PT-2024-12075 · Xtemos · Xtemos Woodmart

Name of the Vulnerable Software and Affected Versions: xtemos WoodMart versions n/a through 7.0.4 Description: The issue affects the xtemos WoodMart, allowing for Cross-Site Scripting XSS due to improper authentication and neutralization of input during web page generation. Recommendations: For...

PT-2024-14132

Name of the Vulnerable Software and Affected Versions Checkout Mestres WP versions 7.1.9.7 and earlier Description The issue is related to an Improper Authentication vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations For versions 7.1.9.7 and...

CVE-2023-47504: Improper Authentication

Improper Authentication vulnerability in Elementor Elementor Website Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Elementor Website Builder: from n/a through 3.16.4...

CVE-2023-51471: Improper Authentication

Improper Authentication vulnerability in Mestres do WP Checkout Mestres WP allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Checkout Mestres WP: from n/a through 7.1.9.7...

CVE-2023-51477: Improper Authentication

Improper Authentication vulnerability in BUDDYBOSS DMCC BuddyBoss Theme allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyBoss Theme: from n/a through 2.4.60...

CVE-2023-51472: Improper Authentication

Improper Authentication vulnerability in Mestres do WP Checkout Mestres WP allows Privilege Escalation.This issue affects Checkout Mestres WP: from n/a through 7.1.9.7...

PT-2024-14133 · WordPress · Checkout Mestres Wp

Name of the Vulnerable Software and Affected Versions: Checkout Mestres WP versions 7.1.9.7 and earlier Description: The issue is related to an Improper Authentication vulnerability that allows Privilege Escalation in the affected software. Recommendations: For versions 7.1.9.7 and earlier, updat...

CVE-2023-25790: Improper Authentication

Improper Authentication, Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in xtemos WoodMart allows Cross-Site Scripting XSS.This issue affects WoodMart: from n/a through 7.0.4...

CVE-2023-51405: Improper Authentication

Improper Authentication vulnerability in Repute Infosystems BookingPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BookingPress: from n/a through 1.0.74...

PT-2024-14113

Name of the Vulnerable Software and Affected Versions Repute Infosystems BookingPress versions 1.0.0 through 1.0.74 Description The issue is related to an Improper Authentication vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations For versions 1.0...

Kerberos Privilege Escalation

The vulnerability of the Kerberos protocol for Windows operating systems is related to the incorrect implementation of the authentication algorithm. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

VulnCheck KEV: CVE-2023-5830

A vulnerability classified as critical has been found in ColumbiaSoft Document Locator. This affects an unknown part of the file /api/authentication/login of the component WebTools. The manipulation of the argument Server leads to improper authentication. It is possible to initiate the attack...

Huawei HarmonyOS/EMUI Improper Authentication Vulnerability

Huawei HarmonyOS is Huawei's self-developed distributed operating system, designed for cell phones, tablets, smart homes and other full-scene devices to achieve seamless cross-device collaboration. Huawei EMUI is Huawei's deeply customized mobile operating system based on Android. An improper...

CVE-2023-48865: Improper Authentication

An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via executemode parameter of the URL...

SAP BusinessObject Business Intelligence Launch Pad 信息泄露漏洞

SAP BusinessObject Business Intelligence Launch Pad is a web control panel for the Business Intelligence platform from SAP, Germany. An information disclosure vulnerability exists in SAP BusinessObject Business Intelligence Launch Pad versions 4.2 and 4.3, which arises from improper authenticatio...

CVE-2023-52540

Vulnerability of improper authentication in the Iaware module. Impact: Successful exploitation of this vulnerability will affect availability...

CVE-2023-52540

CVE-2023-52540 corresponds to an improper authentication vulnerability in Huawei HarmonyOS’s Iaware module. Multiple connected sources identify the Iaware module as the affected component and indicate that exploitation could impact availability. The NVD entry lists network attack vector with low ...

CVE-2023-52540: Improper Authentication

Vulnerability of improper authentication in the Iaware module. Impact: Successful exploitation of this vulnerability will affect availability...

PT-2024-14612 · Iaware · Iaware

Name of the Vulnerable Software and Affected Versions: Iaware module affected versions not specified Description: The issue concerns improper authentication in the Iaware module. Successful exploitation of this issue will affect availability. Recommendations: At the moment, there is no informatio...

Elasticsearch Remote Cluster Security Auth Bypass Info Disclosure

The vulnerability of the Elasticsearch search system component related to Remote Cluster Security is linked to improper authentication. Exploiting this vulnerability can allow a malicious actor to gain access to protected information...