1903 matches found
Moxa NPort Improper Authentication (CVE-2016-9361)
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPor...
PT-2023-12748 · Tetra · Tetra
Name of the Vulnerable Software and Affected Versions: TETRA affected versions not specified Description: A flaw in the TETRA authentication procedure allows a Man-In-The-Middle MITM adversary that can predict the MS challenge RAND2 to set session key DCK to zero. This issue does not specify the...
SUSE CVE-2023-2975
Issue summary: The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries which are unauthenticated as a consequence. Impact summary: Applications that use the AES-SIV algorithm and want to authenticate empty data entries as associated data can be misl...
Unable to login to Citrix Cloud - Error: "incorrect username, password or token"
Unable to login to Citrix Cloud to access virtualized app. The error message "incorrect username, password or token" is displayed. The process of setting up MFA works perfectly, but once Authenticator App is paired and actual login attempted, it always fails...
PT-2023-26024 · Elecom +1 · Elecom Wrc-1167Febk-A +8
Name of the Vulnerable Software and Affected Versions: ELECOM WRC-1167GHBK3-A versions 1.24 and earlier ELECOM WRC-1167FEBK-A versions 1.18 and earlier ELECOM WRC-F1167ACF2 all versions ELECOM WRC-600GHBK-A all versions ELECOM WRC-733FEBK2-A all versions ELECOM WRC-1467GHBK-A all versions ELECOM...
PT-2023-24259 · Unknown · Powershield Snmp Web Pro
Name of the Vulnerable Software and Affected Versions: PowerShield SNMP Web Pro version 1.1 Description: The authentication mechanism contains an issue that allows unauthenticated users to directly access Common Gateway Interface CGI scripts without proper identification or authorization. This...
PT-2023-4071 · Sap · Sap Netweaver Process Integration
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Process Integration version SAP XIAF 7.50 Description: The issue is related to the Message Display Tool MDT component of SAP NetWeaver Process Integration, which lacks proper authentication checks for certain functionalities. Th...
PT-2023-22837 · Samsung · Galaxy Themes Service
Name of the Vulnerable Software and Affected Versions: Galaxy Themes Service versions prior to SMR Jul-2023 Release 1 Description: A missing authentication issue allows local attackers to delete arbitrary non-preloaded applications. Recommendations: For versions prior to SMR Jul-2023 Release 1,...
CVE-2023-36821
Uptime Kuma, a self-hosted monitoring tool, allows an authenticated attacker to install a maliciously crafted plugin in versions prior to 1.22.1, which may lead to remote code execution. Uptime Kuma allows authenticated users to install plugins from an official list of plugins. This feature is...
PT-2023-23823 · WordPress · Web3
Name of the Vulnerable Software and Affected Versions: Web3 – Crypto wallet Login & NFT token gating plugin for WordPress versions up to, and including, 2.6.0 Description: The issue is related to incorrect authentication checking in the hidden form data function, allowing authenticated attackers ...
"Cannot Complete Your Request" via Oauth after Upgrading NetScaler from 12.1 to 13.0
After ADC is upgraded from 12.1 to 13.0, the user keeps getting "Cannot Complete Your Request" when attempting to access resources through ADC with Oauth authentication. As a comparison, there is no issue accessing StoreFront directly in the intranet without Oauth...
CVE-2023-32360
An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An unauthenticated user may be able to access recently printed documents...
CVE-2023-27964
An authentication issue was addressed with improved state management. This issue is fixed in AirPods Firmware Update 5E133. When your headphones are seeking a connection request to one of your previously paired devices, an attacker in Bluetooth range might be able to spoof the intended source...
DEBIAN-CVE-2023-32360
An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An unauthenticated user may be able to access recently printed documents...
CVE-2023-27964
An authentication issue was addressed with improved state management. This issue is fixed in AirPods Firmware Update 5E133. When your headphones are seeking a connection request to one of your previously paired devices, an attacker in Bluetooth range might be able to spoof the intended source...
UBUNTU-CVE-2023-32360
An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An unauthenticated user may be able to access recently printed documents...
CVE-2023-32360
An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An unauthenticated user may be able to access recently printed documents...
CVE-2023-32360
An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An unauthenticated user may be able to access recently printed documents...
CVE-2023-32360
CVE-2023-32360 affects the CUPS printing system. The issue is an authentication/state-management weakness that could allow an unauthenticated local user to access recently printed documents. Patches/mitigations are referenced across multiple advisories (e.g., macOS updates fixing the issue; vario...