8745 matches found
PT-2023-5209 · Zoom · Zoom
Name of the Vulnerable Software and Affected Versions: Zoom affected versions not specified Description: The issue is related to improper authentication in Zoom clients, which may allow an authenticated user to conduct a denial of service via network access. This could potentially allow a remote...
Exploit for Improper Authentication in Hikvision Ds-2Cd2032-I_Firmware
CVE-2017-7921 - Hikvision Camera Series Improper Authenticatio...
Information Disclosure
gitlab is vulnerable to Information Disclosure. The library contains an improper authentication mechanism which allows a user with certain amount of information to authenticate without a personal access token and gain access to sensitive user information...
Improper Authentication
gitLab is vulnerable to Improper Authentication. This vulnerability exists because it does not properly enforce IP address restrictions, allowing an attacker to misuse a valid deploy token from any location...
Walchem Intuition 9
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Walchem Equipment: Intuition 9 Vulnerabilities: Missing Authentication for Critical Function, Improper Authentication 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...
CVE-2023-37471: Improper Authentication
Open Access Management OpenAM is an access management solution that includes Authentication, SSO, Authorization, Federation, Entitlements and Web Services Security. OpenAM up to version 14.7.2 does not properly validate the signature of SAML responses received as part of the SAMLv1.x Single Sign-...
CVE-2023-37362 Weintek Weincloud Improper Authentication
Weintek Weincloud v0.13.6 could allow an attacker to abuse the registration functionality to login with testing credentials to the official website...
CVE-2023-37362 Weintek Weincloud Improper Authentication
Weintek Weincloud v0.13.6 could allow an attacker to abuse the registration functionality to login with testing credentials to the official website...
CVE-2023-3638 GeoVision GV-ADR2701 Improper Authentication
In GeoVision GV-ADR2701 cameras, an attacker could edit the login response to access the web application...
Improper Authentication
openssl is vulnerable to Improper Authentication. The vulnerability allows applications that use the 'AES-SIV' algorithm and want to authenticate empty data entries to be misled by removing adding or reordering empty entries causing the issue...
GeoVision GV-ADR2701 授权问题漏洞
Geovision GeoVision GV-ADR2701 is an outdoor fixed network camera from Geovision, a Chinese company. An authorization issue vulnerability exists in GeoVision GV-ADR2701 version V1.0020171215, which stems from the presence of improper authentication issues that allow an attacker to log in to the...
CVE-2023-3638: Improper Authentication
In GeoVision GV-ADR2701 cameras, an attacker could edit the login response to access the web application...
CVE-2022-34155
Improper Authentication vulnerability in miniOrange OAuth Single Sign On – SSO OAuth Client plugin allows Authentication Bypass.This issue affects OAuth Single Sign On – SSO OAuth Client: from n/a through 6.23.3...
CVE-2022-34155
Improper Authentication vulnerability in miniOrange OAuth Single Sign On – SSO OAuth Client plugin allows Authentication Bypass.This issue affects OAuth Single Sign On – SSO OAuth Client: from n/a through 6.23.3...
CVE-2022-34155
CVE-2022-34155 applies to the WordPress plugin “miniOrange OAuth Single Sign On – SSO (OAuth Client)” and is caused by an Improper Authentication flaw that enables an Authentication Bypass. Affected versions are up to 6.23.3; exploitation could allow unauthorized access to protected resources. Th...
GeoVision GV-ADR2701
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: GeoVision Equipment: GV-ADR2701 Vulnerabilities: Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to...
Weintek Weincloud
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Weintek Equipment: Weincloud Vulnerabilities: Weak Password Recovery Mechanism for Forgotten Password, Improper Authentication, Improper Restriction of Excessive Authentication Attempts, Improper...
CVE-2022-34155: Improper Authentication
Improper Authentication vulnerability in miniOrange OAuth Single Sign On – SSO OAuth Client plugin allows Authentication Bypass.This issue affects OAuth Single Sign On – SSO OAuth Client: from n/a through 6.23.3...
CVE-2023-2759 TAPHOME Improper Authentication in Core Platform
A hidden API exists in TapHome's core platform before version 2023.2 that allows an authenticated, low privileged user to change passwords of other users without any prior knowledge. The attacker may gain full access to the device by using this vulnerability...