The vulnerability of the Windows Hyper-V hardware virtualization system allows attackers to escalate their privileges.

The vulnerability of the Windows Hyper-V hardware virtualization system is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the lack of authentication procedures, which allow attackers to increase their privileges.

The vulnerability of the software platforms for developing and managing online stores Magento Open Source and Adobe Commerce is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability of the Jenkins Openstack Heat Plugin, related to deficiencies in the authentication process, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Jenkins Openstack Heat Plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Jenkins Repository Connector Plugin, related to deficiencies in the authentication process, allows attackers to disclose information about user identities.

The vulnerability of the Jenkins Repository Connector Plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to obtain information about user identities remotely...

CVE-2022-35490

Zammad 5.2.0 is vulnerable to privilege escalation. Zammad has a prevention against brute-force attacks trying to guess login credentials. After a configurable amount of attempts, users are invalidated and logins prevented. An attacker might work around this prevention, enabling them to send more...

SAMSUNG Mobile devices 授权问题漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices AppLock Module SMR Aug-2022 Release 1 prior to Release 1, which stems from the presence of incorrect...

The vulnerability of the CUPS printing server stems from deficiencies in the authentication process, which allows attackers to escalate their privileges.

The vulnerability of the CUPS printing server is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the interface of microprogrammed software for programmable logic controllers Lenze Cabinet c520, Lenze Cabinet c550, and Lenze Cabinet c750 allows a intruder to gain unauthorized access to protected information.

The vulnerability of the microprogramming software interfaces of Lenze Cabinet c520, Lenze Cabinet c550, and Lenze Cabinet c750 is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

ZTE ZXMP M721 日志信息泄露漏洞

The ZTE ZXMP M721 is a metro edge OTN Optical Transport Network device from ZTE, China. An information leakage vulnerability exists in the ZTE ZXMP M721 commond21bootv100004ls1045 version. The vulnerability stems from the fact that although the serial authentication of the ZBOOT interface is...

The vulnerability of the Slurm resource manager management module, related to deficiencies in authentication procedures, allows attackers to circumvent existing security restrictions.

The vulnerability of the Slurm resource manager is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions from a remote location...

The vulnerability of the REST API interface implementation in the software environment for the Zoho ManageEngine ServiceDesk Plus service allows a hacker to circumvent existing security restrictions.

The vulnerability of the REST API interface implementation for the Zoho ManageEngine ServiceDesk Plus technical support service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions from a...

The vulnerability of Siemens SICAM P850 and Siemens SICAM P855 multifunctional monitoring devices, related to deficiencies in authentication procedures, allows attackers to delete security log files.

The vulnerability of Siemens SICAM P850 and Siemens SICAM P855 multi-functional measuring devices is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to remotely delete security log files...

The vulnerability of server-based corporate software for monitoring and managing project knowledge bases in Adobe RoboHelp Server stems from deficiencies in the authentication process, allowing unauthorized users to escalate their privileges.

The vulnerability of server-based corporate software for project monitoring and management in Adobe RoboHelp Server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to increase their privileges remotely...

PT-2022-3168 · Emerson · Emerson Controlwave 'Next Generation' Rtus

Name of the Vulnerable Software and Affected Versions: Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 Description: The issue is related to insufficient authentication of data, which can allow a remote attacker to access confidential data, compromise its integrity, and cause a denia...

The vulnerability of microprogramming software in embedded access controllers of Dell’s iDRAC9 system, related to authentication procedures that allow unauthorized access to the VNC console.

The vulnerability of the microprogramming software in embedded remote access controllers of Dell iDRAC9 is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain access to the console via VNC...

PT-2022-3409 · Owl · Owl Labs Meeting Owl

Name of the Vulnerable Software and Affected Versions: Owl Labs Meeting Owl version 5.2.0.15 Description: The issue is related to insufficient authentication procedure in the camera's firmware, allowing a remote attacker to bypass existing security restrictions. Specifically, it allows attackers ...

The vulnerability lies in the implementation of TLS and SSH protocols in the command-line utility cURL, which allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the TLS and SSH protocol implementations in the command-line utility cURL is related to deficiencies in authentication procedures when using previously established connections in a connection pool. Exploiting this vulnerability could allow an attacker operating remotely to ga...

The vulnerability of the software solution that supports the closing, consolidation, and reporting processes of IBM Cognos Controller is related to deficiencies in the authentication process. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the software solution that supports the closing, consolidation, and reporting processes of IBM Cognos Controller is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity,...

The vulnerability of the cgi-bin/webupg component in D-Link DIR-825AC G1 router microprogramming software allows attackers to circumvent security restrictions.

The vulnerability of the cgi-bin/webupg component of D-Link DIR-825AC G1 microprogramming router software is related to authentication deficiencies when processing the autoupgrade.asp parameter. Exploiting this vulnerability allows a hacker to bypass security restrictions using a specially create...

PT-2022-3405 · Schedmd +3 · Slurm +3

Name of the Vulnerable Software and Affected Versions: SchedMD Slurm versions 20.11.x through 21.08.x Description: The issue is related to incorrect access control in the Slurm resource management system, which is associated with deficiencies in the authentication procedure. This can allow a remo...