Subrion CMS Authorization Issues Vulnerability

Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into a website and supports a variety of extensions plugins and more. An authorization issue vulnerability exists in Subrion CMS version 4.2.1. The vulnerability stems from a lack of...

Red Hat WildFly Elytron License Issue Vulnerability

Red Hat WildFly Elytron is a security framework for application servers from Red Hat USA. The product supports features such as configuring administrative access to servers. An authorization issue vulnerability exists in Red Hat WildFly Elytron 1.11.3.Final and prior versions. The vulnerability...

Microsoft NET USE win10 - Insufficient Authentication Logic Exploit

Title: Microsoft NET USE win10 - Insufficient Authentication Logic Date: 2020-04-04 Author: hyp3rlinx Vendor: www.microsoft.com CVE: N/A + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source:...

Microsoft Windows Net Use Insufficent Authentication

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-NET-USE-INSUFFICIENT-PASSWORD-PROMPT.txt + twitter.com/hyp3rlinx + ISR: ApparitionSec Vendor www.microsoft.com Product Windows "net use" Command Connects a...

Elide Authorization Issues Vulnerability

Elide is a self-contained API for web and mobile applications written in Java. An authorization issue vulnerability exists in versions of Elide prior to 4.5.14. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in a networked system or product...

PT-2020-1729

Name of the Vulnerable Software and Affected Versions Moxa Mgate versions MB3180, MB3280, MB3480, MB3170, MB3270 Description The issue is related to insufficient authentication in the firmware of Moxa Mgate protocol converters, allowing a remote attacker to gain access to the system with an empty...

CVE-2020-1842

Huawei HEGE-560 version 1.0.1.20SP2; OSCA-550 and OSCA-550A version 1.0.0.71SP1; and OSCA-550AX and OSCA-550X version 1.0.0.71SP2 have an insufficient authentication vulnerability. An attacker can access the device physically and perform specific operations to exploit this vulnerability. Successf...

CVE-2020-1842

Huawei HEGE-560 version 1.0.1.20SP2; OSCA-550 and OSCA-550A version 1.0.0.71SP1; and OSCA-550AX and OSCA-550X version 1.0.0.71SP2 have an insufficient authentication vulnerability. An attacker can access the device physically and perform specific operations to exploit this vulnerability. Successf...

CVE-2020-1842

Huawei HEGE-560 version 1.0.1.20SP2; OSCA-550 and OSCA-550A version 1.0.0.71SP1; and OSCA-550AX and OSCA-550X version 1.0.0.71SP2 have an insufficient authentication vulnerability. An attacker can access the device physically and perform specific operations to exploit this vulnerability. Successf...

CVE-2020-1789: Improper Authentication

Huawei OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X products with version 1.0.1.21SP3 have an insufficient authentication vulnerability. The software does not require a strong credential when the user trying to do certain operations. Successful exploit could allow an attacker to pass the...

PT-2020-15115

Name of the Vulnerable Software and Affected Versions Huawei HEGE-560 version 1.0.1.20SP2 OSCA-550 and OSCA-550A version 1.0.0.71SP1 OSCA-550AX and OSCA-550X version 1.0.0.71SP2 Description The issue is related to insufficient authentication. An attacker can physically access the device and perfo...

PT-2020-15060

Name of the Vulnerable Software and Affected Versions Huawei OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X version 1.0.1.21SP3 Description The issue is related to insufficient authentication in the software, which does not require a strong credential for certain operations. This could allow an...

Nextcloud Circles Authorization Issues Vulnerabilities

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. An authorization issue vulnerability exists in Nextcloud Circles. The vulnerability stems from a lack of authentication measures or insufficient authenticatio...

CVE-2020-1840

HUAWEI Mate 20 smart phones with versions earlier than 10.0.0.175C00E70R3P8 have an insufficient authentication vulnerability. A local attacker with high privilege can execute a specific command to exploit this vulnerability. Successful exploitation may cause information leak and compromise the...

CVE-2020-1840

HUAWEI Mate 20 smart phones with versions earlier than 10.0.0.175C00E70R3P8 have an insufficient authentication vulnerability. A local attacker with high privilege can execute a specific command to exploit this vulnerability. Successful exploitation may cause information leak and compromise the...

PT-2020-15113

Name of the Vulnerable Software and Affected Versions HUAWEI Mate 20 versions earlier than 10.0.0.175C00E70R3P8 Description The issue is related to insufficient authentication, allowing a local attacker with high privilege to execute a specific command and potentially cause information leak and...

CVE-2020-1840: Improper Authentication

HUAWEI Mate 20 smart phones with versions earlier than 10.0.0.175C00E70R3P8 have an insufficient authentication vulnerability. A local attacker with high privilege can execute a specific command to exploit this vulnerability. Successful exploitation may cause information leak and compromise the...

Huawei Mate 20 Pro Insufficient Authentication Vulnerability

Huawei Mate 20 Pro is a smartphone from Chinese company Huawei Huawei. An authorization issue vulnerability exists in versions prior to Huawei Mate 20 Pro 10.0.0.175 C00E69R3P8, which stems from the system not adequately checking package names in some cases. An attacker can exploit the...

PT-2020-1429

Name of the Vulnerable Software and Affected Versions Genexis Platinum-P4410-V2 versions 1.28 and earlier Genexis Platinum-4410 versions 2.1 and earlier Description The issue is related to insufficient authentication in the cgi-bin/index2.asp component of the Genexis Platinum-P4410-V2 and Genexis...

PT-2019-5348

Name of the Vulnerable Software and Affected Versions SPPA-T3000 Application Server versions prior to Service Pack R8.2 SP2 Description A vulnerability has been identified that exposes directory listings and files containing sensitive information due to insufficient authentication. An attacker...