CVE-2017-7921

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 ...

Western Digital My Cloud Authentication Vulnerability

Western Digital MyCloud is a personal cloud storage device. An authentication vulnerability exists in Western Digital MyCloud. An unauthenticated attacker could be allowed to exploit this vulnerability to bypass administrator authentication and gain control of device privileges...

Authentication flaw

An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, user to execute certain specific unprivileged system files capable of causing widespread denials of system services...

CVE-2017-2329

The Juniper Networks NorthStar Controller Application is affected prior to 2.1.0 Service Pack 1. An insufficient authentication flaw could allow an unprivileged, authenticated user to execute certain unprivileged system files, enabling widespread denial of service. Root cause: insufficient authen...

CVE-2017-8055

WatchGuard Fireware allows user enumeration, e.g., in the Firebox XML-RPC login handler. A login request that contains a blank password sent to the XML-RPC agent in Fireware v11.12.1 and earlier returns different responses for valid and invalid usernames. An attacker could exploit this...

CVE-2017-6087

EyesOfNetwork "EON" 5.0 and earlier allows remote authenticated users to execute arbitrary code via shell metacharacters in the selectedevents parameter in the 1 acknowledge, 2 delete, or 3 ownDisown function in module/monitoringged/gedfunctions.php or the 4 module parameter to module/index.php...

CVE-2016-4926

Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative tasks without authentication...

CVE-2016-4926

Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative tasks without authentication...

SAP Cloud Commerce Platform HANA System Authentication Vulnerability

The SAP Cloud Commerce Platform HANA system is a real-time data computing platform based on in-memory computing technology. There are multiple vulnerabilities in the SAP Cloud Commerce Platform HANA system, one of the critical vulnerabilities is an authentication vulnerability that can be exploit...

Code injection

The mauthenticate function in ircd/mauthenticate.c in nefarious2 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE parameter...

EUVD-2016-9491

The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service crash by aborting authentication without setting a username...

EMC Network Configuration Manager Authentication Vulnerability

EMC Network Configuration Manager NCM is an intelligent network configuration manager from EMC Corporation that automates model-based network compliance, change and configuration management to quickly perform network change and configuration management tasks. An authentication vulnerability exist...

Authentication flaw

Authentication bypass vulnerability in Enterprise Security Manager ESM and License Manager LM in Intel Security McAfee Security Information and Event Management SIEM 9.6.0 MR3 allows an administrator to make changes to other SIEM users' information including user passwords without supplying the...

CVE-2016-4028

An issue was discovered in Open-Xchange OX Guard before 2.4.0-rev8. OX Guard uses an authentication token to identify and transfer guest users' credentials. The OX Guard API acts as a padding oracle by responding with different error codes depending on whether the provided token matches the...

Important: Red Hat Security Advisory: Red Hat Single Sign-On security update

A security update is now available for Red Hat Single Sign-On 7.0 from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Dovecot auth component remote denial of service vulnerability

Dovecot is an open source based on Linux/UNIX-like systems IMAP and POP3 mail server . A remote denial of service vulnerability exists in the auth component of Dovecot versions 2.2.25.1 through 2.2.26.1. An attacker can exploit this vulnerability to cause a denial of service...

Moxa NPort Authentication Vulnerability

MOXA Nport is a serial communication server. An authentication vulnerability exists in the Moxa NPort. An attacker can exploit the vulnerability to brute-force bypass authentication...

ABB RobotWare Authentication Vulnerability

ABB is a global leader in power and automation technology, ranked among the top 500 companies in the world. An authentication vulnerability exists in ABB RobotWare, which could be exploited by an attacker to bypass certain security restrictions or execute arbitrary code...

Authentication Remote Code Execution Vulnerability in Memcached SASL

Memcached is a high-performance distributed in-memory object caching system for dynamic Web applications to reduce database load. An authentication remote code execution vulnerability exists in Memcached SASL. processbinsaslauth function handling multiple commands of the Memcached binary protocol...

iTrack Easy Plaintext Password Acquisition Vulnerability

The iTrack Easy is a versatile Bluetooth device. The iTrack Easy uses base64 encoding to store account passwords. A remote attacker could use this vulnerability to submit a special request to obtain passwords in plaintext...