8672 matches found
PT-2022-7165 · Unknown · Avalanche Premise
Name of the Vulnerable Software and Affected Versions: Avalanche Premise versions 6.3.x and below Description: The issue is related to an improper authentication procedure in the Avalanche system, which can be exploited by an attacker to bypass security restrictions. This can be achieved by...
CVE-2022-30755
Improper authentication vulnerability in AppLock prior to SMR Jul-2022 Release 1 allows attacker to bypass password confirm activity by hijacking the implicit intent...
CVE-2022-30755
Improper authentication vulnerability in AppLock prior to SMR Jul-2022 Release 1 allows attacker to bypass password confirm activity by hijacking the implicit intent...
CVE-2022-30755
Improper authentication vulnerability in AppLock prior to SMR Jul-2022 Release 1 allows attacker to bypass password confirm activity by hijacking the implicit intent...
CVE-2022-30755
CVE-2022-30755 affects Samsung AppLock prior to the SMR July 2022 Release 1. The issue is improper authentication resulting from insufficient authentication logic, enabling an attacker to bypass password confirmation by hijacking an implicit intent. The vulnerability is documented across multiple...
PT-2022-20294
Name of the Vulnerable Software and Affected Versions AppLock versions prior to SMR Jul-2022 Release 1 Description The issue allows an attacker to bypass the password confirm activity by hijacking the implicit intent, due to an improper authentication vulnerability. Recommendations For versions...
CVE-2022-33689: Improper Authentication
Improper access control vulnerability in TelephonyUI prior to SMR Jul-2022 Release 1 allows attackers to change preferred network type by unprotected binder call...
CVE-2022-30755: Improper Authentication
Improper authentication vulnerability in AppLock prior to SMR Jul-2022 Release 1 allows attacker to bypass password confirm activity by hijacking the implicit intent...
Atlassian Jira < 8.19.1 Improper Authentication
According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is 8.5.x prior to 8.19.1. It is, therefore, affected by a vulnerability allowing a remote attacker who has had their access revoked from Jira Service Management to enable and disable Issu...
EulerOS 2.0 SP9 : curl (EulerOS-SA-2022-1961)
According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections...
Rocky Linux 8 : curl (RLSA-2022:5313)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:5313 advisory. - An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections withou...
EulerOS 2.0 SP9 : curl (EulerOS-SA-2022-1991)
According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections...
CVE-2015-5298: Improper Authentication
The Google Login Plugin versions 1.0 and 1.1 allows malicious anonymous users to authenticate successfully against Jenkins instances that are supposed to be locked down to a particular Google Apps domain through client-side request modification...
Oracle Linux 9 : curl (ELSA-2022-5245)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5245 advisory. - fix too eager reuse of TLS and SSH connections CVE-2022-27782 - fix leak of SRP credentials in redirects CVE-2022-27774 - fix credential leak on...
CVE-2022-31131: Improper Authentication
Nextcloud mail is a Mail app for the Nextcloud home server product. Versions of Nextcloud mail prior to 1.12.2 were found to be missing user account ownership checks when performing tasks related to mail attachments. Attachments may have been exposed to incorrect system users. It is recommended...
CVE-2022-2321
Improper Restriction of Excessive Authentication Attempts in GitHub repository heroiclabs/nakama prior to 3.13.0. This results in login brute-force attacks...
Satellite: Allow unintended SCA certificate to authenticate Candlepin
The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA simple content access certificate for authentication with Candlepin...
CVE-2021-43116: Improper Authentication
An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login...
PT-2022-11396 · Red Hat +1 · Red Hat Satellite +1
Name of the Vulnerable Software and Affected Versions: Red Hat Satellite affected versions not specified Description: The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA simple content access certificate...