CVE-2020-25235

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. The password used for authentication for the LOGO! Website and the LOGO! Access Tool is sent in a recoverable format. An attacker with access to the network traffic could derive valid logins...

Linux kernel authorization issue vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from an authorization problem vulnerability. The vulnerability arises from a lack of authentication measures or insufficient authentication strength in a...

PT-2020-4797 · Microsoft · Office Word

Name of the Vulnerable Software and Affected Versions: Microsoft Word affected versions not specified Description: The issue is related to a security feature bypass in Microsoft Word, associated with authentication weaknesses. Exploitation of this issue may allow an attacker to disclose protected...

The vulnerability of the AppArmor component of the runc container runtime tool, related to authentication mechanisms that are flawed, allows a malicious actor to mount a malicious Docker image in the /proc directory.

The vulnerability of the AppArmor component in the runc container isolation tool is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a remote attacker to mount a malicious Docker image as a file in the /proc directory...

The vulnerability of the server management module of ZTE’s R5300G4, R8500G4, and R5500G4 servers allows attackers to execute arbitrary commands.

The vulnerability of the server management module of ZTE’s R5300G4, R8500G4, and R5500G4 servers is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Authentication flaw

cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification SEC-557...

Linux kernel elevation of privilege vulnerability (CNVD-2020-52618)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. An elevation of privilege vulnerability exists in the Linux kernel. The vulnerability stems from a lack of authentication measures or insufficient authentication...

Microsoft ChakraCore Remote Code Execution Vulnerability (CNVD-2020-72701)

Microsoft ChakraCore is an open source ChakraJavaScript scripting engine used by Microsoft in the Edge browser, or as a stand-alone JavaScript engine. A remote code execution vulnerability exists in Microsoft ChakraCore. The vulnerability stems from a lack of authentication measures or insufficie...

Microsoft SharePoint Authorization Issues Vulnerability

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An authorization issu...

Microsoft ChakraCore Remote Code Execution Vulnerability (CNVD-2020-72699)

Microsoft ChakraCore is an open source ChakraJavaScript scripting engine used by Microsoft in the Edge browser, or as a stand-alone JavaScript engine. A remote code execution vulnerability exists in Microsoft ChakraCore. The vulnerability stems from a lack of authentication measures or insufficie...

GHSA-9XGP-HFW7-73RQ Authentication Weakness in keystone

There is an authentication weakness vulnerability in keystone before version 0.3.16. Due to a bug in the the default sign in functionality, incomplete email addresses could be matched. A correct password is still required to complete sign in...

PT-2020-6900 · Apache +2 · Apache Shiro +2

Name of the Vulnerable Software and Affected Versions: Apache Shiro versions prior to 1.6.0 Description: The issue is related to weaknesses in the authentication procedure of the Apache Shiro framework. It may allow a remote attacker to bypass existing security restrictions by sending a specially...

ETCD Authorization Issues Vulnerability

etcd is a key-value storage system for distributed systems written in the Go language. An authorization issue vulnerability exists in etcd versions prior to 3.4.10 and prior to 3.3.23. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in a...

The vulnerability in the web interface of the Cisco Data Center Network Manager system allows a hacker to escalate their privileges.

The vulnerability of the Web interface of the Cisco Data Center Network Manager DCNM system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor to increase their privileges through a specially crafted request...

The vulnerability of the PAN-OS operating system, related to deficiencies in authentication procedures, allows attackers to gain superuser privileges.

The vulnerability of the PAN-OS operating system is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to gain superuser privileges...

The vulnerability of the corporate platform Red Hat OpenShift Container Platform allows a hacker to redirect network traffic.

The vulnerability of the Red Hat OpenShift Container Platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to redirect network traffic...

The vulnerability in the web-based administration interface of the PAN-OS operating system allows a hacker to gain access to the device.

The vulnerability of the PAN-OS operating system’s administrative web interface is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the device...

Unspecified Vulnerability in Blaauw Remote Kiln Control

The Blaauw Remote Kiln Control is an automated ceramic kiln controller from Blaauw in the Netherlands. An unspecified vulnerability exists in Blaauw Remote Kiln Control, which stems from the ability for a user to set a short or guessable password e.g., 1 or 1234. No details of the vulnerability a...

CloudBees Jenkins Amazon EC2 Plugin Authorization Issues Vulnerability

CloudBees Jenkins Hudson Labs is a set of Java-based development of continuous integration tools from the U.S. CloudBees. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Amazon EC2 Plugin is used in which an EC2 connection agen...

PT-2020-5588 · Fortinet · Fortivoiceentreprise +1

Name of the Vulnerable Software and Affected Versions: FortiMail versions 5.4.10 and earlier, 6.0.7 and earlier, 6.2.2 and earlier FortiVoiceEntreprise versions 6.0.0 and 6.0.1 Description: The issue is related to weaknesses in the authentication procedure of the email protection system. It may...