CVE-2025-27254

CWE-282 "Improper Ownership Management" in GE Vernova EnerVista UR Setup allows Authentication Bypass. The software's startup authentication can be disabled by altering a Windows registry setting that any user can modify...

GE Vernova EnerVista UR 授权问题漏洞

GE Vernova EnerVista UR is a device configuration tool from GE Vernova USA that is compatible with all UR relay applications. An authorization issue vulnerability exists in the GE Vernova EnerVista UR that stems from improper authentication and could lead to authentication bypass...

WordPress plugin School Management System 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

Improper Authentication

Rancher is vulnerable to Improper Authentication. The vulnerability is due to improper validation of SAML assertion data due to Rancher trusting and using unvalidated values in authentication cookies, allowing attackers to manipulate session data and escalate privileges...

CVE-2025-25302

Rembg (versions 2.0.57 and earlier) is reported to have a CORS misconfiguration where the CORS middleware reflects all origins and allow_credentials is set to True. This combination effectively enables cross-origin requests from any site and could allow authenticated cross-site requests to the re...

CVE-2024-38426 Improper Authentication in Modem

While processing the authentication message in UE, improper authentication may lead to information disclosure...

CVE-2024-38426 Improper Authentication in Modem

While processing the authentication message in UE, improper authentication may lead to information disclosure...

Qualcomm Chipsets 授权问题漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An authorization issue vulnerability exists in Qualcomm Chipsets that stems from improper authentication and could lead to information disclosure...

CVE-2024-37566

Infoblox NIOS through 8.6.4 has Improper Authentication for Grids...

WordPress plugin SetSail Membership 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-37566

Infoblox NIOS through 8.6.4 has Improper Authentication for Grids...

CVE-2024-37566

Infoblox NIOS through 8.6.4 has Improper Authentication for Grids...

CVE-2024-37566

Infoblox NIOS (versions up to 8.6.4) is affected by an improper authentication issue for Grids. The vulnerability stems from Grid authentication weaknesses, potentially enabling unauthorized access. Multiple sources corroborate the impact on Infoblox NIOS prior to 8.6.5. A remediation path found ...

CVE-2024-37566

Infoblox NIOS through 8.6.4 has Improper Authentication for Grids...

Infoblox NIOS 访问控制错误漏洞

Infoblox NIOS is a system for managing and automating network devices and services from Infoblox, Inc. It is used to automate the configuration and management of networks and to ensure stable network operation. A security vulnerability exists in Infoblox NIOS version 8.6.4 and prior versions, whi...

The vulnerability of the microprogrammed software for Intel Ethernet Connection I219 adapters, related to improper authentication, allows a hacker to trigger a service failure.

The vulnerability of the Microprogrammed Software for Intel Ethernet Connection I219 adapter is related to improper authorization. Exploiting this vulnerability can allow an attacker to cause a service failure...

Siemens SIMATIC Devices Linux Kernel Improper Authentication (CVE-2022-2503)

Dm-verity is used for extending root-of-trust to root filesystems. LoadPin builds on this property to restrict module/firmware loads to just the trusted root filesystem. Device-mapper table reloads currently allow users with root privileges to switch out the target with an equivalent dm-linear...

Navidrome 授权问题漏洞

Navidrome is a web-based open source music collection server and streamer from Navidrome Open Source. Used to freely listen to music collections from any browser or mobile device. An authorization issue vulnerability exists in Navidrome versions 0.52.0 up to and including 0.54.5, which stems from...

CVE-2025-1387

Orca HCM from LEARNING DIGITAL has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to log in to the system as any user...

SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker to bypass authentication...