Atlassian Jira < 8.19.1 Improper Authentication

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is 8.5.x prior to 8.19.1. It is, therefore, affected by a vulnerability allowing a remote attacker who has had their access revoked from Jira Service Management to enable and disable Issu...

EulerOS 2.0 SP9 : curl (EulerOS-SA-2022-1991)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections...

EulerOS 2.0 SP9 : curl (EulerOS-SA-2022-1961)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections...

Oracle Linux 9 : curl (ELSA-2022-5245)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5245 advisory. - fix too eager reuse of TLS and SSH connections CVE-2022-27782 - fix leak of SRP credentials in redirects CVE-2022-27774 - fix credential leak on...

CVE-2022-2321

Improper Restriction of Excessive Authentication Attempts in GitHub repository heroiclabs/nakama prior to 3.13.0. This results in login brute-force attacks...

Satellite: Allow unintended SCA certificate to authenticate Candlepin

The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA simple content access certificate for authentication with Candlepin...

PT-2022-11396 · Red Hat +1 · Red Hat Satellite +1

Name of the Vulnerable Software and Affected Versions: Red Hat Satellite affected versions not specified Description: The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA simple content access certificate...

CVE-2022-28713

Improper authentication vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a remote attacker to obtain some data of Facility Information without logging in to the product...

CVE-2022-28713

Improper authentication vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a remote attacker to obtain some data of Facility Information without logging in to the product...

PT-2022-19189 · Cybozu · Cybozu Garoon

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.10.0 through 5.5.1 Description: The issue is related to improper authentication in the Scheduler component, allowing a remote attacker to access some Facility Information data without logging into the product...

The vulnerability in the web interface for controlling Cisco AppDynamics Controller allows a perpetrator to disclose sensitive information and enhance their privileges.

The vulnerability of the Cisco AppDynamics Controller’s software management web interface is related to improper authentication checks for HTTP requests. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information and enhance their privileges through a specially...

The vulnerability of the Wi-Fi router software WS7200-10, related to the improper implementation of authentication algorithms, allows attackers to circumvent existing security restrictions through brute-force attacks.

The vulnerability of the Wi-Fi router software WS7200-10 is related to the improper implementation of the authentication algorithm. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through brute-force attacks...

Oracle Linux 8 : curl (ELSA-2022-5313)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5313 advisory. - fix too eager reuse of TLS and SSH connections CVE-2022-27782 - fix credential leak on redirect CVE-2022-27774 - fix auth/cookie leak on redirect...

Exemys RME1

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Exemys Equipment: RME1 Vulnerability: Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker with network access to bypass authentication and...

Oracle Linux 7 : 389-ds-base (ELSA-2022-5239)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5239 advisory. - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS Tenable has extracted the preceding...

CVE-2021-26638

Improper Authentication vulnerability in S&D smarthomesmartcare application can cause authentication bypass and information exposure. Remote attackers can use this vulerability to take control of the home environment including indoor control...

Authentication flaw

Improper Authentication vulnerability in S&D smarthomesmartcare application can cause authentication bypass and information exposure. Remote attackers can use this vulerability to take control of the home environment including indoor control...

CVE-2021-26638

Technical details for CVE-2021-26638 are not publicly available in the provided documents. Monitor for updates from linked sources before drawing conclusions about affected products, impact, or remediation.

EulerOS 2.0 SP8 : 389-ds-base (EulerOS-SA-2022-1921)

According to the versions of the 389-ds-base package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication...

CVE-2020-36548

A vulnerability classified as problematic has been found in GE Voluson S8. Affected is the file /uscgi-bin/users.cgi of the Service Browser. The manipulation leads to improper authentication and elevated access possibilities. It is possible to launch the attack on the local host...