4569 matches found
CVE-2022-23501
CVE-2022-23501 affects TYPO3 core: prior to versions 8.7.49 ELTS, 9.5.38 ELTS, 10.4.33, 11.5.20, and 12.1.1, the frontend login restriction can be bypassed due to improper authentication through username ambiguity, potentially allowing access to another account. The issue is patched in 8.7.49 ELT...
CVE-2022-23501 TYPO3 vulnerable to Improper Authentication in Frontend Login
TYPO3 is an open source PHP based web content management system. In versions prior to 8.7.49, 9.5.38, 10.4.33, 11.5.20, and 12.1.1 TYPO3 is vulnerable to Improper Authentication. Restricting frontend login to specific users, organized in different storage folders partitions, can be bypassed. A...
CVE-2022-23501 TYPO3 vulnerable to Improper Authentication in Frontend Login
TYPO3 is an open source PHP based web content management system. In versions prior to 8.7.49, 9.5.38, 10.4.33, 11.5.20, and 12.1.1 TYPO3 is vulnerable to Improper Authentication. Restricting frontend login to specific users, organized in different storage folders partitions, can be bypassed. A...
PT-2022-16034 · Typo3 · Typo3
Name of the Vulnerable Software and Affected Versions: TYPO3 versions prior to 8.7.49 TYPO3 versions prior to 9.5.38 TYPO3 versions prior to 10.4.33 TYPO3 versions prior to 11.5.20 TYPO3 versions prior to 12.1.1 Description: The issue concerns Improper Authentication in TYPO3, an open source PHP...
CVE-2022-29838
Improper Authentication vulnerability in the encrypted volumes and auto mount features of Western Digital My Cloud devices allows insecure direct access to the drive information in the case of a device reset. This issue affects: Western Digital My Cloud My Cloud versions prior to 5.25.124 on Linu...
Authentication flaw
Improper Authentication vulnerability in the encrypted volumes and auto mount features of Western Digital My Cloud devices allows insecure direct access to the drive information in the case of a device reset. This issue affects: Western Digital My Cloud My Cloud versions prior to 5.25.124 on Linu...
CVE-2022-29838
CVE-2022-29838 describes an Improper Authentication vulnerability in the encrypted volumes and auto-mount features of Western Digital My Cloud devices. The issue allows insecure direct access to drive information in the event of a device reset. Affected product: Western Digital My Cloud (Linux) w...
CVE-2022-29838 Authentication issue with the encrypted volumes and auto mount feature in My Cloud devices
Improper Authentication vulnerability in the encrypted volumes and auto mount features of Western Digital My Cloud devices allows insecure direct access to the drive information in the case of a device reset. This issue affects: Western Digital My Cloud My Cloud versions prior to 5.25.124 on Linu...
CVE-2022-39901
Improper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to disable the network traffic encryption between UE and gNodeB...
CVE-2022-39899
Improper authentication vulnerability in Samsung WindowManagerService prior to SMR Dec-2022 Release 1 allows attacker to send the input event using S Pen gesture...
CVE-2022-39899
CVE-2022-39899 is an improper authentication vulnerability in Samsung WindowManagerService prior to SMR Dec-2022 Release 1. The issue can allow a local attacker to send input events via S Pen gestures due to insufficient authentication around the WindowManagerService. Affected software is Samsung...
PT-2022-25094 · Samsung · Exynos Baseband
Name of the Vulnerable Software and Affected Versions: Exynos baseband versions prior to SMR DEC-2022 Release 1 Description: The issue is related to improper authentication in the Exynos baseband, which allows a remote attacker to disable network traffic encryption between the User Equipment UE a...
CVE-2022-39901
Improper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to disable the network traffic encryption between UE and gNodeB...
PT-2022-25092 · Samsung · Windowmanagerservices
Name of the Vulnerable Software and Affected Versions: Samsung WindowManagerService versions prior to SMR Dec-2022 Release 1 Description: The issue is related to improper authentication in the Samsung WindowManagerService, allowing an attacker to send input events using S Pen gestures...
CVE-2022-44620
Improper authentication vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings...
CVE-2022-44620
CVE-2022-44620 affects UNIMO UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware up to version 71x10.1.107112.43A, caused by an improper authentication flaw. An authenticated remote attacker can execute arbitrary OS commands or modify device settings. The issue is documented across multiple feeds (NVD entr...
CVE-2022-44620
Improper authentication vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter the device settings...
CVE-2022-43549
Improper authentication in Veeam Backup for Google Cloud v1.0 and v3.0 allows attackers to bypass authentication mechanisms...
CVE-2022-43549
CVE-2022-43549 : Improper authentication in Veeam Backup for Google Cloud (versions 1.0 and 3.0) allows an attacker to bypass authentication, rated CRITICAL (CVSSv3.1: 9.8). Affected component is the Backup Appliance used in Veeam Backup for Google Cloud. The vulnerability enables unauthorized ac...