3098 matches found
Triangle MicroWorks SCADA Data Gateway Authentication Missing Vulnerability
Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product from Triangle MicroWorks, Inc. A lack of authentication vulnerability exists in Triangle MicroWorks SCADA Data Gateway, which can be exploited by remote attackers to obtain sensitive information...
Danfoss AK-SM800A Improper Authentication (CVE-2023-25913)
Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information. This plugin only works with Tenable.ot. Please visit...
SAMSUNG Mobile devices security vulnerability
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Jul-2024 Release 1 prior to version 1, which stems from an improper authentication issue...
CVE-2024-39375 Use of Client-Side Authentication in TELSAT marKoni FM Transmitter
TELSAT marKoni FM Transmitters are vulnerable to an attacker bypassing authentication and gaining administrator privileges...
Progress Software MOVEit Transfer Security Vulnerability
Progress Software MOVEit Transfer is a suite of automated file transfer software from Progress Software, USA. The software supports file transfer and provides file transfer activity monitoring. A security vulnerability exists in Progress Software MOVEit Transfer that stems from an incorrect...
CVE-2024-37367
A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE v12. The vulnerability allows a user from a remote system with FTView to send a packet to the customer’s server to view an HMI project. This action is allowed without proper authentication verification...
Rockwell Automation FactoryTalk View SE 安全漏洞
Rockwell Automation FactoryTalk View SE is an industrial automation system view interface from Rockwell Automation. An authentication error vulnerability exists in Rockwell Automation FactoryTalk View SE, which can be exploited by an attacker to send packets to a customer's server from a remote...
The vulnerability of the centralized authentication and access management solution FortiAuthenticator, related to the use of open redirection, allows a hacker to redirect a user to any arbitrary website.
The vulnerability of the centralized authentication and access management solution FortiAuthenticator is related to the use of open redirection. Exploiting this vulnerability could allow a malicious actor to redirect a user to any desired website...
The vulnerability of the software for centralized management of FortiWeb Manager firewalls lies in the authentication procedures’ deficiencies, which allow an attacker to gain access to read, modify, or delete data.
The vulnerability of the FortiWeb Manager software for centralized control of network firewalls is related to deficiencies in its authentication procedures. Exploiting this vulnerability could allow an attacker to gain access to read, modify, or delete data by sending specially crafted HTTP...
Adobe Commerce 安全漏洞
Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce suffers from an authentication error vulnerability that can be exploited by an attacker to gain unauthorized access or elevated privilege...
PYSEC-2024-97
UNSUPPORTED WHEN ASSIGNED Improper Authentication vulnerability in Apache Submarine Commons Utils. This issue affects Apache Submarine Commons Utils: from 0.8.0. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or...
PT-2024-4598 · Powersys · Powersys
Name of the Vulnerable Software and Affected Versions: PowerSys versions prior to V3.11 Description: A vulnerability has been identified in the affected application, where it insufficiently protects responses to authentication requests. This could allow a local attacker to bypass authentication,...
CVE-2024-4354 TablePress – Tables in WordPress made easy <= 2.3 - Authenticated (Author+) Server-Side Request Forgery via DNS Rebind
The TablePress – Tables in WordPress made easy plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.3 via the getfilestoimport function. This makes it possible for authenticated attackers, with author-level access and above, to make web request...
The vulnerability of the SAP Bank Account Management (BAM) tool for managing bank accounts lies in the absence of an authentication procedure that allows a perpetrator to elevate their privileges.
The vulnerability of the SAP Bank Account Management BAM tool for managing bank accounts is related to the absence of authentication procedures. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
TOTOLINK CP900L loginAuth function buffer overflow vulnerability
The TOTOLINK CP900L is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK CP900L v4.1.5cu.798B20221228 version, which stems from the password parameter of the loginAuth function failing to correctly validate the length and size of the...
Mattermost Server Access Control Error Vulnerability (CNVD-2024-26103)
Mattermost Server is the United States Mattermost company's set of open source messaging platform. Mattermost Server suffers from an Access Control Error vulnerability that can be exploited by an attacker to switch their authentication mail from SAML to email and potentially edit personal details...
TOTOLINK CP900L 安全漏洞
The TOTOLINK CP900L is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK CP900L v4.1.5cu.798B20221228 version, which stems from the password parameter of the loginAuth function failing to correctly validate the length and size of the...
CVE-2024-5270
Mattermost vulnerable in multiple tracked versions (8.1.x <= 8.1.12; 9.5.x <= 9.5.3; 9.6.x <= 9.6.1; 9.7.x email switch. Impact: improper access control for authentication method and related data. Mitigation: upgrade to versions later than the listed fixed versions (as documented in PT-2...
CVE-2023-35192
Uncontrolled search path in some IntelR GPA Framework software before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access...
Brother Printers Improper Authentication Vulnerability (Mar 2024)
Multiple Brother printers are prone to an improper authentication vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...