CVE-2023-0228 Improper authentication vulnerability in S+ Operations

Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2...

CVE-2023-0228

Summary of CVE-2023-0228 : ABB Symphony Plus S+ Operations is affected by an improper authentication flaw (CWE-287) that allows an unauthorized client on the HMI network to connect and impersonate a legitimate S+ Operations client, potentially reading data, changing configurations, causing data c...

CVE-2023-0228 Improper authentication vulnerability in S+ Operations

Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2...

CVE-2023-0228: Improper Authentication

Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.1 SP2, 2.2, from 3.X through 3.3 SP1, 3.3 SP2...

CVE-2023-1065: Improper Authentication

This vulnerability in the Snyk Kubernetes Monitor can result in irrelevant data being posted to a Snyk Organization, which could in turn obfuscate other, relevant, security issues. It does not expose the user of the integration to any direct security risk and no user data can be leaked. To exploi...

Exploit for Improper Authentication in Fortinet Fortiproxy

CVE-2022-40684 One-click enumeration of all usernames and wr...

CVE-2022-48254: Improper Authentication

There is a data processing error vulnerability in Leia-B29 2.0.0.49M03. Successful exploitation could bypass lock screen authentication...

CVE-2022-34908: Improper Authentication

An issue was discovered in the A4N Aremis 4 Nomad application 1.5.0 for Android. It possesses an authentication mechanism; however, some features do not require any token or cookie in a request. Therefore, an attacker may send a simple HTTP request to the right endpoint, and obtain authorization ...

CVE-2023-23493: Improper Authentication

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, macOS Monterey 12.6.3. An encrypted volume may be unmounted and remounted by a different user without prompting for the password...

CVE-2023-20012: Improper Authentication

A vulnerability in the CLI console login authentication of Cisco Nexus 9300-FX3 Series Fabric Extender FEX when used in UCS Fabric Interconnect deployments could allow an unauthenticated attacker with physical access to bypass authentication. This vulnerability is due to the improper implementati...

CVE-2023-24093: Improper Authentication

An access control issue in H3C A210-G A210-GV100R005 allows attackers to authenticate without a password...

K98394530: Intel CPU vulnerability CVE-2019-14598

Security Advisory Description Improper Authentication in subsystem in IntelR CSME versions 12.0 through 12.0.48 IOT only: 12.0.56, versions 13.0 through 13.0.20, versions 14.0 through 14.0.10 may allow a privileged user to potentially enable escalation of privilege, denial of service or informati...

K84141859: Apache Traffic Control vulnerability CVE-2019-12405

Security Advisory Description Improper authentication is possible in Apache Traffic Control versions 3.0.0 and 3.0.1 if LDAP is enabled for login in the Traffic Ops API component. Given a username for a user that can be authenticated via LDAP, it is possible to improperly authenticate as that use...

K56213806: Intel SSD INTEL-SA-00563 vulnerabilities

Security Advisory Description CVE-2021-33069 Improper resource shutdown or release in firmware for some IntelR SSD, IntelR SSD DC, IntelR OptaneTM SSD and IntelR OptaneTM SSD DC may allow a privileged user to potentially enable denial of service via local access. CVE-2021-33074 Protection mechani...

CVE-2015-10083

A vulnerability has been found in harrystech Dynosaur-Rails and classified as critical. Affected by this vulnerability is the function basicauth of the file app/controllers/applicationcontroller.rb. The manipulation leads to improper authentication. This product does not use versioning. This is w...

CVE-2015-10083

CVE-2015-10083 affects harrystech Dynosaur-Rails; the vulnerability is in the basic_auth function of app/controllers/application_controller.rb, leading to improper authentication. The issue is documented across multiple sources and is tied to the patch named 04b223813f0e336aab50bff140d0f5889c31db...

CVE-2015-10083 harrystech Dynosaur-Rails application_controller.rb basic_auth improper authentication

A vulnerability has been found in harrystech Dynosaur-Rails and classified as critical. Affected by this vulnerability is the function basicauth of the file app/controllers/applicationcontroller.rb. The manipulation leads to improper authentication. This product does not use versioning. This is w...

CVE-2015-10083: Improper Authentication

A vulnerability has been found in harrystech Dynosaur-Rails and classified as critical. Affected by this vulnerability is the function basicauth of the file app/controllers/applicationcontroller.rb. The manipulation leads to improper authentication. This product does not use versioning. This is w...

CVE-2023-0905

A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file changePasswordForEmployee.php. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has...

CVE-2023-0905 SourceCodester Employee Task Management System changePasswordForEmployee.php improper authentication

A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file changePasswordForEmployee.php. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has...