470 matches found
PT-2026-109466
Уязвимость сервера приложений Apache Tomcat связана с недостатками процедуры авторизации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на целостность и доступность защищаемой информации...
MinIO extractMetadataFromMime DoS
The vulnerability of the extractMetadataFromMime function in the MinIO storage server is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to cause service interruptions by sending specially crafted X-Minio-Replication- headers...
Important: dotnet10.0
Issue Overview: Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network. CVE-2026-47300 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
CVE-2026-16236
The Realtyna Organic IDX plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 5.3.0. This is due to missing file extension and content validation in the saveLiveImages function combined with an insufficient authorization check on the getkeys AJAX handler a...
Microsoft SharePoint Server Authentication Bypass
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the deficiencies of its authentication procedures. Exploiting this vulnerability could allow attackers to bypass existing security mechanisms remotely...
ROS-20260729-73-0025
The vulnerability of the Go programming language is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
security-research
Security Research OAuth / OIDC and auth-logic vulnerability...
Online Store Authentication Bypass
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass security restriction...
Adobe Animate Auth Bypass RCE
The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary code...
Microsoft SharePoint Server Privilege Escalation
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the deficiencies of the authentication process. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
ROS-20260714-73-0043
The vulnerability in MinIO is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers who operate remotely to increase their privileges...
Open WebUI Authentication Bypass
The vulnerability of the Open WebUI web interface is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain access to and modify data...
Open WebUI get_sources_from_items() Unauthenticated Access
The vulnerability of the getsourcesfromitems function in the Open WebUI AI-based web interface is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through the Range Addressing RAG...
OPNsense ACL has Privilege Bypass
The vulnerability of the ACL::hasPrivilege function in the OPNsense operating system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain access to read, modify, or delete data...
Rust Rack Session DoS
The vulnerability of the Rust library for session management in Rack applications is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to cause service failures...
Measuring Healthcare Data Leaks and Security Flaws at Internet Scale
Systems that process medical data should be meticulously secured. Yet, network services in healthcare environments often fail to implement basic security measures. For example, previous studies showed that network segmentation flaws led to DICOM systems leaking millions of patient records. In...
OpenSearch DLS Unauthorized Access
The vulnerability of the DLS component in the OpenSearch software package is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
OpenSearch Security Plugin Privilege Escalation
The vulnerability of the OpenSearch software security plugin is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
PT-2026-97629
Уязвимость системы централизованного управления ИТ-инфраструктурой «РЕД АДМ» связана с недостатками процедуры аутентификации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...
Grav CMS Privilege Escalation
The vulnerability of the Grav API plugin of the Grav CMS content management system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...