CVE-2024-45160

Incorrect credential validation in LemonLDAP::NG 2.18.x and 2.19.x before 2.19.2 allows attackers to bypass OAuth2 client authentication via an empty clientpassword parameter client secret...

CVE-2020-7305: Improper Privilege Management

Privilege escalation vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows a low privileged remote attacker to create new rule sets via incorrect validation of user credentials...

PT-2018-8597

Name of the Vulnerable Software and Affected Versions: Cisco Web Security Appliance WSA versions 10.5.1 Description: A vulnerability in the FTP server could allow an unauthenticated, remote attacker to log in without a valid password, provided they have a valid username. This is due to incorrect...

PT-2018-8622

Name of the Vulnerable Software and Affected Versions: Cisco Policy Suite versions prior to 13.1.0 with Hotfix Patch 1 Cisco Policy Suite version 14.0.0 Description: A vulnerability in the RADIUS authentication module could allow an unauthenticated, remote attacker to be authorized as a subscribe...