CVE-2019-14598: Improper Authentication

Improper Authentication in subsystem in IntelR CSME versions 12.0 through 12.0.48 IOT only: 12.0.56, versions 13.0 through 13.0.20, versions 14.0 through 14.0.10 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local access...

CVE-2013-6360: Improper Authentication

TRENDnet TS-S402 has a backdoor to enable TELNET...

CVE-2011-4338: Improper Authentication

Shaman 1.0.9: Users can add the line askforpwd=false to his shaman.conf file, without entering the root password in shaman. The next time shaman is run, root privileges are granted despite the fact that the user never entered the root password...

CVE-2013-5582: Improper Authentication

Ammyy Admin 3.2 and earlier stores the client ID at a fixed memory location, which might make it easier for user-assisted remote attackers to bypass authentication by running a local program that extracts a field from the AAv3.2.exe file...

CVE-2013-2120: Improper Authentication

The %password... macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass authentication via a brute-force attack...

CVE-2019-20062: Improper Authentication

MFScripts YetiShare v3.5.2 through v4.5.4 might allow an attacker to reset a password by using a leaked hash the hash never expires until used...

CVE-2017-18641: Improper Authentication

In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers...

CVE-2013-3096: Improper Authentication

D-Link DIR865L v1.03 suffers from an "Unauthenticated Hardware Linking" vulnerability...

CVE-2012-6340: Improper Authentication

An Authentication vulnerability exists in NETGEAR WGR614 v7 and v9 due to a hardcoded credential used for serial programming, a related issue to CVE-2006-1002...

CVE-2015-0102: Improper Authentication

IBM Workflow for Bluemix does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...

CVE-2019-15617: Improper Authentication

A missing check in Nextcloud Server 17.0.0 allowed an attacker to set up a new second factor when trying to login...

CVE-2019-15620: Improper Authentication

Improper access control in Nextcloud Talk 6.0.3 leaks the existance and the name of private conversations when linked them to another shared item via the projects feature...

CVE-2013-7051: Improper Authentication

D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters...

CVE-2020-8510: Improper Authentication

An issue was discovered in phpABook 0.9 Intermediate. On the login page, if one sets a userInfo cookie with the value of admin+1+en user+perms+lang, one can login as any user without a password...

CVE-2016-2032: Improper Authentication

A vulnerability exists in the Aruba AirWave Management Platform 8.x prior to 8.2 in the management interface of an underlying system component called RabbitMQ, which could let a malicious user obtain sensitive information. This interface listens on TCP port 15672 and 55672...

CVE-2013-5114: Improper Authentication

LastPass prior to 2.5.1 allows secure wipe bypass...

CVE-2013-5112: Improper Authentication

Evernote before 5.5.1 has insecure PIN storage...

CVE-2013-5116: Improper Authentication

Evernote prior to 5.5.1 has insecure password change...

CVE-2013-3215

vtiger CRM 5.4.0 and earlier contain an Authentication Bypass Vulnerability due to improper authentication validation in the validateSession function...

CVE-2013-3215: Improper Authentication

vtiger CRM 5.4.0 and earlier contain an Authentication Bypass Vulnerability due to improper authentication validation in the validateSession function...