CVE-2025-65899

Kalmia CMS version 0.2.0 contains a user enumeration vulnerability in its authentication mechanism. The application returns different error messages for invalid users usernotfound versus valid users with incorrect passwords invalidpassword. This observable response discrepancy allows...

Siemens Solid Edge Man-in-the-Middle

The vulnerability of Siemens Solid Edge’s design and simulation tools is related to errors in the authentication process for certificates. Exploiting this vulnerability could allow a malicious actor to carry out a “man-in-the-middle” attack...

CVE-2025-40760

Affected product: Altair Grid Engine before 2026.0.0. Root cause: error handling mishandling during user authentication leads to disclosure of password hashes of privileged accounts. Impact: local attacker could recover password hashes for offline brute-forcing. Evidence across connected sources ...

ProFTPD FTP Server Authentication Manipulation

The vulnerability of the ProFTPD FTP server is related to errors in the authentication process. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ProFTPD FTP Server Authentication Manipulation

The vulnerability of the ProFTPD FTP server is related to errors in the authentication process. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2025-34155

Tibbo AggreGate Network Manager 6.40.05 contains an observable response discrepancy in its login functionality. Authentication failure messages differ based on whether a supplied username exists or not, allowing an unauthenticated remote attacker to infer valid account identifiers. This can...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the login process. An attacker can determine the existence of user accounts by analyzing differences in error messages presented during authentication attempts. Remediation Upgrade ibexa/user to version 5.0.3 or...

Zabbix Authentication Bypass

The vulnerability of the Zabbix universal monitoring system is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

EUVD-2015-3708

Malware in sbrugna...

EUVD-2014-8150

Malware in sbrugna...

CVE-2025-55068

Dover Fueling Solutions ProGauge MagLink LX4 Devices fail to handle Unix time values beyond a certain point. An attacker can manually change the system time to exploit this limitation, potentially causing errors in authentication and leading to a denial-of-service condition...

CVE-2025-55068

Dover Fueling Solutions ProGauge MagLink LX4 Devices fail to handle Unix time values beyond a certain point. An attacker can manually change the system time to exploit this limitation, potentially causing errors in authentication and leading to a denial-of-service condition...

CVE-2025-55068 Dover Fueling Solutions ProGauge MagLink LX4 Devices Integer Overflow or Wraparound

Dover Fueling Solutions ProGauge MagLink LX4 Devices fail to handle Unix time values beyond a certain point. An attacker can manually change the system time to exploit this limitation, potentially causing errors in authentication and leading to a denial-of-service condition...

CVE-2025-55068 Dover Fueling Solutions ProGauge MagLink LX4 Devices Integer Overflow or Wraparound

Dover Fueling Solutions ProGauge MagLink LX4 Devices fail to handle Unix time values beyond a certain point. An attacker can manually change the system time to exploit this limitation, potentially causing errors in authentication and leading to a denial-of-service condition...

IOKit Information Disclosure

The vulnerability of the IOKit component in iOS, iPadOS, tvOS, watchOS, and macOS is related to authentication process errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information...

Isolated Sandbox Bypass

The vulnerability of the isolated Sandbox software environment in iOS, iPadOS, tvOS, watchOS, and macOS is related to authentication process errors. Exploiting this vulnerability can allow attackers to bypass the sandbox’s security mechanisms...

USN-7705-1 tomcat10 vulnerabilities

It was discovered that Tomcat did not correctly handle case sensitivity. An attacker could possibly use this issue to bypass authentication mechanisms. CVE-2025-46701 Elysee Franchuk discovered that Tomcat did not correctly limit the number of attributes for a session. An attacker could possibly...

Cross-platform Network Certificate Validation

The vulnerability of cross-platform software for protecting Tunneling Protocol network connections is related to errors in the authentication process. Exploiting this vulnerability can allow an attacker to circumvent security restrictions remotely...

Managed Configuration macOS Privilege Escalation

The vulnerability of the Managed Configuration component for macOS operating systems is related to errors in the authentication process. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

MFlash secure data exchange platform Privilege Escalation

The vulnerability of the MFlash secure data exchange platform is related to authentication errors. Exploiting this vulnerability allows a malicious actor to enhance their privileges and use the file storage system beyond the architectural limitations by intercepting API responses...