CVE-2023-21460: Improper Authentication

Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting...

CVE-2022-46774: Improper Authentication

IBM Manage Application 8.8.0 and 8.9.0 in the IBM Maximo Application Suite is vulnerable to incorrect default permissions which could give access to a user to actions that they should not have access to. IBM X-Force ID: 242953...

CVE-2023-23857: Improper Authentication

Due to missing authentication check, SAP NetWeaver AS for Java - version 7.50, allows an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access services which can be used to perform unauthorized operations affecting users and services...

Improper Authentication

WordPress is vulnerable to Improper Authentication. The vulnerability allows an attacker to obtain the email address of the user who posted a blog using the WordPress Post by Email Feature...

CVE-2022-44574

An improper authentication vulnerability exists in Avalanche version 6.3.x and below allows unauthenticated attacker to modify properties on specific port...

Avalanche 授权问题漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. Avalanche version 6.3.x and prior versions have a security vulnerability that stems from improper authentication. A...

CVE-2022-44574: Improper Authentication

An improper authentication vulnerability exists in Avalanche version 6.3.x and below allows unauthenticated attacker to modify properties on specific port...

IBM Financial Transaction Manager 输入验证错误漏洞

IBM Financial Transaction Manager is a financial transaction manager from International Business Machines IBM. The product is primarily used to monitor, track and report financial payments and transactions. A security vulnerability exists in IBM Financial Transaction Manager versions 3.2.0 throug...

CVE-2022-44574

Avalanche up to version 6.3.x is affected by an improper authentication vulnerability that allows an unauthenticated attacker to modify properties on a specific port. The CVE (CVE-2022-44574) is corroborated by multiple sources (NVD, Red Hat, CNNVD, CVE list, ZDI advisory) indicating the issue ar...

Atlassian Jira < 7.13.9 Multiple Vulnerabilties

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 7.13.9 or 8.0.x 8.4.2. It is, therefore, affected by multiple vulnerabilities: - A Cross-Site Scripting XSS vulnerability in Issue Navigator Basic Search. - A Improper...

Atlassian Jira 8.0.x < 8.4.2 Multiple Vulnerabilties

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 7.13.9 or 8.0.x 8.4.2. It is, therefore, affected by multiple vulnerabilities: - A Cross-Site Scripting XSS vulnerability in Issue Navigator Basic Search. - A Improper...

CVE-2023-27482: Improper Authentication

homeassistant is an open source home automation tool. A remotely exploitable vulnerability bypassing authentication for accessing the Supervisor API through Home Assistant has been discovered. This impacts all Home Assistant installation types that use the Supervisor 2023.01.1 or older...

CVE-2022-33242

CVE-2022-33242: Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned libraries in the audio processing domain (audio PD). Based on multiple sources, the issue affects Qualcomm closed-source components and is characterized by local attack vector with low privileg...

CVE-2022-33242 Improper authentication in Qualcomm IPC

Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD...

PT-2023-13256 · Qualcomm · Qualcomm Ipc

Name of the Vulnerable Software and Affected Versions: Qualcomm IPC affected versions not specified Description: The issue is related to memory corruption due to improper authentication in Qualcomm IPC while loading unsigned libraries in the audio processing domain. Recommendations: At the moment...

CVE-2022-33242: Improper Authentication

Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD...

Exploit for Improper Authentication in Redhat Keycloak

PoC for CVE-2023-0264 Keycloak vulnerability that allows ses...

CVE-2022-48364: Improper Authentication

The undomarkstatusesassensitive method in app/services/approveappealservice.rb in Mastodon 3.5.x before 3.5.3 does not use the server's representative account, resulting in moderator identity disclosure when a moderator approves the appeal of a user whose status update was marked as sensitive...

CVE-2023-0228

Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2...

Authentication flaw

Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2...