CVE-2019-10689

VVX products using UCS software version 5.9.2 and earlier with Better Together over Ethernet Connector BToE application version 3.9.1 and earlier provides insufficient authentication between the BToE application and the BToE component, resulting in leakage of sensitive information...

ASUS Vivobaby for Android License Issue Vulnerability

ASUS Vivobaby for Android is an Android-based baby physiological monitor control and management application from Asus Taiwan, China. An authorization issue vulnerability exists in versions of ASUS Vivobaby prior to 1.1.09 for Android-based platforms. The vulnerability stems from a lack of...

SHEKAR Technology Endoscope License Issue Vulnerability

SHEKAR Technology Endoscope is a portable endoscopic device from SHEKAR Technology, China. An authorization issue vulnerability exists in SHEKAR Technology Endoscope. The vulnerability arises from a lack of authentication measures or insufficient authentication strength in a networked system or...

GitLab Authorization Issues Vulnerability (CNVD-2019-43039)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An authorization issue vulnerability exists in GitLab. Th...

PT-2019-2081 · Palo Alto Networks · Globalprotect Agent

Name of the Vulnerable Software and Affected Versions: GlobalProtect Agent version 4.1.0 for Windows GlobalProtect Agent versions 4.1.10 and earlier for macOS Description: The issue is related to weaknesses in the authentication procedure of the GlobalProtect Agent, which may allow a local...

PT-2019-6215

Name of the Vulnerable Software and Affected Versions ILC 1x0 versions affected versions not specified ILC 1x1 versions affected versions not specified ILC 1x1 GSM/GPRS versions affected versions not specified ILC 3xx versions affected versions not specified AXC 1050 versions affected versions no...

PT-2019-6346 · D Link · D-Link Dir-878

Name of the Vulnerable Software and Affected Versions: D-Link DIR-878 version 1.12B01 Description: An issue was discovered that allows an attacker to log in with a blank password at the /HNAP1 URI. The vulnerability is related to weaknesses in the HNAP1 protocol implementation, specifically in th...

Bomb Threat, Sextortion Spammers Abused Weakness at GoDaddy.com

Two of the most disruptive and widely-received spam email campaigns over the past few months -- including an ongoing sextortion email scam and a bomb threat hoax that shut down dozens of schools, businesses and government buildings late last year -- were made possible thanks to an authentication...

Streamworks Job Scheduler Release 7 Authentication Weakness

Affected Products Streamworks Job Scheduler Release 7 older/newer releases have not been tested References Secuvera-SA-2016-01 https://www.secuvera.de/advisories/secuvera-SA-2016-01.txt used for updates No CVE number could be assigned vendor not listed under...

The vulnerability of the web application for managing phpMyAdmin databases lies in the authentication procedures’ deficiencies, which allow attackers to view and execute files on the server.

The vulnerability in the web application for managing phpMyAdmin databases is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to remotely access and manipulate files on the server...

The vulnerability of microprogrammed software in Schneider Electric Modicon M221 programmable logic controllers arises from deficiencies in the authentication process, which allows attackers to bypass the authentication procedures.

The vulnerability of the microprogrammed software in Schneider Electric Modicon M221 programmable logic controllers is due to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to bypass the authentication process remotely...

The vulnerability of microprogrammed software in Schneider Electric Modicon M221 programmable logic controllers is caused by deficiencies in the authentication process, allowing attackers to re-enter passwords.

The vulnerability of the microprogrammed software in Schneider Electric Modicon M221 programmable logic controllers is due to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to remotely reassign passwords...

Google to Fix Location Data Leak in Google Home, Chromecast

Google in the coming weeks is expected to fix a location privacy leak in two of its most popular consumer products. New research shows that Web sites can run a simple script in the background that collects precise location data on people who have a Google Home or Chromecast device installed...

CVE-2018-10355

An authentication weakness vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to recover user passwords on vulnerable installations due to a flaw in the DBCrypto class. An attacker must first obtain access to the user database on the target system in order to exploi...

CVE-2018-10355

An authentication weakness vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to recover user passwords on vulnerable installations due to a flaw in the DBCrypto class. An attacker must first obtain access to the user database on the target system in order to exploi...

CVE-2018-10355

CVE-2018-10355 affects Trend Micro Email Encryption Gateway (TMEEG) version 5.5. The vulnerability resides in the DBCrypto class, which stores user passwords using a hard-coded key in a recoverable format. An attacker who gains access to the target’s user database can exploit the flaw to recover ...

Trend Micro Encryption for Email Gateway DBCrypto Authentication Weakness Vulnerability

This vulnerability allows attackers to recover user passwords on vulnerable installations of Trend Micro Encryption for Email Gateway. An attacker must first obtain access to the user database on the target system in order to exploit this vulnerability. The specific flaw exists within the DBCrypt...

The vulnerability of the LDAP server in the Samba networking software package allows a hacker to alter the passwords of other users.

The vulnerability of the LDAP server of the Samba networking software, which is configured as an Active Directory domain controller, is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to remotely change the passwords of other users...

The vulnerability of Phoenix Contact FL SWITCH router microprogramming software, related to deficiencies in authentication procedures, allows a intruder to access diagnostic information.

The vulnerability of Phoenix Contact FL SWITCH router microprogramming software is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to remotely access diagnostic information by using the device’s monitoring mode...

The vulnerability of Phoenix Contact FL SWITCH router microprogramming software, related to deficiencies in authentication procedures, allows a malicious actor to gain access to the device with administrator privileges.

The vulnerability of Phoenix Contact FL SWITCH router microprogramming software is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain administrator privileges through specially crafted HTTP requests...