Lucene search
+L

7203 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/26 12:00 a.m.•2 views

CVE-2019-15796: Improper Authentication

Python-apt doesn't check if hashes are signed in Version.fetchbinary and Version.fetchsource of apt/package.py or in fetcharchives of apt/cache.py in version 1.9.3ubuntu2 and earlier. This allows downloads from unsigned repositories which shouldn't be allowed and has been fixed in verisions 1.9.5...

4.7CVSS5.5AI score0.00509EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/26 12:00 a.m.•2 views

CVE-2020-9066: Improper Authentication

Huawei smartphones OxfordP-AN10B with versions earlier than 10.0.1.169C00E166R4P1 have an improper authentication vulnerability. The Application doesn't perform proper authentication when user performs certain operations. An attacker can trick user into installing a malicious plug-in to exploit...

7.8CVSS7.2AI score0.00566EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/25 12:00 a.m.•1 views

CVE-2020-10965: Improper Authentication

Teradici PCoIP Management Console 20.01.0 and 19.11.1 is vulnerable to unauthenticated password resets via login/resetadminpassword of the default admin account. This vulnerability only exists when the default admin account is not disabled. It is fixed in 20.01.1 and 19.11.2...

8.1CVSS7.5AI score0.01475EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/24 12:00 a.m.•2 views

CVE-2020-10847: Improper Authentication

An issue was discovered on Samsung mobile devices with P9.0 Galaxy S8 and Note8 software. Facial recognition can be spoofed. The Samsung ID is SVE-2019-16614 February 2020...

6.8CVSS6.8AI score0.00135EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/24 12:00 a.m.•4 views

CVE-2020-10846: Improper Authentication

An issue was discovered on Samsung mobile devices with P9.x and Q10.x software. Attackers can enable the OEM unlock feature on a KG-enrolled devices, leading to potentially unwanted binaries being downloaded. The Samsung ID is SVE-2019-16554 February 2020...

5.5CVSS6AI score0.00126EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/24 12:00 a.m.•4 views

CVE-2019-20533: Improper Authentication

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 released in China or India software. The S Secure app can launch masked apps without a password. The Samsung ID is SVE-2019-13996 December 2019...

3.3CVSS5.4AI score0.00118EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/24 12:00 a.m.•3 views

CVE-2019-20565: Improper Authentication

An issue was discovered on Samsung mobile devices with O8.x and P9.0 software. Attackers can change the USB configuration without authentication. The Samsung ID is SVE-2018-13300 September 2019...

7.5CVSS7.2AI score0.0036EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/24 12:00 a.m.•3 views

CVE-2019-20620: Improper Authentication

An issue was discovered on Samsung mobile devices with P9.0 software. The Settings application allows unauthenticated changes. The Samsung IDs are SVE-2019-13814, SVE-2019-13815 March 2019...

7.5CVSS7.3AI score0.00333EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/24 12:00 a.m.•3 views

CVE-2019-20618: Improper Authentication

An issue was discovered on Samsung mobile devices with P9.0 software. The Pin Window feature allows unauthenticated unpinning of an app. The Samsung ID is SVE-2018-13765 March 2019...

7.5CVSS7.3AI score0.00333EPSS
SaveExploits0References2
NVD
NVD
•added 2020/03/20 3:15 p.m.•34 views

CVE-2020-1864

Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit...

8.1CVSS8.2AI score0.00806EPSS
SaveExploits0References1
OSV
OSV
•added 2020/03/20 3:15 p.m.•7 views

CVE-2020-1864

Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit...

8.1CVSS7.4AI score0.00806EPSS
SaveExploits0References1
OSV
OSV
•added 2020/03/20 3:15 p.m.•11 views

CVE-2020-1878

Huawei smartphone OxfordS-AN00A with versions earlier than 10.0.1.152DC735E152R3P3,versions earlier than 10.0.1.160C00E160R4P1 have an improper authentication vulnerability. Authentication to target component is improper when device performs an operation. Attackers exploit this vulnerability to...

5.5CVSS6.1AI score0.00249EPSS
SaveExploits0References2
OSV
OSV
•added 2020/03/20 3:15 p.m.•13 views

CVE-2020-1793

There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Ma...

4.6CVSS5.8AI score0.00245EPSS
SaveExploits0References1
OSV
OSV
•added 2020/03/20 3:15 p.m.•13 views

CVE-2020-1794

There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Ma...

4.6CVSS5.8AI score0.00245EPSS
SaveExploits0References1
NVD
NVD
•added 2020/03/20 3:15 p.m.•33 views

CVE-2020-1793

There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Ma...

4.6CVSS4.9AI score0.00245EPSS
SaveExploits0References1
NVD
NVD
•added 2020/03/20 3:15 p.m.•33 views

CVE-2020-1794

There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Ma...

4.6CVSS4.9AI score0.00245EPSS
SaveExploits0References1
Prion
Prion
•added 2020/03/20 3:15 p.m.•30 views

Authentication flaw

There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Ma...

2.1CVSS4.9AI score0.00245EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2020/03/20 3:00 p.m.•37 views

CVE-2020-1794

There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Ma...

5AI score0.00245EPSS
SaveExploits0References1
CVE
CVE
•added 2020/03/20 3:00 p.m.•76 views

CVE-2020-1794

The CVE-2020-1794 entry pertains to an improper authentication vulnerability in Huawei smartphones where the applock fails to enforce sufficient authentication in certain scenarios, potentially allowing access to data from locked apps. Affected devices include Huawei Mate 20 (versions earlier tha...

4.6CVSS5AI score0.00245EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/03/20 2:58 p.m.•35 views

CVE-2020-1864

Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit...

8.2AI score0.00806EPSS
SaveExploits0References1
Rows per page
Query Builder