CVE-2022-25832

Improper authentication vulnerability in S Secure prior to SMR Apr-2022 Release 1 allows physical attackers to use locked Myfiles app without authentication...

CVE-2022-25832: Improper Authentication

Improper authentication vulnerability in S Secure prior to SMR Apr-2022 Release 1 allows physical attackers to use locked Myfiles app without authentication...

PT-2022-17559

Name of the Vulnerable Software and Affected Versions S Secure versions prior to SMR Apr-2022 Release 1 Description The issue allows physical attackers to use the locked Myfiles app without authentication due to an improper authentication vulnerability. Recommendations For versions prior to SMR...

PT-2022-18628

Name of the Vulnerable Software and Affected Versions Samsung Internet versions prior to 16.2.1 Description The issue is related to an improper authentication vulnerability in the SecretMode of Samsung Internet. This vulnerability allows attackers to access the bookmark tab without proper...

CVE-2022-27839: Improper Authentication

Improper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1 allows attackers to access bookmark tab without proper credentials...

PT-2022-17560

Name of the Vulnerable Software and Affected Versions ImsService versions prior to SMR Apr-2022 Release 1 Description The issue is related to improper authentication in ImsService, allowing attackers to obtain the IMSI without the necessary READ PRIVILEGED PHONE STATE permission. Recommendations...

CVE-2022-25833: Improper Authentication

Improper authentication in ImsService prior to SMR Apr-2022 Release 1 allows attackers to get IMSI without READPRIVILEGEDPHONESTATE permission...

CVE-2021-43177: Undefined Security Weakness

As a result of an incomplete fix for CVE-2015-7225, in versions of devise-two-factor prior to 4.0.2 it is possible to reuse a One-Time-Password OTP for one and only one immediately trailing interval. CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N...

CVE-2021-46740: Improper Authentication

The device authentication service module has a defect vulnerability introduced in the design process.Successful exploitation of this vulnerability may affect data confidentiality...

MGASA-2022-0134 Updated 389-ds-base packages fix security vulnerability

A vulnerability was discovered in the 389 Directory Server that allows an unauthenticated attacker with network access to the LDAP port to cause a denial of service. The denial of service is triggered by a single message sent over a TCP connection, no bind or other authentication is required. The...

SAP Information System 1.0.0 Missing Authorization

Exploit Title: SAP Information System 1.0.0 - Improper Authentication Date: 06/04/2022 CVE: CVE-2022-1248 Exploit Author: Mr Empy Software Link: https://www.sourcecodester.com/php/15262/sap-information-system-using-phppdo-oop.html Version: 1.0.0 Tested on: Linux Title: ================ SAP...

PT-2022-2365

Name of the Vulnerable Software and Affected Versions FLMG-10 version 10.0.1.0H100SP22C00 Description The issue is related to an improper authentication mechanism in the software, which can be exploited to gain control of the victim device. Successful exploitation may allow an attacker to load...

CVE-2022-1248: Improper Authentication

A vulnerability was found in SAP Information System 1.0 which has been rated as critical. Affected by this issue is the file /SAPInformationSystem/controllers/addadmin.php. An unauthenticated attacker is able to create a new admin account for the web application with a simple POST request. Exploi...

The vulnerability of the Dynamic Security plugin of the Mosquitto messaging broker allows a hacker to gain access to confidential data.

The vulnerability of the Dynamic Security plugin of the Mosquitto messaging broker is related to improper authentication. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to confidential data...

The vulnerability of Jetty servlet containers, related to improper authentication, allows attackers to gain access to confidential data.

The vulnerability of Jetty servlet containers is related to improper authentication. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...

CVE-2022-28376: Improper Authentication

Verizon 5G Home LVSKIHP outside devices through 2022-02-15 allow anyone knowing the device's serial number to access a CPE admin website, e.g., at the 10.0.0.1 IP address. The password for the verizon username is calculated by concatenating the serial number and the model i.e., the LVSKIHP string...

CVE-2022-23156

Wyse Device Agent version 14.6.1.4 and below contain an Improper Authentication vulnerability. A malicious user could potentially exploit this vulnerability by providing invalid input in order to obtain a connection to WMS server...

CVE-2022-23156

The CVE-2022-23156 issue affects Dell Wyse Device Agent (Wyse Device Agent) version 14.6.1.4 and earlier, due to an Improper Authentication flaw that could allow a local attacker to obtain a connection to the WMS server. Public sources in connected documents confirm this is a local authentication...

CVE-2022-23156

Wyse Device Agent version 14.6.1.4 and below contain an Improper Authentication vulnerability. A malicious user could potentially exploit this vulnerability by providing invalid input in order to obtain a connection to WMS server...

CVE-2022-23156: Improper Authentication

Wyse Device Agent version 14.6.1.4 and below contain an Improper Authentication vulnerability. A malicious user could potentially exploit this vulnerability by providing invalid input in order to obtain a connection to WMS server...