PT-2023-17002 · Sourcecodester · Sourcecodester Medicine Tracker System

Name of the Vulnerable Software and Affected Versions: SourceCodester Medicine Tracker System version 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file Users.php?f=save user. The manipulation of the arguments firstname, middlename, lastname, username...

CVE-2023-21460

Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting...

SAMSUNG Mobile Devices 授权问题漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile Devices SecSettings SMR Mar-2023 Release 1 version, which stems from the presence of improper...

CVE-2023-21460

Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting...

PT-2023-18229 · Unknown · Secsettings

Name of the Vulnerable Software and Affected Versions: SecSettings versions prior to SMR Mar-2023 Release 1 Description: The issue is related to improper authentication in SecSettings, allowing an attacker to reset the setting. Recommendations: For versions prior to SMR Mar-2023 Release 1, update...

CVE-2023-21460

Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting...

CVE-2023-21460

CVE-2023-21460 concerns Samsung SecSettings with improper authentication prior to SMR Mar-2023 Release 1. The vulnerability enables an attacker with local access to reset the SecSettings configuration. The issue is described consistently across sources as a failure of authentication in SecSetting...

Improper Authentication

WordPress is vulnerable to Improper Authentication. The vulnerability allows an attacker to obtain the email address of the user who posted a blog using the WordPress Post by Email Feature...

CVE-2022-44574

An improper authentication vulnerability exists in Avalanche version 6.3.x and below allows unauthenticated attacker to modify properties on specific port...

Avalanche 授权问题漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. Avalanche version 6.3.x and prior versions have a security vulnerability that stems from improper authentication. A...

IBM Financial Transaction Manager 输入验证错误漏洞

IBM Financial Transaction Manager is a financial transaction manager from International Business Machines IBM. The product is primarily used to monitor, track and report financial payments and transactions. A security vulnerability exists in IBM Financial Transaction Manager versions 3.2.0 throug...

CVE-2022-44574

Avalanche up to version 6.3.x is affected by an improper authentication vulnerability that allows an unauthenticated attacker to modify properties on a specific port. The CVE (CVE-2022-44574) is corroborated by multiple sources (NVD, Red Hat, CNNVD, CVE list, ZDI advisory) indicating the issue ar...

Atlassian Jira 8.0.x < 8.4.2 Multiple Vulnerabilties

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 7.13.9 or 8.0.x 8.4.2. It is, therefore, affected by multiple vulnerabilities: - A Cross-Site Scripting XSS vulnerability in Issue Navigator Basic Search. - A Improper...

Atlassian Jira < 7.13.9 Multiple Vulnerabilties

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 7.13.9 or 8.0.x 8.4.2. It is, therefore, affected by multiple vulnerabilities: - A Cross-Site Scripting XSS vulnerability in Issue Navigator Basic Search. - A Improper...

CVE-2022-33242

CVE-2022-33242: Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned libraries in the audio processing domain (audio PD). Based on multiple sources, the issue affects Qualcomm closed-source components and is characterized by local attack vector with low privileg...

CVE-2022-33242 Improper authentication in Qualcomm IPC

Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD...

PT-2023-13256 · Qualcomm · Qualcomm Ipc

Name of the Vulnerable Software and Affected Versions: Qualcomm IPC affected versions not specified Description: The issue is related to memory corruption due to improper authentication in Qualcomm IPC while loading unsigned libraries in the audio processing domain. Recommendations: At the moment...

Exploit for Improper Authentication in Redhat Keycloak

PoC for CVE-2023-0264 Keycloak vulnerability that allows ses...

CVE-2023-0228

Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2...

Authentication flaw

Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2...