4590 matches found
PT-2021-23267 · Atlassian · Jira Service Management Server +1
Name of the Vulnerable Software and Affected Versions: Atlassian Jira Server and Data Center versions prior to 8.19.1 Description: The issue allows a remote attacker who has had their access revoked from Jira Service Management to enable and disable Issue Collectors on Jira Service Management...
Cisco Small Business RV Series Routers 操作系统命令注入漏洞
Cisco Small Business RV Series Routers is an RV Series router from Cisco, U.S.A. A command injection vulnerability exists in Cisco Small Business RV Series Routers, which stems from a network system or product that does not properly authenticate incoming data. An authenticated remote attacker wit...
PT-2021-5195 · Apache · Apache Traffic Server
Name of the Vulnerable Software and Affected Versions: Apache Traffic Server versions 8.0.0 through 8.0.8 Description: The issue is related to an Improper Authentication vulnerability in the TLS origin verification of Apache Traffic Server, which can be exploited for man-in-the-middle attacks. Th...
Fortinet FortiOS SSL VPN Improper Authentication Vulnerability
Fortinet FortiOS SSL VPN contains an improper authentication vulnerability that may allow a user to login successfully without being prompted for the second factor of authentication FortiToken if they change the case in their username...
CVE-2021-30302
Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired...
CVE-2021-30312
Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon...
CVE-2021-30302
CVE-2021-30302 is a Qualcomm/Qualcomm snapdragon related information disclosure where an unauthenticated user may exploit improper authentication of EAP WAPI EAPOL frames to access sensitive data. The issue is tied to Qualcomm components (including closed‑source parts) across multiple Snapdragon ...
CVE-2021-37123
There is an improper authentication vulnerability in Hero-CT060 before 1.0.0.200. The vulnerability is due to that when an user wants to do certain operation, the software does not insufficiently validate the user's identity. Successful exploit could allow the attacker to do certain operations...
CVE-2021-37123
There is an improper authentication vulnerability in Hero-CT060 before 1.0.0.200. The vulnerability is due to that when an user wants to do certain operation, the software does not insufficiently validate the user's identity. Successful exploit could allow the attacker to do certain operations...
CVE-2021-37123
CVE-2021-37123 affects Huawei Hero-CT060 prior to version 1.0.0.200. The issue is an improper authentication vulnerability caused by insufficient validation of user identity, allowing an attacker to perform operations beyond authorization. Huawei’s advisory HWPSIRT-2021-27560 notes that software ...
CVE-2021-37123
There is an improper authentication vulnerability in Hero-CT060 before 1.0.0.200. The vulnerability is due to that when an user wants to do certain operation, the software does not insufficiently validate the user's identity. Successful exploit could allow the attacker to do certain operations...
CVE-2021-25484
Improper authentication in InputManagerService prior to SMR Oct-2021 Release 1 allows monitoring the touch event...
CVE-2021-25484
Improper authentication in InputManagerService prior to SMR Oct-2021 Release 1 allows monitoring the touch event...
Authentication flaw
Improper authentication in InputManagerService prior to SMR Oct-2021 Release 1 allows monitoring the touch event...
CVE-2021-25484
Improper authentication in InputManagerService prior to SMR Oct-2021 Release 1 allows monitoring the touch event...
CVE-2021-25484
Improper authentication in InputManagerService prior to SMR Oct-2021 Release 1 allows monitoring the touch event...
CVE-2021-25484
The CVE-2021-25484 entry concerns an improper authentication flaw in InputManagerService. Affected component: InputManagerService (Samsung SMR prior to Oct-2021 Release 1). Impact stated: it allows monitoring the touch event. Documented references indicate a Samsung security update (securityUpdat...
The vulnerability of the Bluetooth protocol stack for the Linux BlueZ operating system, related to improper authentication, allows a hacker to gain access to confidential data.
The vulnerability of the Bluetooth protocol stack for the Linux BlueZ operating system is related to improper authentication. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...
多款Qualcomm产品授权问题漏洞
Qualcomm SDX55 and others are products of Qualcomm Incorporated Qualcomm.SDX55 is a modem.IPQ6018 is a central processing unit CPU product.QCA6390 is a central processing unit CPU product. Multiple Qualcomm Products WLAN An authorization issue vulnerability exists in that the vulnerability stems...
