CVE-2023-1464: Improper Authentication

A vulnerability, which was classified as critical, was found in SourceCodester Medicine Tracker System 1.0. This affects an unknown part of the file Users.php?f=saveuser. The manipulation of the argument firstname/middlename/lastname/username/password leads to improper authentication. It is...

CVE-2023-1460: Improper Authentication

A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file admin/ajax.php?action=saveuser of the component Password Change Handler. The manipulation leads to improper authentication. It is possible to...

CVE-2023-21460

Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting...

CVE-2023-21460

Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting...

CVE-2023-21460

Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting...

SAMSUNG Mobile Devices 授权问题漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile Devices SecSettings SMR Mar-2023 Release 1 version, which stems from the presence of improper...

CVE-2023-21460

CVE-2023-21460 concerns Samsung SecSettings with improper authentication prior to SMR Mar-2023 Release 1. The vulnerability enables an attacker with local access to reset the SecSettings configuration. The issue is described consistently across sources as a failure of authentication in SecSetting...

CVE-2023-21460: Improper Authentication

Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting...

PT-2023-18229 · Unknown · Secsettings

Name of the Vulnerable Software and Affected Versions: SecSettings versions prior to SMR Mar-2023 Release 1 Description: The issue is related to improper authentication in SecSettings, allowing an attacker to reset the setting. Recommendations: For versions prior to SMR Mar-2023 Release 1, update...

CVE-2023-21455: Improper Authentication

Improper authorization implementation in Exynos baseband prior to SMR Mar-2023 Release 1 allows incorrect handling of unencrypted message...

CVE-2022-46774: Improper Authentication

IBM Manage Application 8.8.0 and 8.9.0 in the IBM Maximo Application Suite is vulnerable to incorrect default permissions which could give access to a user to actions that they should not have access to. IBM X-Force ID: 242953...

CVE-2023-23857: Improper Authentication

Due to missing authentication check, SAP NetWeaver AS for Java - version 7.50, allows an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access services which can be used to perform unauthorized operations affecting users and services...

Improper Authentication

WordPress is vulnerable to Improper Authentication. The vulnerability allows an attacker to obtain the email address of the user who posted a blog using the WordPress Post by Email Feature...

CVE-2022-44574

An improper authentication vulnerability exists in Avalanche version 6.3.x and below allows unauthenticated attacker to modify properties on specific port...

CVE-2022-44574: Improper Authentication

An improper authentication vulnerability exists in Avalanche version 6.3.x and below allows unauthenticated attacker to modify properties on specific port...

CVE-2022-44574

Avalanche up to version 6.3.x is affected by an improper authentication vulnerability that allows an unauthenticated attacker to modify properties on a specific port. The CVE (CVE-2022-44574) is corroborated by multiple sources (NVD, Red Hat, CNNVD, CVE list, ZDI advisory) indicating the issue ar...

IBM Financial Transaction Manager 输入验证错误漏洞

IBM Financial Transaction Manager is a financial transaction manager from International Business Machines IBM. The product is primarily used to monitor, track and report financial payments and transactions. A security vulnerability exists in IBM Financial Transaction Manager versions 3.2.0 throug...

Avalanche 授权问题漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. Avalanche version 6.3.x and prior versions have a security vulnerability that stems from improper authentication. A...

Atlassian Jira 8.0.x < 8.4.2 Multiple Vulnerabilties

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 7.13.9 or 8.0.x 8.4.2. It is, therefore, affected by multiple vulnerabilities: - A Cross-Site Scripting XSS vulnerability in Issue Navigator Basic Search. - A Improper...

CVE-2023-27482: Improper Authentication

homeassistant is an open source home automation tool. A remotely exploitable vulnerability bypassing authentication for accessing the Supervisor API through Home Assistant has been discovered. This impacts all Home Assistant installation types that use the Supervisor 2023.01.1 or older...