CVE-2022-43549

Improper authentication in Veeam Backup for Google Cloud v1.0 and v3.0 allows attackers to bypass authentication mechanisms...

CVE-2022-43549

Improper authentication in Veeam Backup for Google Cloud v1.0 and v3.0 allows attackers to bypass authentication mechanisms...

CVE-2022-43549

CVE-2022-43549 : Improper authentication in Veeam Backup for Google Cloud (versions 1.0 and 3.0) allows an attacker to bypass authentication, rated CRITICAL (CVSSv3.1: 9.8). Affected component is the Backup Appliance used in Veeam Backup for Google Cloud. The vulnerability enables unauthorized ac...

CVE-2022-43549: Improper Authentication

Improper authentication in Veeam Backup for Google Cloud v1.0 and v3.0 allows attackers to bypass authentication mechanisms...

CVE-2022-43504

Improper authentication vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to obtain the email address of the user who posted a blog using the WordPress Post by Email Feature. The developer also provides new patched releases for all versions since 3.7...

CVE-2022-38336: Improper Authentication

An access control issue in MobaXterm before v22.1 allows attackers to make connections to the server via the SSH or SFTP protocols without authentication...

CVE-2022-43504: Improper Authentication

Improper authentication vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to obtain the email address of the user who posted a blog using the WordPress Post by Email Feature. The developer also provides new patched releases for all versions since 3.7...

CVE-2022-46411: Improper Authentication

An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. A default password is persisted after installation and may be discovered and used to escalate privileges...

Multiple vulnerabilities in UNIMO Technology digital video recorders

Overview Multiple digital video recorders provided by UNIMO Technology Co., Ltd contain multiple vulnerabilities listed below. Improper Authentication CWE-287 - CVE-2022-44620 OS Command Injection CWE-78 - CVE-2022-44606 Hidden Functionality CWE-912 - CVE-2022-43464 The reporter states that attac...

CVE-2022-46145: Improper Authentication

authentik is an open-source identity provider. Versions prior to 2022.11.2 and 2022.10.2 are vulnerable to unauthorized user creation and potential account takeover. With the default flows, unauthenticated users can create new accounts in authentik. If a flow exists that allows for email-verified...

UNIMO Technology UDR-JA 授权问题漏洞

UNIMO Technology UDR-JA is a series of digital video recorder firmware from UNIMO Technology. A security vulnerability exists in the UNIMO Technology UDR-JA that stems from improper authentication...

CVE-2022-43900: Improper Authentication

IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps 1.4.2 could provide a weaker than expected security. A local attacker can create an outbound network connection to another system. IBM X-Force ID: 240827...

CVE-2021-45036 Velneo vClient improper authentication

Velneo vClient on its 28.1.3 version, could allow an attacker with knowledge of the victims's username and hashed password to spoof the victim's id against the server...

KubeView vulnerable to full cluster takeover due to improper authentication

KubeView through 0.1.31 allows attackers to obtain control of a Kubernetes cluster because api/scrape/kube-system does not require authentication, and retrieves certificate files that can be used for authentication as kube-admin. NOTE: the vendor's position is that KubeView was a "fun side projec...

CVE-2022-36111: Insufficient Verification of Data Authenticity

immudb is a database with built-in cryptographic proof and verification. In versions prior to 1.4.1, a malicious immudb server can provide a falsified proof that will be accepted by the client SDK signing a falsified transaction replacing the genuine one. This situation can not be triggered by a...

Karmasis Infraskope Agent Authentication Error Vulnerability

Karmasis Infraskope Agent is an application logger from Karmasis. An authentication error vulnerability exists in Karmasis Infraskope Agent versions prior to 7.10.00 that stems from improper authentication and can be exploited by an attacker to obtain sensitive information...

Oracle Linux 9 : 389-ds-base (ELSA-2022-8162)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-8162 advisory. 2.1.3-4 - Bump version to 2.1.3-4 - Resolves: Bug 1872451 - Fix regression with dscreate template 2.1.3-3 - Bump version to 2.1.3-3 - Resolves: Bug...

CVE-2022-40602: Improper Authentication

A flaw in the Zyxel LTE3301-M209 firmware verisons prior to V1.00ABLG.6C0 could allow a remote attacker to access the device using an improper pre-configured password if the remote administration feature has been enabled by an authenticated administrator...

CVE-2022-37931: Improper Authentication

A vulnerability in NetBatch-Plus software allows unauthorized access to the application. HPE has provided a workaround and fix. Please refer to HPE Security Bulletin HPESBNS04388 for details...

AlmaLinux 9 : 389-ds-base (ALSA-2022:8162)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:8162 advisory. - A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denia...