CVE-2020-1812: Improper Authentication

HUAWEI P30 smartphones with versions earlier than 10.0.0.173C00E73R1P11 have an improper authentication vulnerability. Due to improperly validation of certain application, an attacker should trick the user into installing a malicious application to exploit this vulnerability. Successful exploit...

CVE-2013-4454: Improper Authentication

WordPress Portable phpMyAdmin Plugin 1.4.1 has Multiple Security Bypass Vulnerabilities...

CVE-2015-6922: Improper Authentication

Kaseya Virtual System Administrator VSA 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before 9.1.0.9 does not properly require authentication, which allows remote attackers to bypass authentication and 1 add an administrative account via crafted request to...

CVE-2019-20046: Improper Authentication

The Synergy Systems & Solutions PLC & RTU system has a vulnerability in HUSKY RTU 6049-E70 firmware versions 5.0 and prior. The affected product does not require adequate authentication, which may allow an attacker to read sensitive information or execute arbitrary code. This is a different issue...

CVE-2019-14598

CVE-2019-14598 describes an Improper Authentication issue in Intel CSME subsystems that could allow a locally authenticated attacker to escalate privileges, cause denial of service, or disclose information. Affected firmware ranges include 12.x (12.0–12.0.48; IoT 12.0.56), 13.x (up to 13.0.20), a...

CVE-2019-3998: Improper Authentication

Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated attacker to modify the Wi-Fi network the base station connects to...

CVE-2019-14598: Improper Authentication

Improper Authentication in subsystem in IntelR CSME versions 12.0 through 12.0.48 IOT only: 12.0.56, versions 13.0 through 13.0.20, versions 14.0 through 14.0.10 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local access...

CVE-2013-6360: Improper Authentication

TRENDnet TS-S402 has a backdoor to enable TELNET...

CVE-2011-4338: Improper Authentication

Shaman 1.0.9: Users can add the line askforpwd=false to his shaman.conf file, without entering the root password in shaman. The next time shaman is run, root privileges are granted despite the fact that the user never entered the root password...

CVE-2013-5582: Improper Authentication

Ammyy Admin 3.2 and earlier stores the client ID at a fixed memory location, which might make it easier for user-assisted remote attackers to bypass authentication by running a local program that extracts a field from the AAv3.2.exe file...

CVE-2013-2120: Improper Authentication

The %password... macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass authentication via a brute-force attack...

CVE-2017-18641: Improper Authentication

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers...

CVE-2019-20062: Improper Authentication

MFScripts YetiShare v3.5.2 through v4.5.4 might allow an attacker to reset a password by using a leaked hash the hash never expires until used...

CVE-2013-3096: Improper Authentication

D-Link DIR865L v1.03 suffers from an "Unauthenticated Hardware Linking" vulnerability...

CVE-2012-6340: Improper Authentication

An Authentication vulnerability exists in NETGEAR WGR614 v7 and v9 due to a hardcoded credential used for serial programming, a related issue to CVE-2006-1002...

CVE-2015-0102: Improper Authentication

IBM Workflow for Bluemix does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2019-15617: Improper Authentication

A missing check in Nextcloud Server 17.0.0 allowed an attacker to set up a new second factor when trying to login...

CVE-2019-15620: Improper Authentication

Improper access control in Nextcloud Talk 6.0.3 leaks the existance and the name of private conversations when linked them to another shared item via the projects feature...

CVE-2013-7051: Improper Authentication

D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters...

CVE-2020-8510: Improper Authentication

An issue was discovered in phpABook 0.9 Intermediate. On the login page, if one sets a userInfo cookie with the value of admin+1+en user+perms+lang, one can login as any user without a password...