3107 matches found
PT-2024-4598 · Powersys · Powersys
Name of the Vulnerable Software and Affected Versions: PowerSys versions prior to V3.11 Description: A vulnerability has been identified in the affected application, where it insufficiently protects responses to authentication requests. This could allow a local attacker to bypass authentication,...
CVE-2024-4354 TablePress – Tables in WordPress made easy <= 2.3 - Authenticated (Author+) Server-Side Request Forgery via DNS Rebind
The TablePress – Tables in WordPress made easy plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.3 via the getfilestoimport function. This makes it possible for authenticated attackers, with author-level access and above, to make web request...
The vulnerability of the SAP Bank Account Management (BAM) tool for managing bank accounts lies in the absence of an authentication procedure that allows a perpetrator to elevate their privileges.
The vulnerability of the SAP Bank Account Management BAM tool for managing bank accounts is related to the absence of authentication procedures. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
TOTOLINK CP900L loginAuth function buffer overflow vulnerability
The TOTOLINK CP900L is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK CP900L v4.1.5cu.798B20221228 version, which stems from the password parameter of the loginAuth function failing to correctly validate the length and size of the...
Mattermost Server Access Control Error Vulnerability (CNVD-2024-26103)
Mattermost Server is the United States Mattermost company's set of open source messaging platform. Mattermost Server suffers from an Access Control Error vulnerability that can be exploited by an attacker to switch their authentication mail from SAML to email and potentially edit personal details...
TOTOLINK CP900L 安全漏洞
The TOTOLINK CP900L is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK CP900L v4.1.5cu.798B20221228 version, which stems from the password parameter of the loginAuth function failing to correctly validate the length and size of the...
CVE-2024-5270
Mattermost vulnerable in multiple tracked versions (8.1.x <= 8.1.12; 9.5.x <= 9.5.3; 9.6.x <= 9.6.1; 9.7.x email switch. Impact: improper access control for authentication method and related data. Mitigation: upgrade to versions later than the listed fixed versions (as documented in PT-2...
CVE-2023-35192
Uncontrolled search path in some IntelR GPA Framework software before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access...
Brother Printers Improper Authentication Vulnerability (Mar 2024)
Multiple Brother printers are prone to an improper authentication vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
CVE-2024-4129 Authentication bypass in Snow License Manager
Improper Authentication vulnerability in Snow Software AB Snow License Manager on Windows allows a networked attacker to perform an Authentication Bypass if Active Directory Authentication is enabled.This issue affects Snow License Manager: from 9.33.2 through 9.34.0...
The vulnerability of the AVerCaster video encoding device, related to authentication deficiencies, allows hackers to obtain the credentials of privileged users and enhance their privileges within the system.
The vulnerability of the AVerCaster video encoding device is related to authentication deficiencies. Exploiting this vulnerability could allow a malicious actor to obtain the credentials of privileged users and enhance their privileges within the system...
CVE-2024-4601 Improper Authentication vulnerability in Socomec Net Vision
An incorrect authentication vulnerability has been found in Socomec Net Vision affecting version 7.20. This vulnerability allows an attacker to perform a brute force attack on the application and recover a valid session, because the application uses a five-digit integer value...
Socomec Net Vision 授权问题漏洞
Socomec Net Vision is a network management solution developed by SOCOMEC for its Uninterruptible Power Supply UPS products to remotely monitor, condition manage and automate the operation of UPS. An authentication vulnerability exists in Socomec Net Vision, which stems from the application's use ...
WordPress Post Grid Master plugin <= 3.4.11 - Auth. Cross Site Scripting (XSS) vulnerability
Auth. Cross Site Scripting XSS vulnerability discovered by Yudistira Arya Patchstack Alliance in WordPress Plugin Post Grid Master versions = 3.4.11...
CVE-2023-51590 Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability
Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower Pro. Authentication is not required to exploit this vulnerability. T...
CVE-2023-37310
The CVE-2023-37310 issue affects D-Link DAP-2622 devices, stemming from a stack-based buffer overflow in the DDP Set Device Info Auth Username pathway. The root cause is unchecked length of user-supplied data copied into a fixed-length stack buffer, enabling remote code execution with root privil...
CVE-2023-35729 D-Link DAP-2622 DDP Reset Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability
D-Link DAP-2622 DDP Reset Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerabilit...
CVE-2023-34285 NETGEAR RAX30 cmsCli_authenticate Stack-based Buffer Overflow Remote Code Execution Vulnerability
NETGEAR RAX30 cmsCliauthenticate Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30 routers. Authentication is not required to exploit this vulnerability. The...
Triangle MicroWorks SCADA Data Gateway 安全漏洞
Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product from Triangle MicroWorks, Inc. Triangle MicroWorks SCADA Data Gateway suffers from an authentication missing vulnerability that can be exploited by an attacker to execute arbitrary code...
PT-2024-20079 · Sdm600 · Sdm600
Name of the Vulnerable Software and Affected Versions: SDM600 affected versions not specified Description: A vulnerability exists in the web-authentication component of the SDM600. If exploited, an attacker could escalate privileges on affected installations. Recommendations: At the moment, there...