PT-2019-14745

Name of the Vulnerable Software and Affected Versions Cisco HyperFlex software versions prior to 3.52a Description A vulnerability in the Graphite service could allow an unauthenticated, remote attacker to retrieve data due to insufficient authentication controls. An attacker could exploit this b...

Cisco Prime Collaboration Assurance Software Unauthenticated Access Vulnerability

A vulnerability in the Quality of Voice Reporting QOVR service of Cisco Prime Collaboration Assurance PCA Software could allow an unauthenticated, remote attacker to access the system as a valid user. The vulnerability is due to insufficient authentication controls. An attacker could exploit this...

PT-2019-1532

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Assurance PCA Software versions prior to 12.1 SP2 Description The issue is related to insufficient authentication controls in the Quality of Voice Reporting QOVR service, allowing an unauthenticated, remote attacker t...

PT-2019-1489

Name of the Vulnerable Software and Affected Versions Pelco Sarix Enhanced Camera affected versions not specified Spectra Enhanced PTZ Camera affected versions not specified Description A Cross-Site Request Forgery CSRF issue exists, related to insufficient authentication checks for executed...

PT-2019-5287

Name of the Vulnerable Software and Affected Versions gdm versions prior to 3.31.4 Description A vulnerability was discovered in gdm that allows an attacker to bypass the lock screen when timed login is enabled. By selecting the timed login user and waiting for the timer to expire, an attacker...

Mozilla Firefox < 65.0 Multiple Vulnerabilities

Binary data 700399.prm...

CVE-2018-7958

There is an anonymous TLS cipher suites supported vulnerability in Huawei eSpace product. An unauthenticated, remote attacker launches man-in-the-middle attack to hijack the connection from a client when the user signs up to log in by TLS. Due to insufficient authentication, which may be exploite...

PT-2018-18351

Name of the Vulnerable Software and Affected Versions: Huawei eSpace affected versions not specified Description: The issue allows an unauthenticated, remote attacker to launch a man-in-the-middle attack and hijack the connection from a client when the user signs up to log in by TLS. This is due ...

Authentication flaw

A vulnerability in the shell access request mechanism of Cisco IOS XE Software could allow an authenticated, local attacker to bypass authentication and gain unrestricted access to the root shell of an affected device. The vulnerability exists because the affected software has insufficient...

CVE-2018-0435

CVE-2018-0435 (Cisco Umbrella API Unauthorized Access) affects Cisco Umbrella API due to insufficient authentication configurations, enabling an authenticated remote attacker to read and potentially modify data across their own organization and other organizations. The connected documents confirm...

PT-2018-8826

Name of the Vulnerable Software and Affected Versions Cisco Umbrella affected versions not specified Description A vulnerability in the Cisco Umbrella API could allow an authenticated, remote attacker to view and modify data across their organization and other organizations. The issue is due to...

Cisco Prime Collaboration Provisioning Password Recovery Vulnerability

Cisco Prime Collaboration Provisioning PCP is a reliable and scalable Web-based provisioning solution for managing your company's critical next-generation communications services. A password recovery vulnerability exists in Cisco Prime Collaboration Provisioning. The vulnerability stems from...

Authentication flaw

There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with low privilege may bypass the authentication by some special operations. Due to insufficient authentication, an attacker may exploit the vulnerability to get some sensitive information and high-level...

CVE-2018-7943

There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with low privilege may bypass the authentication by some special operations. Due to insufficient authentication, an attacker may exploit the vulnerability to get some sensitive information and high-level...

Security Advisory - Authentication Bypass Vulnerability in Some Huawei Servers

There is an authentication bypass vulnerability in some Huawei servers. A remote attacker with low privilege may bypass the authentication by some special operations. Due to insufficient authentication, an attacker may exploit the vulnerability to get some sensitive information and high-level...

Foscam IP Video Camera Firmware Recovery Unsigned Image Vulnerability

Summary Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. An attacker who is in the same subnetwork of the camera or has remote administrator access, can fully compromise the device by performing a firmware...

PT-2018-2496

Name of the Vulnerable Software and Affected Versions Secutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52 es FRI01 Description The issue is related to insufficient authentication of data, which can be exploited by a remote attacker to change DNS settings. This can be achieved by...

CVE-2017-2341

An insufficient authentication vulnerability on platforms where Junos OS instances are run in a virtualized environment, may allow unprivileged users on the Junos OS instance to gain access to the host operating environment, and thus escalate privileges. Affected releases are Juniper Networks Jun...

Authentication flaw

An insufficient authentication vulnerability on platforms where Junos OS instances are run in a virtualized environment, may allow unprivileged users on the Junos OS instance to gain access to the host operating environment, and thus escalate privileges. Affected releases are Juniper Networks Jun...

CVE-2017-2341

CVE-2017-2341 covers an insufficient authentication vulnerability in Junos OS when run in a virtualized environment, enabling a guest to escalate to the host. Affected Junos OS releases include 14.1X53 pre-D40 (QFX5110, QFX5200, QFX10002/10008/10016, EX4600, NFX250), 15.1 pre-R5 (EX4600), 15.1X49...