CVE-2022-1426: Improper Authentication

An issue has been discovered in GitLab affecting all versions starting from 12.6 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly authenticating a user that had some certain amount of information which allowed ...

keepalived: dbus access control bypass

A flaw was found in keepalived, where an improper authentication vulnerability allows an unprivileged user to change properties that could lead to an access-control bypass...

CVE-2022-30238

A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to take over the admin account when an attacker hijacks a session. Affected Products: Wiser Smart, EER21000 & EER21001 V4.5 and prior...

PT-2022-3027

Name of the Vulnerable Software and Affected Versions IntelR In-Band Manageability software versions prior to 2.13.0 Description The issue is related to improper authentication in the IntelR In-Band Manageability software, which may allow a privileged user to potentially enable escalation of...

CVE-2022-29883: Improper Authentication

A vulnerability has been identified in SICAM T All versions V3.0. Affected devices do not restrict unauthenticated access to certain pages of the web interface. This could allow an attacker to delete log files without authentication...

Intel® In-Band Manageability Advisory

Summary: Potential security vulnerabilities in the Intel® In-Band Manageability software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-0193 Description: Improper authentication in the Inte...

QNAP Photo Station Improper Authentication Vulnerability (QSA-22-15)

QNAP Photo Station is prone to an improper authentication vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...

CVE-2019-12254 TECSON/GOK: Improper Authentication and Access Control on multiple devices

In multiple Tecson Tankspion and GOKs SmartBox 4 products the affected application doesn't properly restrict access to an endpoint that is responsible for saving settings, to a unauthenticated user with limited access rights. Based on the lack of adequately implemented access-control rules, by...

CVE-2021-26253: Improper Authentication

A potential vulnerability in Splunk Enterprise's implementation of DUO MFA allows for bypassing the MFA verification in Splunk Enterprise versions before 8.1.6. The potential vulnerability impacts Splunk Enterprise instances configured to use DUO MFA and does not impact or affect a DUO product or...

CVE-2019-12254: Improper Authentication

In multiple Tecson Tankspion and GOKs SmartBox 4 products the affected application doesn't properly restrict access to an endpoint that is responsible for saving settings, to a unauthenticated user with limited access rights. Based on the lack of adequately implemented access-control rules, by...

CVE-2021-44057

An improper authentication vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Photo Station: Photo Station...

CVE-2021-44056

An improper authentication vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Video Station: Video Station...

CVE-2021-44057

An improper authentication vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Photo Station: Photo Station...

CVE-2021-44056

An improper authentication vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Video Station: Video Station...

Authentication flaw

An improper authentication vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Video Station: Video Station...

CVE-2021-44056 Improper authentication in Video Station

An improper authentication vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Video Station: Video Station...

GHSA-33VG-HPX5-PFXG omniauth-facebook Improper Authentication vulnerability

RubyGem omniauth-facebook has an access token security vulnerability...

PT-2022-3454

Name of the Vulnerable Software and Affected Versions Photo Station versions prior to 5.4.13 Photo Station versions prior to 5.7.16 Photo Station versions prior to 6.0.20 Description An improper authentication issue affects QNAP devices running Photo Station, allowing attackers to bypass security...

CVE-2021-44057: Improper Authentication

An improper authentication vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Photo Station: Photo Station...

PT-2022-3455

Name of the Vulnerable Software and Affected Versions Video Station versions prior to 5.1.8 Video Station versions prior to 5.3.13 Video Station versions prior to 5.5.9 Description An improper authentication issue affects QNAP devices running Video Station, allowing attackers to compromise system...