8878 matches found
GE Vernova EnerVista UR authorization issue vulnerability
GE Vernova EnerVista UR is a device configuration tool from GE Vernova USA that is compatible with all UR relay applications. An authorization issue vulnerability exists in the GE Vernova EnerVista UR that stems from improper authentication and could lead to authentication bypass...
WordPress Plugin for School Management System: Security Vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...
Improper Authentication
Rancher is vulnerable to Improper Authentication. The vulnerability is due to improper validation of SAML assertion data due to Rancher trusting and using unvalidated values in authentication cookies, allowing attackers to manipulate session data and escalate privileges...
CVE-2025-27641: Improper Authentication
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.951 Application 20.0.2368 allows Unauthenticated APIs for Single-Sign On V-2024-009...
CVE-2025-27672: Improper Authentication
Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows OAUTH Security Bypass OVE-20230524-0016...
CVE-2025-27425: Improper Authentication
Scanning certain QR codes that included text with a website URL could allow the URL to be opened without presenting the user with a confirmation alert first. This vulnerability was fixed in Firefox for iOS 136...
CVE-2025-25302
Rembg (versions 2.0.57 and earlier) is reported to have a CORS misconfiguration where the CORS middleware reflects all origins and allow_credentials is set to True. This combination effectively enables cross-origin requests from any site and could allow authenticated cross-site requests to the re...
CVE-2024-38426 Improper Authentication in Modem
While processing the authentication message in UE, improper authentication may lead to information disclosure...
CVE-2024-38426 Improper Authentication in Modem
While processing the authentication message in UE, improper authentication may lead to information disclosure...
PT-2025-9289
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description Improper authentication during the processing of authentication messages may lead to information disclosure. Recommendations At the moment, there is no information about a newer version that...
Qualcomm Chipsets Authorization Issue Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An authorization issue vulnerability exists in Qualcomm Chipsets that stems from improper authentication and could lead to information disclosure...
CVE-2025-1723: Improper Authentication
Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to the session mishandling. Valid account holders in the setup only have the potential to exploit this bug...
CVE-2025-27422: Improper Authentication
FACTION is a PenTesting Report Generation and Collaboration Framework. Authentication is bypassed when an attacker registers a new user with admin privileges. This is possible at any time without any authorization. The request must follow the validation rules no missing information, secure...
CVE-2024-38426: Improper Authentication
While processing the authentication message in UE, improper authentication may lead to information disclosure...
CVE-2024-37566
Infoblox NIOS through 8.6.4 has Improper Authentication for Grids...
WordPress plugin SetSail Membership has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2025-27416: Improper Authentication
Scratch-Coding-Hut.github.io is the website for Coding Hut. The website as of 28 February 2025 contained a sign in with scratch username and password form. Any user who used the sign in page would be susceptible to any other user signing into their account. As of time of publication, a fix is not...
CVE-2025-26326: Improper Authentication
A vulnerability was identified in the NVDA Remote version 2.6.4 and Tele NVDA Remote version 2025.3.3 remote connection add-ons, which allows an attacker to obtain total control of the remote system by guessing a weak password. The problem occurs because these add-ons accept any password entered ...
