CVE-2023-25780

It is identified a vulnerability of insufficient authentication in an important specific function of Status PowerBPM. A LAN attacker with normal user privilege can exploit this vulnerability to modify substitute agent to arbitrary users, resulting in serious consequence...

WordPress Plugin BP Social Connect 访问控制错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2023-3550 · Hitron Technologies · Coda-5310

Name of the Vulnerable Software and Affected Versions: Hitron Technologies CODA-5310 affected versions not specified Description: The issue is related to insufficient authentication in the system configuration interface, allowing an unauthorized remote attacker to access the interface. This can...

XWiki Platform 安全漏洞

XWiki Platform is a suite of Wiki platforms for creating Web collaboration applications from the French company XWiki. A security vulnerability exists in XWiki Platform that stems from insufficient authentication of user rights...

CVE-2022-41579

There is an insufficient authentication vulnerability in some Huawei band products. Successful exploit could allow the attacker to spoof then connect to the band...

CVE-2022-41579

There is an insufficient authentication vulnerability in some Huawei band products. Successful exploit could allow the attacker to spoof then connect to the band...

CVE-2022-41579

CVE-2022-41579 affects Huawei band devices, citing an insufficient authentication vulnerability that could let an attacker spoof and then connect to the band. The CVE description indicates network-based exposure with low attacker effort (no user interaction). Connected sources consistently refere...

PT-2022-5438 · Moxa · Moxa Ne-4100T

Name of the Vulnerable Software and Affected Versions: Moxa NE-4100T affected versions not specified Description: The issue is related to insufficient authentication procedure in the firmware of the Moxa NE-4100T serial interface converter. It allows a remote attacker to potentially elevate their...

PT-2022-6073 · Citrix · Citrix Adc +1

Name of the Vulnerable Software and Affected Versions: Citrix ADC formerly Citrix NetScaler Application Delivery Controller versions affected versions not specified Citrix Gateway formerly Citrix NetScaler Gateway versions affected versions not specified Description: The issue is related to...

Sanitization Management System 访问控制错误漏洞

Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. An access control error vulnerability exists in Sanitialization Management System version 1.0 that stems from insufficient authentication...

Cisco Touch 10 Authentication Error Vulnerability

Cisco Touch 10 is a video conferencing system control unit from Cisco. It is designed for intuitive touch-based interaction with Webex Room Kit Series, Webex Rome Series, and Panorama Series systems, providing instant access to meetings, contacts, directories, and content. An authentication error...

PT-2022-5115 · Dell Emc · Dell Emc Xtremio

Name of the Vulnerable Software and Affected Versions: Dell EMC XtremIO versions prior to X2 6.4.0-22 Description: The issue is related to insufficient authentication attempt limitation, allowing a remote unauthenticated attacker to potentially exploit it and gain access to an admin account throu...

PT-2022-4908 · Jenkins · Jenkins Security Inspector Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Security Inspector Plugin versions 117.v6eecc36919c2 and earlier Description: The issue is related to insufficient authentication of executed POST requests, allowing a remote attacker to perform a cross-site request forgery CSRF attac...

PT-2022-6522 · Unknown · Wlan Module

Name of the Vulnerable Software and Affected Versions: WLAN module affected versions not specified Description: The issue is related to a vulnerability in permission verification within the WLAN module. This vulnerability can be exploited by third-party apps to affect WLAN functions. The problem ...

WordPress plugin Accordions 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

SOFTCREATE L2Blocker authentication error vulnerability

SOFTCREATE L2Blocker is a device type security system from SOFTCREATE Japan. It detects and blocks unauthorized connections from network devices to the internal network to prevent information leakage.An authentication error vulnerability exists in SOFTCREATE L2Blockeron-premise version 4.8.5 and...

CVE-2021-26627 EDrhyme QCP 200W Information Exposure Vulnerability

Real-time image information exposure is caused by insufficient authentication for activated RTSP port. This vulnerability could allow to remote attackers to send the RTSP requests using ffplay command and lead to leakage a live image...

Authentication flaw

An improper authentication vulnerability leading to information leakage was discovered in iptime NAS2dual. Remote attackers are able to steal important information in the server by exploiting vulnerabilities such as insufficient authentication when accessing the shared folder and changing user’s...

Rockwell Automation MicroLogix Improper Authentication (CVE-2017-12093)

An exploitable insufficient resource pool vulnerability exists in the session communication functionality of Allen Bradley Micrologix 1400 Series B Firmware 21.2 and before. A specially crafted stream of packets can cause a flood of the session resource pool resulting in legitimate connections to...

CVE-2021-23196 Fresenius Kabi Agilia Connect Infusion System insufficiently protected credentials

The web application on Agilia Link+ version 3.0 implements authentication and session management mechanisms exclusively on the client-side and does not protect authentication attributes sufficiently...