CVE-2022-32276: Improper Authentication

Grafana 8.4.3 allows unauthenticated access via for example a /dashboard/snapshot/?orgId=0 URI. NOTE: the vendor considers this a UI bug, not a vulnerability...

EulerOS 2.0 SP5 : 389-ds-base (EulerOS-SA-2022-1881)

According to the versions of the 389-ds-base packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to...

CVE-2022-33750: Improper Authentication

CA Automic Automation 12.2 and 12.3 contain an authentication error vulnerability in the Automic agent that could allow a remote attacker to potentially execute arbitrary commands...

CVE-2018-18907: Improper Authentication

An issue was discovered on D-Link DIR-850L 1.21WW devices. A partially completed WPA handshake is sufficient for obtaining full access to the wireless network. A client can access the network by sending packets on Data Frames to the AP without encryption...

CVE-2022-20798: Improper Authentication

A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager, formerly known as Cisco Security Management Appliance SMA, and Cisco Email Security Appliance ESA could allow an unauthenticated, remote attacker to bypass authentication and log in to the web...

CVE-2022-30150: Improper Authentication

Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability...

CVE-2022-20733: Improper Authentication

A vulnerability in the login page of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to log in without credentials and access all roles without any restrictions. This vulnerability is due to exposed sensitive Security Assertion Markup Language SAML metadata. An...

CVE-2021-35094

Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-35094: Improper Authentication

Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2022-22259

There is an improper authentication vulnerability in FLMG-10 10.0.1.0H100SP22C00. Successful exploitation of this vulnerability may lead to a control of the victim device...

CVE-2022-22259

There is an improper authentication vulnerability in FLMG-10 10.0.1.0H100SP22C00. Successful exploitation of this vulnerability may lead to a control of the victim device...

CVE-2022-22259

There is an improper authentication vulnerability in FLMG-10 10.0.1.0H100SP22C00. Successful exploitation of this vulnerability may lead to a control of the victim device...

Authentication flaw

There is an improper authentication vulnerability in FLMG-10 10.0.1.0H100SP22C00. Successful exploitation of this vulnerability may lead to a control of the victim device...

CVE-2022-22259

There is an improper authentication vulnerability in FLMG-10 10.0.1.0H100SP22C00. Successful exploitation of this vulnerability may lead to a control of the victim device...

CVE-2022-22259

CVE-2022-22259 describes an improper authentication vulnerability in Huawei FLMG-10 devices (example: 10.0.1.0/H100SP22C00). The issue is triggered by authentication flaws that could allow an attacker to gain control of the victim device. The CVSSv3.1 vector (PHYSICAL access, LOW attack complexit...

CVE-2022-22259: Improper Authentication

There is an improper authentication vulnerability in FLMG-10 10.0.1.0H100SP22C00. Successful exploitation of this vulnerability may lead to a control of the victim device...

TP-LINK AX50 代码注入漏洞

The TP-LINK AX50 is a router device from China P&L TP-LINK. The TP-LINK AX50 suffers from a code injection vulnerability that stems from the fact that importing a malicious backup file via the web interface may result in remote code execution due to improper authentication...

CVE-2022-30749: Improper Authentication

Improper access control vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to add arbitrary smart devices by bypassing login activity...

Klapp App 授权问题漏洞

Klapp App is a Cordova-based web and mobile application from Klapp, Switzerland. A security vulnerability exists in Klapp App that stems from incorrect authentication in JSON WEB TOKEN...

Samsung mobile 输入验证错误漏洞

Samsung mobile is a cell phone from Samsung, a South Korean company. Samsung mobile RemoteViews suffers from an elevation of privilege vulnerability that stems from incorrect authentication in RemoteViews. An attacker could use this vulnerability to launch certain activities...