CVE-2024-53704

An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication...

CVE-2024-53704

An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication...

CVE-2024-53704

CVE-2024-53704 affects SonicWall SonicOS SSLVPN. An improper authentication vulnerability in the SSLVPN authentication mechanism allows remote attackers to bypass authentication and hijack active VPN sessions. Affected versions include SonicOS SSLVPN 7.1.1-7040 before 7.1.3-7015 and 7.1.2-7019. P...

SonicWALL SSLVPN security vulnerabilities

SonicWALL SSLVPN is a transparent software application for Windows and Linux users from SonicWALL USA, Inc. Enables remote users to securely connect to the corporate network. A security vulnerability exists in SonicWALL SSLVPN that stems from improper authentication...

CVE-2024-13309: Improper Authentication

Improper Authentication vulnerability in Drupal Login Disable allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login Disable: from 2.0.0 before 2.1.1...

CVE-2023-52955

Vulnerability of improper authentication in the ANS system service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2023-52955

Vulnerability of improper authentication in the ANS system service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2023-52955

Vulnerability of improper authentication in the ANS system service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2023-52955

Technical details about CVE-2023-52955 (affected products, component, root cause, impact, or fixes) are not publicly provided in the supplied documents. Monitor for updates and additional disclosures.

CVE-2023-52955

Vulnerability of improper authentication in the ANS system service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

PT-2025-1561

Name of the Vulnerable Software and Affected Versions ANS system service module affected versions not specified Description The issue is related to improper authentication in the ANS system service module. Successful exploitation of this issue may cause features to perform abnormally. There is no...

CVE-2024-56445: Improper Authentication

Instruction authentication bypass vulnerability in the Findnetwork module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2023-52955: Improper Authentication

Vulnerability of improper authentication in the ANS system service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2024-12264: Improper Authentication

The PayU CommercePro Plugin plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.8.3. This is due to /wp-json/payu/v1/generate-user-token and /wp-json/payu/v1/get-shipping-cost REST API endpoints not properly verifying a user's identity prior to setti...

PT-2025-1010

Name of the Vulnerable Software and Affected Versions SonicWall versions prior to 7.1.3-7015 SonicWall versions prior to 8.0.0-8037 SonicOS versions 7.1.x up to 7.1.1-7058 SonicOS versions 7.0.1 and earlier Description An improper authentication issue exists in the SSL VPN authentication mechanis...

Improper Authentication

Overview nicegui is a Create web-based user interfaces with Python. The nice way. Affected versions of this package are vulnerable to Improper Authentication due to improper clearing of cookies through the handlehttp function of the air.py component. An attacker can gain unauthorized access to th...

CVE-2025-21618: Improper Authentication

NiceGUI is an easy-to-use, Python-based UI framework. Prior to 2.9.1, authenticating with NiceGUI logged in the user for all browsers, including browsers in incognito mode. This vulnerability is fixed in 2.9.1...

CVE-2024-13111

A vulnerability classified as critical was found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. Affected by this vulnerability is an unknown functionality of the file src/main/java/com/yf/exam/modules/sys/user/controller/SysUserControl of the component JWT Token...

CVE-2024-13111

A vulnerability classified as critical was found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. Affected by this vulnerability is an unknown functionality of the file src/main/java/com/yf/exam/modules/sys/user/controller/SysUserControl of the component JWT Token...

CVE-2024-13111 Beijing Yunfan Internet Technology Yunfan Learning Examination System JWT Token SysUserControl improper authentication

A vulnerability classified as critical was found in Beijing Yunfan Internet Technology Yunfan Learning Examination System 1.9.2. Affected by this vulnerability is an unknown functionality of the file src/main/java/com/yf/exam/modules/sys/user/controller/SysUserControl of the component JWT Token...