ProFTPD 'tls_verify_crl' function authorization issue vulnerability

ProFTPD is a secure cloud printing solution from the ProFTPD team. The solution supports printing from laptops, desktops and mobile devices connected to printers. An authorization issue vulnerability exists in the 'tlsverifycrl' function in ProFTPD versions prior to 1.3.6. The vulnerability stems...

CVE-2014-2904

CVE-2014-2904 affects wolfSSL prior to 3.2.0, where a server certificate is not properly authorized for server authentication. This has been documented across multiple sources (OSV, NVD, Debian/Ubuntu advisories, and CVE records). The description consistently notes the issue without detailing exp...

CVE-2014-2902

CVE-2014-2902 affects wolfSSL prior to 3.2.0 and indicates a flaw where the library does not properly authorize a CA certificate for signing other certificates. The connected OSV/NVD entries confirm the same description across multiple ecosystems. The core issue is a lack of proper CA certificate...

CVE-2014-2902

wolfssl before 3.2.0 does not properly authorize CA certificate for signing other certificates...

wolfSSL Authorization Issue Vulnerability

wolfSSL formerly known as CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. An authorization issue vulnerability exists in versions of wolfSSL prior to 3.2.0; no detailed vulnerability details are provided at thi...

ZyXEL NBG-418N v2 License Issue Vulnerability

The ZyXEL NBG-418N v2 is a wireless router from Taiwan, China-based ZyXEL. An authorization issue vulnerability exists in the wan.htm page in the Zyxel NBG-418N v2 using firmware version V1.00AARP.9C0. The vulnerability stems from a lack of authentication measures or insufficient authentication...

D-Link DIR-615 Authorization Issues Vulnerability

The D-Link DIR-615 is a wireless router from AUO D-Link of Taiwan, China. An authorization issue vulnerability exists in the D-Link DIR-615 using firmware version 20.05 and firmware version 20.07. The vulnerability stems from a lack of authentication measures or insufficient authentication streng...

Multiple NETGEAR Product License Issue Vulnerabilities (CNVD-2020-23146)

The NETGEAR MBR1515 and others are a wireless router from NETGEAR. An authorization issue vulnerability exists in multiple NETGEAR products. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in the network system or product. No detailed...

Multiple NETGEAR Products Licensing Issues Vulnerabilities

The NETGEAR AC1450, among others, is a wireless router from NETGEAR. An authorization issue vulnerability exists in multiple NETGEAR products. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in the network system or product. No detailed...

V-Zug Combi-Steam MSLQ Authorization Issues Vulnerability

The V-Zug Combi-Steam MSLQ is an all-in-one microwave, oven, and steam machine unit from Swiss Swiss V-Zug. An authorization issue vulnerability exists in the V-Zug Combi-Steam MSLQ using firmware versions prior to Ethernet R07 and firmware versions prior to WLAN R05. The vulnerability stems from...

TCL Communication Alcatel LINKZONE License Issue Vulnerability

TCL Communication Alcatel LINKZONE is a portable 4G wireless router from TCL Communication China. An authorization issue exists in the web interface of the Alcatel LINKZONE MW40-V-V1.0 MW40LU02.0002 version. An attacker can use this vulnerability to access the web interface without an administrat...

TYPO3 Authorization Issues Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. An authorization issue vulnerability exists in TYPO3. An attacker could exploit this vulnerability to hijack a user session...

Medtronic Valleylab FT10 and Valleylab LS10 Energy Platform License Issue Vulnerability

The Medtronic Valleylab FT10 and Valleylab LS10 Energy Platform are both Medtronic power devices for the medical industry. An authorization issue vulnerability exists in Medtronic Valleylab FT10 VLFT10GEN versions 2.1.0 and earlier, 2.0.3 and earlier, and Valleylab LS10 Energy Platform VLLS10GEN...

IBM QRadar SIEM Authorization Issues Vulnerability

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. An authorization...

JetBrains Hub Authorization Issues Vulnerability

JetBrains Hub is a web-based application from the Czech company JetBrains. The program is capable of integrating multiple JetBrains team tools together. An authorization issue vulnerability exists in versions of JetBrains Hub prior to 2018.4.11436. The vulnerability stems from a lack of...

Craft CMS Authorization Issues Vulnerability

Craft CMS is a content management system CMS. An authorization issue vulnerability exists in Craft CMS 3.1.7 and earlier versions, which can be exploited by attackers to conduct brute force attacks...

ClonOS WEB control panel authorization issue vulnerability

ClonOS is an open source platform based on FreeBSD. The platform is mainly used for the creation and management of virtual environments. web control panel is one of the web-based ClonOS control panel. An authorization issue vulnerability exists in the clonos.php file in ClonOS WEB control panel...

Citrix Systems NetScaler Gateway and Citrix Application Delivery Controller Authorization Issues Vulnerability

Citrix Systems NetScaler Gateway Citrix Systems Gateway and Citrix Application Delivery Controller ADC are products of Citrix Systems, Inc.Citrix Systems NetScaler Gateway is a secure remote access solution. The solution provides administrators with application-level and data-level controls to...

Palo Alto Networks Zingbox Inspector Authorization Issues Vulnerability

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. An authorization issue vulnerability exists in Palo Alto Networks Zingbox Inspector version 1.280 and earlier. The vulnerability stems...

cPanel Authorization Issues Vulnerability (CNVD-2019-36140)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An authorization issue vulnerability exists in versions of cPanel prior to 11.54.0.4. The vulnerability stems from a lack of...