CVE-2018-0435: Improper Authentication

A vulnerability in the Cisco Umbrella API could allow an authenticated, remote attacker to view and modify data across their organization and other organizations. The vulnerability is due to insufficient authentication configurations for the API interface of Cisco Umbrella. An attacker could...

CVE-2013-7465: Improper Authentication

Ice Cold Apps Servers Ultimate 6.0.212 does not require authentication for TELNET, SSH, or FTP, which allows remote attackers to execute arbitrary code by uploading PHP scripts...

Security Bulletin: IBM Security Key Lifecycle Manager is vulnerable to Improper Authentication (CVE-2018-1738)

Summary IBM Security Key Lifecycle Manager could allow an authenticated user to obtain highly sensitive information or jeopardize system integrity due to improper authentication mechanisms. Vulnerability Details CVEID: CVE-2018-1738 DESCRIPTION: IBM Tivoli Key Lifecycle Manager could allow an...

CVE-2018-12472

A improper authentication using the HOST header in SUSE Linux SMT allows remote attackers to spoof a sibling server. Affected releases are SUSE Linux SMT: versions prior to 3.0.37...

CVE-2018-12472

A improper authentication using the HOST header in SUSE Linux SMT allows remote attackers to spoof a sibling server. Affected releases are SUSE Linux SMT: versions prior to 3.0.37...

CVE-2018-12472

CVE-2018-12472 affects SUSE SMT (Secure MT) — an improper authentication using the HOST header allowed remote attackers to spoof a sibling server. Affected: SMT before 3.0.37. Description from SUSE confirms the issue was fixed by hardening the hostname check during sibling verification via double...

CVE-2018-0505: Improper Authentication

Mediawiki 1.31 before 1.31.1, 1.30.1, 1.29.3 and 1.27.5 contains a flaw where BotPasswords can bypass CentralAuth's account lock...

CVE-2018-12472: Improper Authentication

A improper authentication using the HOST header in SUSE Linux SMT allows remote attackers to spoof a sibling server. Affected releases are SUSE Linux SMT: versions prior to 3.0.37...

Entes EMG 12

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Entes Equipment: EMG 12 Vulnerabilities: Improper Authentication, Information Exposure Through Query Strings in GET Request 2. RISK EVALUATION Successful exploitation of these vulnerabilities may...

CVE-2018-1672: Improper Authentication

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 may fail to set the correct user context in certain impersonation scenarios, which can allow a user to act with the identity of a different user. IBM X-Force ID: 144958...

CVE-2018-9080: Improper Authentication

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, by setting the Iomega cookie to a known value before logging into the NAS's web application, the NAS will not provide the user a new cookie value. This allows an attacker who knows the cookie's value to compromise...

Cisco Webex Network Recording Player Remote Code Execution Vulnerability (CNVD-2018-19399)

Cisco Webex Network Recording Player for Advanced Recording Format ARF is a media player primarily designed to play WebEx recorded files in ARF format. A remote code execution vulnerability exists in Cisco Webex Network Recording Player for Advanced Recording Format ARF could be due to improper...

Cisco Webex Network Recording Player Remote Code Execution Vulnerability (CNVD-2018-19400)

Cisco Webex Network Recording Player for Advanced Recording Format ARF is a media player primarily designed to play WebEx recorded files in ARF format. A remote code execution vulnerability exists in Cisco Webex Network Recording Player for Advanced Recording Format ARF could be due to improper...

CVE-2018-16668: Improper Authentication

An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is internal installation path disclosure due to the lack of authentication for /html/repository...

CVE-2018-11787: Improper Authentication

In Apache Karaf version prior to 3.0.9, 4.0.9, 4.1.1, when the webconsole feature is installed in Karaf, it is available at .../system/console and requires authentication to access it. One part of the console is a Gogo shell/console that gives access to the command line console of Karaf via a Web...

CVE-2018-16670: Improper Authentication

An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is PLC status disclosure due to lack of authentication for /html/devstat.html...

Rockwell Automation MicroLogix

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION : Exploitable remotely/low skill level to exploit. Vendor : Rockwell Equipment : MicroLogix Controller Vulnerabilities : Improper Authentication 2. RISK EVALUATION Successful exploitation of these vulnerabilities could cause denial of service,...

CVE-2017-2872: Improper Authentication

Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A HTTP request can allow for a user to perform a firmware upgrade using a crafted image. Before any firmware upgrades in this image are flashed to the device...

CVE-2018-1773: Improper Authentication

IBM Datacap Fastdoc Capture 9.1.1, 9.1.3, and 9.1.4 could allow an authenticated user to bypass future authentication mechanisms once the initial login is completed. IBM X-Force ID: 148691...

CVE-2018-16947: Improper Authentication

An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape controller butc process accepts incoming RPCs but does not require or allow for authentication of those RPCs. Handling those RPCs results in operations being performed with administrator credentials, includin...