CVE-2023-0905: Improper Authentication

A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file changePasswordForEmployee.php. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has...

CVE-2022-33946

Improper authentication in the IntelR SUR software before version 2.4.8902 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-33946

Improper authentication in the IntelR SUR software before version 2.4.8902 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-32971

Improper authentication in the IntelR SUR software before version 2.4.8902 may allow a privileged user to potentially enable escalation of privilege via network access...

CVE-2022-32570

Improper authentication in the IntelR Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-33946: Improper Authentication

Improper authentication in the IntelR SUR software before version 2.4.8902 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-32570: Improper Authentication

Improper authentication in the IntelR Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-32971: Improper Authentication

Improper authentication in the IntelR SUR software before version 2.4.8902 may allow a privileged user to potentially enable escalation of privilege via network access...

SUSE CVE-2018-3775

Improper Authentication in Nextcloud Server prior to version 12.0.3 would allow an attacker that obtained user credentials to bypass the 2 Factor Authentication...

SUSE CVE-2019-14553

Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access...

SUSE CVE-2021-25315

CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior t...

SUSE CVE-2022-0996

A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication...

PT-2023-1649 · Abb · Symphony Plus -S+ Operations

Name of the Vulnerable Software and Affected Versions: ABB Symphony Plus S+ Operations versions 2.X through 2.1 SP2, 2.2 ABB Symphony Plus S+ Operations versions 3.X through 3.3 SP1, 3.3 SP2 Description: The issue is related to improper authentication in the ABB Symphony Plus S+ Operations...

CVE-2022-47508: Improper Authentication

Customers who had configured their polling to occur via Kerberos did not expect NTLM Traffic on their environment, but since we were querying for data via IP address this prevented us from utilizing Kerberos...

PT-2023-1974 · Merten · Merten Knx

Name of the Vulnerable Software and Affected Versions: Merten KNX affected versions not specified Description: A vulnerability exists due to improper authentication, which could allow a device to be compromised when a key of less than seven digits is entered and the attacker has access to the KNX...

CVE-2022-45724: Improper Authentication

Incorrect Access Control in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same network to perform any HTTP request to an unauthenticated page to force the server to generate a SESSIONID, and using this SESSIONID an attacker can then perform authenticated requests...

CVE-2023-25559: Improper Authentication

DataHub is an open-source metadata platform. When not using authentication for the metadata service, which is the default configuration, the Metadata service GMS will use the X-DataHub-Actor HTTP header to infer the user the frontend is sending the request on behalf of. When the backends retrieve...

CVE-2023-21419: Improper Authentication

An improper implementation logic in Secure Folder prior to SMR Jan-2023 Release 1 allows the Secure Folder container remain unlocked under certain condition...

CVE-2023-21437: Improper Authentication

Improper access control vulnerability in Phone application prior to SMR Feb-2023 Release 1 allows local attackers to access sensitive information via implicit broadcast...

CVE-2022-48294: Improper Authentication

The IHwAttestationService interface has a defect in authentication. Successful exploitation of this vulnerability may affect data confidentiality...