Zoom Video Conferencing Authentication Bypass

The vulnerability of Zoom’s video conferencing software is related to errors in the authentication process for verifying certificate authenticity. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

SMB Spoofing

The vulnerability of the SMB protocol implementation in Microsoft Windows is related to errors in the authentication process. Exploiting this vulnerability allows a malicious actor to perform a spoofing attack remotely...

Dell ECS Authentication Unauthorized Access

The vulnerability of the Dell ECS storage platform is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2024-11084

Helix ALM prior to 2025.1 returns distinct error responses during authentication, allowing an attacker to determine whether a username exists...

Samba Authentication Confidential Data Access

The vulnerability of the Samba networking communication package is related to authentication errors. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

CVE-2025-26485

A vulnerability in Beta80 Life 1st enables the retrieval of different error messages for failed authentication attempts in case of the usage of a wrong password or a non existent user. The difference in the returned error messages could be used by attackers to understand whether a certain user is...

Qnap Network Device Authentication Bypass

The vulnerability of the Qnap network device support automation system is related to errors in the authentication process for certificates. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device remotely...

Mozilla Firefox Authentication Process Errors

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, are related to authentication process errors. Exploiting these vulnerabilities can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

SIMATIC S7-1200 Web Server Spoofing

The vulnerability of the web server of microprogrammed software-controlled logical controllers SIMATIC S7-1200 is related to errors in authenticating certificates. Exploiting this vulnerability allows an attacker to perform spoofing attacks remotely...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : Symfony vulnerabilities (USN-7272-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7272-1 advisory. Soner Sayakci discovered that Symfony incorrectly handled cookie storage in the web cache. An attacker could possibly use this...

ROS-20250121-11

A vulnerability in the QTextLayout component of the cross-platform software development framework Qt is related to buffer copying without input validation. Exploitation of the vulnerability allows an attacker acting remotely to cause a denial of service using a specially crafted file SVG A...

Lenovo Accessories and Display Manager Authentication Code Execution

The vulnerabilities of the Lenovo Accessories and Display Manager LADM software for managing accessories and displays, as well as the Lenovo Display Control Center LDCC software for controlling and configuring displays, are related to errors in the certificate validation process. Exploiting these...

Checkmk Exchange Plugin Spoofing

The vulnerability of the Checkmk Exchange plugin for MikroTik routers is related to errors in the authentication process. Exploiting this vulnerability allows a malicious actor to execute a spoofing attack remotely...

Site Hierarchy Flows Oracle E-Business Suite Data Access Modification Deletion

The vulnerability of the Site Hierarchy Flows component of the Oracle Site Hub data storage and management system, a part of the Oracle E-Business Suite automation system for enterprise activities, is related to authentication errors. Exploiting this vulnerability could allow an attacker to gain...

Field Service Engineer Portal Data Manipulation

The vulnerability of the Field Service Engineer Portal component of the Oracle Field Service management platform, part of the Oracle E-Business Suite, is related to authentication errors. Exploiting this vulnerability could allow an attacker to gain access to modify, add, and delete data using th...

GitLab Authentication Execution CI CD

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to authentication errors. Exploiting this vulnerability allows a malicious actor to remotely execute continuous integration and continuous delivery processes on arbitrary branches of the...

Online Store Authentication Bypass

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to authentication errors. Exploiting these vulnerabilities can allow attackers to bypass security restrictions remotely...

Oracle VM VirtualBox Full Control

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in authentication errors that occur when operations are performed outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain full control over the application...

Secure Channel Spoofing

The vulnerability of the Secure Channel component in Windows operating systems is related to errors in the certificate authentication process. Exploiting this vulnerability can allow a malicious actor to perform a spoofing attack remotely...

Blink Google Chrome Confidential Data Access

The vulnerability of the Blink web browser component in Google Chrome is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...