SAP AS ABAP 和 SAP S4 HANA 安全漏洞

SAP Netweaver is a service-oriented, integrated application platform from SAP, which provides a development and runtime environment for SAP applications. The platform mainly provides development and operation environment for SAP applications.ABAP is an application server running in NetWeaver and...

CVE-2020-27408: Improper Authentication

OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file ResetUserInfo.php that allow an unauthenticated attacker to change the password of arbitrary users...

Exploit for Improper Authentication in Macally Wifisd2-2A82_Firmware

PoC exploit for CVE-2020-29669, an arbitrary file upload vulnera...

CVE-2020-7533

CWE-287: Improper Authentication vulnerability exists which could cause the execution of commands on the webserver without authentication when sending specially crafted HTTP requests...

CVE-2020-7533

CWE-287: Improper Authentication vulnerability exists which could cause the execution of commands on the webserver without authentication when sending specially crafted HTTP requests...

The vulnerability of the APTARE data management platform, related to incorrect authorization, allows a hacker to execute arbitrary code.

The vulnerability of the APTARE data management platform is related to improper authentication. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2020-7533: Improper Authentication

CWE-287: Improper Authentication vulnerability exists which could cause the execution of commands on the webserver without authentication when sending specially crafted HTTP requests...

CVE-2020-29392: Improper Authentication

The Estil Hill Lock Password Manager Safe app 2.3 for iOS has a 06 backdoor password. An attacker with physical access can unlock the password manager without knowing the master password set by the user...

CVE-2020-29127: Improper Authentication

An issue was discovered on Fujitsu Eternus Storage DX200 S4 devices through 2020-11-25. After logging into the portal as a root user using any web browser, the portal can be accessed with root privileges when the URI cgi-bin/csp?cspid=XXXXXXXXXX&csppage=cgiPgOverview&csplang=en is visited from a...

CVE-2020-29378: Improper Authentication

An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. It is possible to elevate the privilege of a CLI user to full administrative access by using the password !j@ly$z%x6x7q8c9z for the...

DEBIAN-CVE-2019-14553

Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access...

CVE-2019-14553

Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access...

CVE-2019-14553

Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access...

UBUNTU-CVE-2019-14553

Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access...

CVE-2019-14553

Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access...

CVE-2019-14553

CVE-2019-14553 stems from an improper authentication issue in EDK II (EFI Development Kit II). The vulnerability is described as allowing a privileged user to potentially enable information disclosure via network access. Documented in multiple advisories (e.g., EulerOS, Alibaba Cloud Linux 3, Ora...

CVE-2020-1778: Improper Authentication

When OTRS uses multiple backends for user authentication with LDAP, agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions...

CVE-2020-4771: Improper Authentication

IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.10.and 7.1.0.000 through 7.1.11 could allow a remote attacker to obtain sensitive information, caused by improper authentication of a websocket endpoint. By using known tools to subscribe to the websocket event stream, an attacker could...

CVE-2019-14553: Improper Authentication

Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access...

CVE-2020-28896: Improper Authentication

Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $sslforcetls was processed if an IMAP server's initial server response was invalid. The connection was not properly closed, and the code could continue attempting to authenticate. This could result in authentication credentials...