cPanel Authorization Issues Vulnerability (CNVD-2020-03746)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 70.0.23. No detailed vulnerability details are provided at this ti...

cPanel Authorization Issues Vulnerability (CNVD-2020-03739)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An authorization issue vulnerability exists in versions of cPanel prior to 11.54.0.4. The vulnerability stems from a lack of...

cPanel Authorization Issues Vulnerability (CNVD-2020-04078)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 68.0.27. No detailed vulnerability details are provided at this ti...

D-Link DAP-1860 Authorization Issues Vulnerability

The D-Link DAP-1860 is a WiFi range extender from AUO D-Link of Taiwan, China. The D-Link DAP-1860 is vulnerable to an authorization issue. An attacker can exploit the vulnerability to gain unauthenticated access to administrator functions with the help of a timestamp value in the HNAPAUTH header...

Huawei E5572-855 Authorization Issues Vulnerability

The Huawei E5572-855 is a portable wireless router device from Huawei China. An authorization issue vulnerability exists in Huawei E5572-855 prior to version 8.0.1.3 H335SP1C233, which can be exploited by an attacker to cause a device reboot by performing a man-in-the-middle attack...

ProFTPD 'tls_verify_crl' function authorization issue vulnerability

ProFTPD is a secure cloud printing solution from the ProFTPD team. The solution supports printing from laptops, desktops and mobile devices connected to printers. An authorization issue vulnerability exists in the 'tlsverifycrl' function in ProFTPD versions prior to 1.3.6. The vulnerability stems...

CVE-2014-2904

CVE-2014-2904 affects wolfSSL prior to 3.2.0, where a server certificate is not properly authorized for server authentication. This has been documented across multiple sources (OSV, NVD, Debian/Ubuntu advisories, and CVE records). The description consistently notes the issue without detailing exp...

CVE-2014-2902

CVE-2014-2902 affects wolfSSL prior to 3.2.0 and indicates a flaw where the library does not properly authorize a CA certificate for signing other certificates. The connected OSV/NVD entries confirm the same description across multiple ecosystems. The core issue is a lack of proper CA certificate...

CVE-2014-2902

wolfssl before 3.2.0 does not properly authorize CA certificate for signing other certificates...

wolfSSL Authorization Issue Vulnerability

wolfSSL formerly known as CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. An authorization issue vulnerability exists in versions of wolfSSL prior to 3.2.0; no detailed vulnerability details are provided at thi...

Multiple NETGEAR Products Licensing Issues Vulnerabilities

The NETGEAR AC1450, among others, is a wireless router from NETGEAR. An authorization issue vulnerability exists in multiple NETGEAR products. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in the network system or product. No detailed...

ZyXEL NBG-418N v2 License Issue Vulnerability

The ZyXEL NBG-418N v2 is a wireless router from Taiwan, China-based ZyXEL. An authorization issue vulnerability exists in the wan.htm page in the Zyxel NBG-418N v2 using firmware version V1.00AARP.9C0. The vulnerability stems from a lack of authentication measures or insufficient authentication...

Multiple NETGEAR Product License Issue Vulnerabilities (CNVD-2020-23146)

The NETGEAR MBR1515 and others are a wireless router from NETGEAR. An authorization issue vulnerability exists in multiple NETGEAR products. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in the network system or product. No detailed...

D-Link DIR-615 Authorization Issues Vulnerability

The D-Link DIR-615 is a wireless router from AUO D-Link of Taiwan, China. An authorization issue vulnerability exists in the D-Link DIR-615 using firmware version 20.05 and firmware version 20.07. The vulnerability stems from a lack of authentication measures or insufficient authentication streng...

V-Zug Combi-Steam MSLQ Authorization Issues Vulnerability

The V-Zug Combi-Steam MSLQ is an all-in-one microwave, oven, and steam machine unit from Swiss Swiss V-Zug. An authorization issue vulnerability exists in the V-Zug Combi-Steam MSLQ using firmware versions prior to Ethernet R07 and firmware versions prior to WLAN R05. The vulnerability stems from...

TCL Communication Alcatel LINKZONE License Issue Vulnerability

TCL Communication Alcatel LINKZONE is a portable 4G wireless router from TCL Communication China. An authorization issue exists in the web interface of the Alcatel LINKZONE MW40-V-V1.0 MW40LU02.0002 version. An attacker can use this vulnerability to access the web interface without an administrat...

TYPO3 Authorization Issues Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. An authorization issue vulnerability exists in TYPO3. An attacker could exploit this vulnerability to hijack a user session...

Medtronic Valleylab FT10 and Valleylab LS10 Energy Platform License Issue Vulnerability

The Medtronic Valleylab FT10 and Valleylab LS10 Energy Platform are both Medtronic power devices for the medical industry. An authorization issue vulnerability exists in Medtronic Valleylab FT10 VLFT10GEN versions 2.1.0 and earlier, 2.0.3 and earlier, and Valleylab LS10 Energy Platform VLLS10GEN...

IBM QRadar SIEM Authorization Issues Vulnerability

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. An authorization...

JetBrains Hub Authorization Issues Vulnerability

JetBrains Hub is a web-based application from the Czech company JetBrains. The program is capable of integrating multiple JetBrains team tools together. An authorization issue vulnerability exists in versions of JetBrains Hub prior to 2018.4.11436. The vulnerability stems from a lack of...