The vulnerability of the NextCloud calendar application, a cloud-based software for creating and using NextCloud storage, relates to improper authentication procedures. This vulnerability allows attackers to bypass authentication checks.

The vulnerability of the Nextcloud calendar application, a cloud-based software for creating and using Nextcloud data storage, is related to improper authentication procedures. Exploiting this vulnerability allows an attacker to bypass authentication checks remotely...

The vulnerability of the org.xwiki.platform:xwiki-platform-wiki-rest-default component of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability allows attackers to escalate their privileges.

The vulnerability of the “org.xwiki.platform:xwiki-platform-wiki-rest-default” component of the XWiki Platform’s collaborative web application framework is related to improper authentication. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...

Improper Authentication

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Improper Authentication. An attacker can circumvent required actions configured by an administrator such as...

CVE-2021-47664

Due to improper authentication mechanism an unauthenticated remote attacker can enumerate valid usernames...

CVE-2025-3850

A vulnerability, which was classified as problematic, has been found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This issue affects some unknown processing of the component API. The manipulation leads to improper authentication. The attack may be initiated remotely. The complexity of an attack is...

CVE-2025-2492

An improper authentication control vulnerability exists in AiCloud. This vulnerability can be triggered by a crafted request, potentially leading to unauthorized execution of functions. Refer to the 'ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information...

Improper Authentication

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Improper Authentication due to improper handling of user session states during the multi-factor authentication process. An attacker can access sensitive information about other users by exploiting t...

Improper Authentication

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Improper Authentication due to improper enforcement of multi-factor authentication during the self-enrollment process. An attacker can bypass the intended security controls by exploiting this weakne...

Security Bulletin: Multiple vulnerabilities have been identified in Apache Solr shipped with IBM Operations Analytics - Log Analysis

Summary Multiple vulnerabilities in Apache Solr affect IBM Operations Analytics - Log Analysis. These have been addressed. Vulnerability Details CVEID:CVE-2024-45216 DESCRIPTION: Apache Solr could allow a remote attacker to bypass security restrictions, caused by improper authentication validatio...

Improper Authentication

rasapro is vulnerable to Improper Authentication. The vulnerability is due to voice connectors not properly implementing authentication, even when a token is configured in the credentials.yml file, allowing an attacker to submit voice data from an unauthenticated source...

CVE-2021-47664

CVE-2021-47664 describes an authentication issue that allows an unauthenticated remote attacker to enumerate valid usernames. The initial entry provides a CVSS v3.1 base score of 5.3 (Medium) with Network attack vector, Low attack complexity, and no privileges required. The connected sources reit...

CVE-2021-47664 Enumeration of valid user names

Due to improper authentication mechanism an unauthenticated remote attacker can enumerate valid usernames...

CVE-2021-47664 Enumeration of valid user names

Due to improper authentication mechanism an unauthenticated remote attacker can enumerate valid usernames...

WordPress plugin Flynax Bridge 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Franka Emika Robot 安全漏洞

Franka Emika Robot is a robot from the German company Franka. A security vulnerability exists in Franka Emika Robot that stems from an improper authentication mechanism that allows an unauthenticated, remote attacker to enumerate valid usernames...

WordPress plugin Flynax Bridge 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2025-42602

CVE-2025-42602 affects Meon KYC solutions. The connected documents describe an improper handling of access and refresh tokens in certain authentication API endpoints, enabling a remote attacker to intercept/manipulate API responses and gain unauthorized access to other user accounts. The vulnerab...

CVE-2025-42602 Improper Authentication Vulnerability in Meon KYC solutions

This vulnerability exists in Meon KYC solutions due to improper handling of access and refresh tokens in certain API endpoints of authentication process. A remote attacker could exploit this vulnerability by intercepting and manipulating the responses through API request body leading to...

CVE-2025-42602 Improper Authentication Vulnerability in Meon KYC solutions

This vulnerability exists in Meon KYC solutions due to improper handling of access and refresh tokens in certain API endpoints of authentication process. A remote attacker could exploit this vulnerability by intercepting and manipulating the responses through API request body leading to...

CVE-2025-3850

A vulnerability, which was classified as problematic, has been found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0. This issue affects some unknown processing of the component API. The manipulation leads to improper authentication. The attack may be initiated remotely. The complexity of an attack is...