4126 matches found
CVE-2025-53845
An improper authentication vulnerability CWE-287 in Fortinet FortiAnalyzer version 7.6.0 through 7.6.3 and before 7.4.6 allows an unauthenticated attacker to obtain information pertaining to the device's health and status, or cause a denial of service via crafted OFTP requests...
CVE-2025-53845
An improper authentication vulnerability CWE-287 in Fortinet FortiAnalyzer version 7.6.0 through 7.6.3 and before 7.4.6 allows an unauthenticated attacker to obtain information pertaining to the device's health and status, or cause a denial of service via crafted OFTP requests...
Windows SMB Client Tampering Vulnerability
Improper authentication in Windows SMB Client allows an unauthorized attacker to perform tampering over a network...
Windows Remote Desktop Protocol Security Feature Bypass
Improper authentication in Windows Remote Desktop Protocol allows an authorized attacker to bypass a security feature locally...
CVE-2025-59889
Improper authentication of library files in the Eaton IPP software installer could lead to arbitrary code execution of an attacker with the access to the software package. This security issue has been fixed in the latest version of IPP which is available on the Eaton download center...
CVE-2025-59889
Improper authentication of library files in the Eaton IPP software installer could lead to arbitrary code execution of an attacker with the access to the software package. This security issue has been fixed in the latest version of IPP which is available on the Eaton download center...
CVE-2025-59889
CVE-2025-59889 affects the Eaton IPP software installer. The root cause is improper authentication of library files within the installer, which could allow an attacker with access to the software package to execute arbitrary code. The issue is mitigated by a fix in the latest IPP version availabl...
PT-2025-42025
Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Protocol affected versions not specified Description An improper authentication issue exists in Windows Remote Desktop Protocol. This allows an authorized attacker to bypass a security feature locally. Recommendations At...
NVIDIA Jetson Linux 安全漏洞
NVIDIA Jetson Linux is an edge AI and robotics development platform from NVIDIA, USA. NVIDIA Jetson Linux suffers from a security vulnerability that stems from improper UEFI authentication, which could lead to a privileged user corrupting the Linux device tree, which in turn could lead to data...
PT-2025-42142
Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description An improper authentication issue exists in the Windows SMB Client. This allows an unauthorized attacker to perform tampering over a network. Recommendations At the moment, there is...
PT-2025-42209
Name of the Vulnerable Software and Affected Versions pwn.college DOJO versions prior to commit 467db0b9ea0d9a929dc89b41f6eb59f7cfc68bef Description The /workspace endpoint in pwn.college DOJO has an improper authentication issue. An attacker can access any active Windows VM without authorization...
Eaton IPP 安全漏洞
Eaton IPP is a power management software from Eaton Corporation USA. A security vulnerability exists in Eaton IPP that stems from improper authentication of library files and could lead to the execution of arbitrary code...
PT-2025-41850
Name of the Vulnerable Software and Affected Versions Eaton IPP software affected versions not specified Description Improper authentication of library files within the Eaton IPP software installer could allow an attacker who has access to the software package to execute arbitrary code...
PT-2025-41957
Name of the Vulnerable Software and Affected Versions Fortinet FortiAnalyzer versions 7.6.0 through 7.6.3 Fortinet FortiAnalyzer versions prior to 7.4.6 Description An improper authentication issue exists in FortiAnalyzer. An unauthenticated attacker can obtain information about the device’s heal...
SKYSEA Client View Improper Authentication Vulnerability
SKYSEA Client View contains an improper authentication vulnerability that allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program...
CVE-2025-21064
Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data...
CVE-2025-21064
Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data...
EUVD-2025-33669
Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data...
CVE-2025-21064
CVE-2025-21064 concerns Samsung Smart Switch. The issue is improper authentication in Smart Switch versions prior to 3.7.66.6, enabling nearby/adjacent attackers to access data being transferred. The vulnerability stems from weaknesses in the authentication process of the transfer feature. Affect...