4441 matches found
Microsoft Exchange Online Tampering Vulnerability
Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network...
PT-2026-64158
Name of the Vulnerable Software and Affected Versions MOVEit Transfer versions prior to 2025.1.5 MOVEit Transfer versions 2026.0.0 through 2026.0.2 Description An improper authentication issue exists in Progress MOVEit Transfer, which may allow an attacker to bypass authentication mechanisms...
Check Point SmartConsole Improper Authentication Vulnerability
Check Point SmartConsole contains an improper authentication vulnerability which could allow an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication via the CreateAccessToken process. An attacker can gain elevated privileges by supplying a restricted token in the Authorization: Basic :x-oauth-basic format, which bypasses authentication checks and allows...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication via the CreateAccessToken process. An attacker can gain elevated privileges by supplying a restricted token in the Authorization: Basic :x-oauth-basic format, which bypasses authentication checks and allows...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication via the CreateAccessToken process. An attacker can gain elevated privileges by supplying a restricted token in the Authorization: Basic :x-oauth-basic format, which bypasses authentication checks and allows...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication via the CreateAccessToken process. An attacker can gain elevated privileges by supplying a restricted token in the Authorization: Basic :x-oauth-basic format, which bypasses authentication checks and allows...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication via the CreateAccessToken process. An attacker can gain elevated privileges by supplying a restricted token in the Authorization: Basic :x-oauth-basic format, which bypasses authentication checks and allows...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication via the CreateAccessToken process. An attacker can gain elevated privileges by supplying a restricted token in the Authorization: Basic :x-oauth-basic format, which bypasses authentication checks and allows...
Improper Authentication
go.woodpecker-ci.org/woodpecker/v3 is vulnerable to Improper Authentication. The vulnerability is due to the gRPC layer trusting a client-supplied agentid value instead of the authenticated agent identity after JWT verification, which allows an authenticated attacker to impersonate any other agen...
CVE-2026-6423
A local privilege escalation vulnerability in ESET Inspect Connector. The vulnerability was caused by improper authentication in an IPC channel...
EUVD-2026-44895
A local privilege escalation vulnerability in ESET Inspect Connector. The vulnerability was caused by improper authentication in an IPC channel...
Improper Authentication
Apollo ConfigService is vulnerable to Improper Authentication. The vulnerability is due to incorrect parsing of the appId during authentication for the raw configuration file endpoint, which allows an attacker to bypass AccessKey or management key authentication and access protected configuration...
Improper Authentication
Apollo ConfigService is vulnerable to Improper Authentication. The vulnerability is due to improper validation of non-canonical appId values during authentication, which allows an attacker to bypass AccessKey or management key protections and gain unauthorized access to protected configuration da...
EUVD-2026-44028
Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network...
CVE-2026-50365
Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges over an adjacent network...
CVE-2026-56185
Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network...
CVE-2026-56169
Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network...
