8694 matches found
Atlassian Jira < 7.13.9 Multiple Vulnerabilties
According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 7.13.9 or 8.0.x 8.4.2. It is, therefore, affected by multiple vulnerabilities: - A Cross-Site Scripting XSS vulnerability in Issue Navigator Basic Search. - A Improper...
CVE-2022-33242
CVE-2022-33242: Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned libraries in the audio processing domain (audio PD). Based on multiple sources, the issue affects Qualcomm closed-source components and is characterized by local attack vector with low privileg...
CVE-2022-33242 Improper authentication in Qualcomm IPC
Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD...
PT-2023-13256 · Qualcomm · Qualcomm Ipc
Name of the Vulnerable Software and Affected Versions: Qualcomm IPC affected versions not specified Description: The issue is related to memory corruption due to improper authentication in Qualcomm IPC while loading unsigned libraries in the audio processing domain. Recommendations: At the moment...
CVE-2022-33242: Improper Authentication
Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD...
Exploit for Improper Authentication in Redhat Keycloak
PoC for CVE-2023-0264 Keycloak vulnerability that allows ses...
CVE-2022-48364: Improper Authentication
The undomarkstatusesassensitive method in app/services/approveappealservice.rb in Mastodon 3.5.x before 3.5.3 does not use the server's representative account, resulting in moderator identity disclosure when a moderator approves the appeal of a user whose status update was marked as sensitive...
CVE-2023-0228
Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2...
Authentication flaw
Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2...
CVE-2023-0228 Improper authentication vulnerability in S+ Operations
Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2...
CVE-2023-0228 Improper authentication vulnerability in S+ Operations
Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2...
CVE-2023-0228
Summary of CVE-2023-0228 : ABB Symphony Plus S+ Operations is affected by an improper authentication flaw (CWE-287) that allows an unauthorized client on the HMI network to connect and impersonate a legitimate S+ Operations client, potentially reading data, changing configurations, causing data c...
CVE-2023-0228: Improper Authentication
Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2...
CVE-2023-1065: Improper Authentication
This vulnerability in the Snyk Kubernetes Monitor can result in irrelevant data being posted to a Snyk Organization, which could in turn obfuscate other, relevant, security issues. It does not expose the user of the integration to any direct security risk and no user data can be leaked. To exploi...
Exploit for Improper Authentication in Fortinet Fortiproxy
CVE-2022-40684 One-click enumeration of all usernames and wr...
CVE-2022-34908: Improper Authentication
An issue was discovered in the A4N Aremis 4 Nomad application 1.5.0 for Android. It possesses an authentication mechanism; however, some features do not require any token or cookie in a request. Therefore, an attacker may send a simple HTTP request to the right endpoint, and obtain authorization ...
CVE-2023-23493: Improper Authentication
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, macOS Monterey 12.6.3. An encrypted volume may be unmounted and remounted by a different user without prompting for the password...
CVE-2022-48254: Improper Authentication
There is a data processing error vulnerability in Leia-B29 2.0.0.49M03. Successful exploitation could bypass lock screen authentication...
CVE-2023-20012: Improper Authentication
A vulnerability in the CLI console login authentication of Cisco Nexus 9300-FX3 Series Fabric Extender FEX when used in UCS Fabric Interconnect deployments could allow an unauthenticated attacker with physical access to bypass authentication. This vulnerability is due to the improper implementati...