8639 matches found
CVE-2021-38686
An improper authentication vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later...
CVE-2021-38686: Improper Authentication
An improper authentication vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later...
PT-2021-22257
Name of the Vulnerable Software and Affected Versions QNAP VioStor versions prior to QVR FW 5.1.6 build 20211109 Description An improper authentication issue has been reported, allowing attackers to compromise the system's security if exploited. Recommendations For QNAP VioStor versions prior to...
Ivanti Avalanche User Management Improper Authentication Privilege Escalation Vulnerability
This vulnerability allows remote attackers to escalate privileges on affected installations of Ivanti Avalanche. Authentication is required to exploit this vulnerability. The specific flaw exists within the userManagement.jsf page. The issue results from improper authentication. An attacker can...
CVE-2021-0096
Improper authentication in the software installer for the IntelR NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN, NUC7i7DN before version 1.78.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2021-33087
Mode C: CVE-2021-33087 affects the Intel NUC M15 Laptop Kit driver pack (Management Engine) installer prior to version 15.0.10.1508. The Red Hat advisory and Intel advisory confirm an improper authentication issue in the installer that may allow an authenticated user to cause a denial of service ...
CVE-2021-33087
Improper authentication in the installer for the IntelR NUC M15 Laptop Kit Management Engine driver pack before version 15.0.10.1508 may allow an authenticated user to potentially enable denial of service via local access...
PT-2021-20039
Name of the Vulnerable Software and Affected Versions IntelR NUC M15 Laptop Kit Management Engine driver pack versions prior to 15.0.10.1508 Description The issue is related to improper authentication in the installer for the IntelR NUC M15 Laptop Kit Management Engine driver pack. This may allow...
CVE-2021-33087: Improper Authentication
Improper authentication in the installer for the IntelR NUC M15 Laptop Kit Management Engine driver pack before version 15.0.10.1508 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2021-0096: Improper Authentication
Improper authentication in the software installer for the IntelR NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN, NUC7i7DN before version 1.78.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
PT-2021-12902
Name of the Vulnerable Software and Affected Versions: IntelR NUC HDMI Firmware Update Tool versions prior to 1.78.1.1 Description: The issue is related to improper authentication in the software installer, which may allow an authenticated user to potentially enable escalation of privilege via...
CVE-2021-37910 ASUS GT-AXE11000, RT-AX3000, RT-AX55, RT-AX58U, TUF-AX3000 - Improper Authentication
ASUS routers Wi-Fi protected access protocol WPA2 and WPA3-SAE has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE authentication frames...
CVE-2021-3519: Improper Authentication
A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes...
Man-In-The-Middle Attack (MitM)
trafficserver is vulnerable to man in the middle attacks. The vulnerability exists due to an Improper Authentication vulnerability in TLS origin verification of Apache Traffic Server...
CVE-2021-43203: Improper Authentication
In JetBrains Ktor before 1.6.4, nonce verification during the OAuth2 authentication process is implemented improperly...
CVE-2021-31602: Improper Authentication
An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. The Security Model has different layers of Access Control. One of these layers is the applicationContext security, which is defined in the applicationContext-spring-security.xml...
CVE-2021-42072: Improper Authentication
An issue was discovered in Barrier before 2.4.0. The barriers component aka the server-side implementation of Barrier does not sufficiently verify the identify of connecting clients. Clients can thus exploit weaknesses in the provided protocol to cause denial-of-service or stage further attacks...
CVE-2021-24647: Improper Authentication
The Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.1.7.6 has a flaw in the social login implementation, allowing unauthenticated attacker to login as any user on the site by only knowing their user ID or userna...
CVE-2021-43414: Improper Authentication
An issue was discovered in GNU Hurd before 0.9 20210404-9. The use of an authentication protocol in the proc server is vulnerable to man-in-the-middle attacks, which can be exploited for local privilege escalation to get full root access...
