CVE-2023-40197

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Devaldi Ltd flowpaper plugin = 1.9.9 versions...

CVE-2023-32962

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in HasTheme WishSuite – Wishlist for WooCommerce plugin = 1.3.4 versions...

PHPValley Micro Jobs 2.0.1 Insecure Direct Object Reference

==================================================================================================================================== | Title : PHPValley Micro Jobs v2.0.1 Missing Authentication Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla...

CVE-2023-38030

CVE-2023-38030 affects Saho ADM100 and ADM-100FP devices. The vulnerability is missing authentication for critical functions, enabling an unauthenticated remote attacker to execute system commands via partial URLs and read sensitive device information. Affected versions are not specified in the p...

Authentication flaw

Saho’s attendance devices ADM100 and ADM-100FP have insufficient authentication. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication to read system information and operate user's data, but can’t control system or disrupt service...

CVE-2023-20168

A vulnerability in TACACS+ and RADIUS remote authentication for Cisco NX-OS Software could allow an unauthenticated, local attacker to cause an affected device to unexpectedly reload. This vulnerability is due to incorrect input validation when processing an authentication attempt if the directed...

CVE-2023-40282

Improper authentication vulnerability in Rakuten WiFi Pocket all versions allows a network-adjacent attacker to log in to the product's Management Screen. As a result, sensitive information may be obtained and/or the settings may be changed...

CVE-2023-38585

Improper authentication vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series a...

PT-2023-27358 · Rakuten · Rakuten Wifi Pocket

Name of the Vulnerable Software and Affected Versions: Rakuten WiFi Pocket affected versions not specified Description: The issue allows a network-adjacent attacker to log in to the product's Management Screen due to an improper authentication vulnerability. This could result in sensitive...

CVE-2023-36847

A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to installAppPackage.php that doesn't require authentication an...

CVE-2023-33237

TN-5900 Series firmware version v3.3 and prior is vulnerable to improper-authentication vulnerability. This vulnerability arises from inadequate authentication measures implemented in the web API handler, allowing low-privileged APIs to execute restricted actions that only high-privileged APIs ar...

PT-2023-27303 · Dispatch · Dispatch Plugin - Basic Authentication Provider +1

Name of the Vulnerable Software and Affected Versions: Dispatch versions prior to 20230817 Description: Dispatch is an open source security incident management tool. The server response includes the JWT Secret Key used for signing JWT tokens in error message when the Dispatch Plugin - Basic...

MIT Kerberos 资源管理错误漏洞

MIT Kerberos is a Massachusetts Institute of Technology MIT software for authentication in network clusters.Kerberos also serves as a network authentication protocol designed to provide strong authentication services to client/server applications through a key system. A security vulnerability...

CVE-2023-40253

CVE-2023-40253 describes an Improper Authentication vulnerability in Genians Genian NAC products and Genian ZTNA. Affected: Genian NAC v4.0.0–v4.0.155; Genian NAC v5.0.0–v5.0.42; Genian NAC Suite v5.0.0–v5.0.54; Genian ZTNA v6.0.0–v6.0.15. Root cause: authentication abuse/misuse due to improper a...

Genians Genian NAC Authorization Issues Vulnerability

Genians Genian NAC is a network security and access control software from Genians Korea. It helps organizations identify IP-enabled devices, manage vulnerabilities, and check device configurations to protect network access environments. A security vulnerability exists in Genians Genian NAC and...

Triangle MicroWorks SCADA Data Gateway Authentication Missing Vulnerability

Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product from Triangle MicroWorks, Inc. Triangle MicroWorks SCADA Data Gateway suffers from an authentication missing vulnerability that can be exploited by an attacker to execute arbitrary code...

The vulnerability of the Runtime Workbench component of the SAP NetWeaver Process Integration software, which allows attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of the Runtime Workbench RWB component of the SAP NetWeaver Process Integration software lies in the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to compromise the confidentiality and accessibility of protected information...

PHPJabbers Time Slots Booking Calendar Authorization Issues Vulnerability

PHPJabbers Time Slots Booking Calendar is a booking system by PHPJabbers. A security vulnerability exists in PHPJabbers Time Slots Booking Calendar version v3.3, which stems from a lack of validation when changing an email address or password on the profile page, allowing a remote attacker to tak...

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System (GMS) global network firewall management system lies in the use of a password hash instead of a password for authentication. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System’s global network gateways is related to the use of a password hash instead of a password for authentication. Exploiting this vulnerability allows a malicious actor to compromise the...

The vulnerability of D-Link DSL-G256DG router’s microprogramming software, related to deficiencies in authentication procedures, allows attackers to execute arbitrary commands.

The vulnerability of D-Link DSL-G256DG router’s microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...