istio network software is related to authentication errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...