Lucene search
+L

5568 matches found

Cvelist
Cvelist
•added 2020/04/22 2:31 p.m.•26 views

CVE-2019-19104 ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Improper Authentication and Access Control

The web server in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows access to different endpoints of the application without authenticating by accessing a specific uniform resource locator URL , violating the access-control ACL rules. This issue allows obtaining...

9.1CVSS9.2AI score0.01408EPSS
SaveExploits0References1
OSV
OSV
•added 2020/04/20 8:15 p.m.•6 views

CVE-2020-9070

Huawei smartphones Taurus-AL00B with versions earlier than 10.0.0.205C00E201R7P2 have an improper authentication vulnerability. The software insufficiently validate the user's identity when a user wants to do certain operation. An attacker can trick user into installing a malicious application to...

5.5CVSS6.1AI score0.00593EPSS
SaveExploits0References2
NVD
NVD
•added 2020/04/10 3:15 p.m.•24 views

CVE-2020-1801

There is an improper authentication vulnerability in several smartphones. Certain function interface in the system does not sufficiently validate the caller's identity in certain share scenario, successful exploit could cause information disclosure. Affected product versions include:Mate 30 Pro...

5.5CVSS5.4AI score0.00591EPSS
SaveExploits0References1
OSV
OSV
•added 2020/04/10 3:15 p.m.•7 views

CVE-2020-1801

There is an improper authentication vulnerability in several smartphones. Certain function interface in the system does not sufficiently validate the caller's identity in certain share scenario, successful exploit could cause information disclosure. Affected product versions include:Mate 30 Pro...

5.5CVSS6.1AI score0.00591EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/04/10 2:04 p.m.•33 views

CVE-2020-1801

There is an improper authentication vulnerability in several smartphones. Certain function interface in the system does not sufficiently validate the caller's identity in certain share scenario, successful exploit could cause information disclosure. Affected product versions include:Mate 30 Pro...

5.4AI score0.00591EPSS
SaveExploits0References1
CVE
CVE
•added 2020/04/10 2:04 p.m.•129 views

CVE-2020-1801

The CVE-2020-1801 entry describes an improper authentication vulnerability in Huawei Mate 30 Pro and Mate 30 smartphones. The issue arises from certain system function interfaces not sufficiently validating the caller’s identity in specific share scenarios, potentially leading to information disc...

5.5CVSS5.4AI score0.00591EPSS
SaveExploits0References1Affected Software1
Atlassian
Atlassian
•added 2020/04/08 3:06 a.m.•125 views

Improper authentication on Convert Sub-Task to Issue page - CVE-2019-20412

The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate the following information via an Improper Authentication vulnerability: Workflow names Project Key, if it is part of the workflow name Issue Keys Issue Types Status...

5.3CVSS6.3AI score0.01883EPSS
SaveExploits0Affected Software1
Atlassian
Atlassian
•added 2020/04/08 3:06 a.m.•43 views

Improper authentication on Convert Sub-Task to Issue page - CVE-2019-20412

The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate the following information via an Improper Authentication vulnerability: Workflow names Project Key, if it is part of the workflow name Issue Keys Issue Types Status...

5.3CVSS6.3AI score0.01883EPSS
SaveExploits0
VulnCheck KEV
VulnCheck KEV
•added 2020/03/27 12:00 a.m.•10 views

VulnCheck KEV: CVE-2019-1322

A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context...

7.8CVSS7.1AI score0.19205EPSS
SaveIn wildExploits26References8
attackerkb
attackerkb
•added 2020/03/26 3:15 p.m.•6 views

CVE-2020-9066

Huawei smartphones OxfordP-AN10B with versions earlier than 10.0.1.169C00E166R4P1 have an improper authentication vulnerability. The Application doesn't perform proper authentication when user performs certain operations. An attacker can trick user into installing a malicious plug-in to exploit...

7.8CVSS7.3AI score0.00566EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/03/26 2:25 p.m.•28 views

CVE-2020-9066

Huawei smartphones OxfordP-AN10B with versions earlier than 10.0.1.169C00E166R4P1 have an improper authentication vulnerability. The Application doesn't perform proper authentication when user performs certain operations. An attacker can trick user into installing a malicious plug-in to exploit...

7.7AI score0.00566EPSS
SaveExploits0References1
NVD
NVD
•added 2020/03/20 3:15 p.m.•34 views

CVE-2020-1864

Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit...

8.1CVSS8.2AI score0.00806EPSS
SaveExploits0References1
OSV
OSV
•added 2020/03/20 3:15 p.m.•7 views

CVE-2020-1864

Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit...

8.1CVSS7.4AI score0.00806EPSS
SaveExploits0References1
OSV
OSV
•added 2020/03/20 3:15 p.m.•10 views

CVE-2020-1878

Huawei smartphone OxfordS-AN00A with versions earlier than 10.0.1.152DC735E152R3P3,versions earlier than 10.0.1.160C00E160R4P1 have an improper authentication vulnerability. Authentication to target component is improper when device performs an operation. Attackers exploit this vulnerability to...

5.5CVSS6.1AI score0.00249EPSS
SaveExploits0References2
OSV
OSV
•added 2020/03/20 3:15 p.m.•13 views

CVE-2020-1793

There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Ma...

4.6CVSS5.8AI score0.00245EPSS
SaveExploits0References1
OSV
OSV
•added 2020/03/20 3:15 p.m.•12 views

CVE-2020-1794

There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Ma...

4.6CVSS5.8AI score0.00245EPSS
SaveExploits0References1
NVD
NVD
•added 2020/03/20 3:15 p.m.•33 views

CVE-2020-1793

There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Ma...

4.6CVSS4.9AI score0.00245EPSS
SaveExploits0References1
NVD
NVD
•added 2020/03/20 3:15 p.m.•32 views

CVE-2020-1794

There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Ma...

4.6CVSS4.9AI score0.00245EPSS
SaveExploits0References1
Prion
Prion
•added 2020/03/20 3:15 p.m.•29 views

Authentication flaw

There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Ma...

2.1CVSS4.9AI score0.00245EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2020/03/20 3:00 p.m.•37 views

CVE-2020-1794

There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Ma...

5AI score0.00245EPSS
SaveExploits0References1
Rows per page
Query Builder