The vulnerability of the HPE OneView IT infrastructure management system, related to deficiencies in authentication procedures, allows attackers to circumvent existing security restrictions.

The vulnerability of the HPE OneView IT infrastructure management system is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers to circumvent existing security restrictions...

PT-2022-4923 · Dell Emc · Dell Emc Cloudlink

Name of the Vulnerable Software and Affected Versions: Dell EMC CloudLink versions prior to 7.1.2 Description: The issue is related to weaknesses in the authentication procedure, allowing a remote attacker with knowledge of active directory usernames to potentially gain unauthorized access to the...

The vulnerability of the EpicMo protocol lies in its ability to exploit measurement-and-control controllers from the Experion LX, allowing attackers to cause service failures.

The vulnerability of the EpicMo protocol, which is implemented in measurement and control controllers of the Experion LX, is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the VMware Verify component in the Workspace ONE Access application management platform allows a perpetrator to increase their privileges.

The vulnerability of the VMware Verify component in the Workspace ONE Access application management platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from deficiencies in the authentication process, allowing attackers to gain access to confidential data.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to improper access control when using GraphQL. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...

The vulnerability of Xen hypervisors is related to deficiencies in authentication procedures. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Xen hypervisors is related to deficiencies in the authentication process. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software, related to authentication mechanisms that lack sufficient protection, allows attackers to circumvent security restrictions.

The vulnerability of NETGEAR XR1000 Wi-Fi routers’ microprogramming software is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions from a remote location...

The vulnerability of the Midnight Commander file manager, related to deficiencies in authentication procedures, allows attackers to compromise data integrity.

The vulnerability of the Midnight Commander file manager is related to the lack of checks and display of server timestamps. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

The vulnerability of the EtherChannel port in the Cisco NX-OS operating system of Cisco Nexus 9500 Series Switches allows a attacker to gain access to network resources.

The vulnerability of the EtherChannel port in the Cisco NX-OS operating system of Cisco Nexus 9500 Series Switches is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to gain access to network resources remotely...

PT-2021-6468 · Xen +1 · Xen +1

Name of the Vulnerable Software and Affected Versions: Xen affected versions not specified Description: The issue is related to weaknesses in the authentication procedure of the Xen hypervisor. Exploitation of this issue allows an attacker to access confidential data, compromise its integrity, an...

The vulnerability of Google Chrome’s Autofill component, related to authentication procedures that lack sufficient safeguards, allows attackers to access sensitive information.

The vulnerability of Google Chrome’s Autofill component is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain access to confidential information...

The vulnerability in the implementation of the Extensible Authentication Protocol over LAN (EAPOL) on the NetBSD operating system allows a perpetrator to induce a service failure.

The vulnerability of the Extensible Authentication Protocol over LAN EAPOL implementation in the NetBSD operating system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Samba networking communication package is related to deficiencies in authentication procedures, which allow attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the Samba network communication package is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to gain access to confidential data and compromise its integrity...

The vulnerability of Hikvision’s IP cameras’ microprogramming software, related to authentication procedures that lack sufficient safeguards, allows intruders to exploit their privileges.

The vulnerability of Hikvision’s IP cameras related to microprogramming software lies in the deficiencies in authentication procedures. Exploiting this vulnerability can allow unauthorized actors to enhance their privileges remotely...

The vulnerability of the FortiMail email security system, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of the FortiMail email security system is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to enhance their privileges by requesting a password change through the user interface...

The vulnerability of the FortiADC application delivery controller, related to deficiencies in the authentication mechanism, allows a perpetrator to trigger a service failure.

The vulnerability of the FortiADC application delivery controller is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

The vulnerability of the PostgreSQL database management system, related to deficiencies in authentication mechanisms, allows attackers to gain unauthorized access to protected information.

The vulnerability of the PostgreSQL database management system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the File System API interface in the Google Chrome web browser allows a hacker to circumvent existing security restrictions.

The vulnerability of the File System API interface in the Google Chrome web browser is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

The vulnerability of the Bluetooth BR/EDR encryption key negotiation protocol lies in its authentication procedures’ deficiencies, which allow attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Bluetooth BR/EDR encryption key negotiation protocol is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of Trend Micro InterScan Web Security Virtual Appliance, related to deficiencies in authentication procedures, allows attackers to bypass the authentication process.

The vulnerability of Trend Micro InterScan Web Security Virtual Appliance is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process remotely...