8641 matches found
CVE-2022-22283: Improper Authentication
Improper session management vulnerability in Samsung Health prior to 6.20.1.005 prevents logging out from Samsung Health App...
CVE-2022-22289: Improper Authentication
Improper access control vulnerability in S Assistant prior to version 7.5 allows attacker to remotely get senstive information...
Rockstar Games: Improper Authentication inside the Rockstar Games Launcher which leads to Account takeover to some extend
An improper authentication vulnerability was discovered in the Rockstar Games Launcher. This vulnerability allowed attackers who had already gained access to a victim's Steam or Epic Games account to also gain access to the victim's Social Club account. By exploiting the "Switch Account" feature...
CVE-2021-45389: Improper Authentication
A flaw was found with the JWT token. A self-signed JWT token could be injected into the update manager and bypass the authentication process, thus could escalate privileges. This affects StarWind SAN and NAS build 1578 and StarWind Command Center build 6864...
CVE-2021-45917
The server-request receiver function of Shockwall system has an improper authentication vulnerability. An authenticated attacker of an agent computer within the local area network can use the local registry information to launch server-side request forgery SSRF attack on another agent computer,...
CVE-2021-45917 SUN & MOON RISE CO., LTD. Shockwall - Improper Authentication
The server-request receiver function of Shockwall system has an improper authentication vulnerability. An authenticated attacker of an agent computer within the local area network can use the local registry information to launch server-side request forgery SSRF attack on another agent computer,...
CVE-2021-45917: Improper Authentication
The server-request receiver function of Shockwall system has an improper authentication vulnerability. An authenticated attacker of an agent computer within the local area network can use the local registry information to launch server-side request forgery SSRF attack on another agent computer,...
CVE-2021-44160
Carinal Tien Hospital Health Report System’s login page has improper authentication, a remote attacker can acquire another general user’s privilege by modifying the cookie parameter without authentication. The attacker can then perform limited operations on the system or modify data, making the...
CVE-2021-20168: Improper Authentication
Netgear RAX43 version 1.0.3.96 does not have sufficient protections to the UART interface. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection, login with default credentials, and execute commands as the root user. These default...
CVE-2021-23147: Improper Authentication
Netgear Nighthawk R6700 version 1.0.4.120 does not have sufficient protections for the UART console. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection and execute commands as the root user without authentication...
CVE-2021-45379: Improper Authentication
Glewlwyd 2.0.0, fixed in 2.6.1 is affected by an incorrect access control vulnerability. One user can attempt to log in as another user without its password...
CVE-2021-20161: Improper Authentication
Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART functionality. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection. No username or password is required and the user is given a root shell with...
CVE-2021-38688
An improper authentication vulnerability has been reported to affect Android App Qfile. If exploited, this vulnerability allows attackers to compromise app and access information We have already fixed this vulnerability in the following versions of Qfile: Qfile 3.0.0.1105 and later...
CVE-2021-38688
An improper authentication vulnerability has been reported to affect Android App Qfile. If exploited, this vulnerability allows attackers to compromise app and access information We have already fixed this vulnerability in the following versions of Qfile: Qfile 3.0.0.1105 and later...
CVE-2021-38688 Improper Authentication in Qfile
An improper authentication vulnerability has been reported to affect Android App Qfile. If exploited, this vulnerability allows attackers to compromise app and access information We have already fixed this vulnerability in the following versions of Qfile: Qfile 3.0.0.1105 and later...
CVE-2021-44160
Carinal Tien Hospital Health Report System’s login page has improper authentication, a remote attacker can acquire another general user’s privilege by modifying the cookie parameter without authentication. The attacker can then perform limited operations on the system or modify data, making the...
CVE-2021-44160
The CVE refers to Carinal Tien Hospital Health Report System, whose login page authenticates improperly. A remote attacker can modify the cookie parameter to bypass authentication and gain another general user’s privileges, enabling limited system operations or data modification and making the se...
CVE-2021-38688: Improper Authentication
An improper authentication vulnerability has been reported to affect Android App Qfile. If exploited, this vulnerability allows attackers to compromise app and access information We have already fixed this vulnerability in the following versions of Qfile: Qfile 3.0.0.1105 and later...
PT-2021-22258
Name of the Vulnerable Software and Affected Versions Qfile versions prior to 3.0.0.1105 Description An improper authentication issue has been reported to affect the Android App Qfile. If exploited, this issue allows attackers to compromise the app and access information. Recommendations For...