CVE-2022-23807: Improper Authentication

An issue was discovered in phpMyAdmin 4.9 before 4.9.8 and 5.1 before 5.1.2. A valid user who is already authenticated to phpMyAdmin can manipulate their account to bypass two-factor authentication for future login instances...

CVE-2020-4879: Improper Authentication

IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could allow a remote attacker to bypass security restrictions, caused by improper validation of authentication cookies. IBM X-Force ID: 190847...

CVE-2021-44736: Improper Authentication

The initial admin account setup wizard on Lexmark devices allow unauthenticated access to the “out of service erase” feature...

October CMS Improper Authentication

In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account using a specially crafted request...

CVE-2022-21692: Improper Authentication

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions anyone with access to the chat environment can write messages disguised as another chat participant...

CVE-2022-21695: Improper Authentication

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions authenticated users or unauthenticated in public mode can send messages without being visible in the list of chat participants. Th...

CVE-2021-4142

The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA simple content access certificate for authentication with Candlepin. Mitigation Mitigation for this issue is not available because it doesnt meet the Re...

CVE-2022-23178: Improper Authentication

An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI switcher is accessed unauthenticated, user credentials are disclosed that are valid to authenticate to the web interface. Specifically, aj.html sends a JSON document with uname...

Exploit for Improper Authentication in Octobercms October

CVE-2021-32648...

CVE-2022-21684: Improper Authentication

Discourse is an open source discussion platform. Versions prior to 2.7.13 in stable, 2.8.0.beta11 in beta, and 2.8.0.beta11 in tests-passed allow some users to log in to a community before they should be able to do so. A user invited via email to a forum with mustapproveusers enabled is going to ...

CVE-2021-33046: Improper Authentication

Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords...

CVE-2021-43999: Improper Authentication

Apache Guacamole 1.2.0 and 1.3.0 do not properly validate responses received from a SAML identity provider. If SAML support is enabled, this may allow a malicious user to assume the identity of another Guacamole user...

CVE-2022-22284

Improper authentication vulnerability in Samsung Internet prior to 16.0.2.19 allows attackers to bypass secret mode password authentication...

CVE-2022-22284

Improper authentication vulnerability in Samsung Internet prior to 16.0.2.19 allows attackers to bypass secret mode password authentication...

CVE-2021-44458: Improper Authentication

Linux users running Lens 5.2.6 and earlier could be compromised by visiting a malicious website. The malicious website could make websocket connections from the victim's browser to Lens and so operate the local terminal feature. This would allow the attacker to execute arbitrary commands as the...

CVE-2022-22284

CVE-2022-22284 describes an improper authentication vulnerability in Samsung Internet prior to version 16.0.2.19, enabling an attacker with local access to bypass the secret mode password authentication. Affected product is Samsung Internet (mobile browser); root cause is bypassing the secret mod...

CVE-2022-22289: Improper Authentication

Improper access control vulnerability in S Assistant prior to version 7.5 allows attacker to remotely get senstive information...

CVE-2022-22284: Improper Authentication

Improper authentication vulnerability in Samsung Internet prior to 16.0.2.19 allows attackers to bypass secret mode password authentication...

CVE-2022-22283: Improper Authentication

Improper session management vulnerability in Samsung Health prior to 6.20.1.005 prevents logging out from Samsung Health App...

Rockstar Games: Improper Authentication inside the Rockstar Games Launcher which leads to Account takeover to some extend

An improper authentication vulnerability was discovered in the Rockstar Games Launcher. This vulnerability allowed attackers who had already gained access to a victim's Steam or Epic Games account to also gain access to the victim's Social Club account. By exploiting the "Switch Account" feature...