6890 matches found
CVE-2020-6964: Missing Authentication for Critical Function
In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center CIC Versions 4.X and 5.X, CARESCAPE Central Station CSCS Versions 1.X and CARESCAPE Central Station CSCS Versions 2.X, the integrated service for keyboard switching of the...
Cisco Unified Personal Communicator Remote Denial of Service Vulnerability
Cisco Unified Personal Communicator is an instant messaging application from Cisco USA. A security vulnerability exists in Cisco Unified Personal Communicator version 7.0 1.13056, which arises from the program not freeing allocated memory and failing to perform authentication on received data. An...
CVE-2011-4322: Missing Authentication for Critical Function
websitebaker prior to and including 2.8.1 has an authentication error in backup module...
CVE-2019-19142: Missing Authentication for Critical Function
Intelbras WRN240 devices do not require authentication to replace the firmware via a POST request to the incoming/Firmware.cfg URI...
CVE-2020-7048: Missing Authentication for Critical Function
The WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any unauthenticated user to reset any table in the database to the initial WordPress set-up state deleting all site content stored in that table, as demonstrated by a wp-admin/admin-post.php?db-reset-tables=comments...
CVE-2019-13933: Missing Authentication for Critical Function
A vulnerability has been identified in SCALANCE X204RNA HSR, SCALANCE X204RNA PRP, SCALANCE X204RNA EEC HSR, SCALANCE X204RNA EEC PRP, SCALANCE X204RNA EEC PRP/HSR, SCALANCE X302-7 EEC 230V, SCALANCE X302-7 EEC 230V, coated, SCALANCE X302-7 EEC 24V, SCALANCE X302-7 EEC 24V, coated, SCALANCE X302-...
Siemens SCALANCE X Switches (Update B)
1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SCALANCE X Switches Vulnerability: Missing Authentication for Critical Function 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled...
CVE-2019-20143: Missing Authentication for Critical Function
An issue was discovered in GitLab Community Edition CE and Enterprise Edition EE 12.6. It has Incorrect Access Control...
CVE-2012-2736: Missing Authentication for Critical Function
In NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in AdHoc mode, it created an open/insecure network...
CVE-2019-8522: Missing Authentication for Critical Function
A logic issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.4. An encrypted volume may be unmounted and remounted by a different user without prompting for the password...
CVE-2019-8682: Missing Authentication for Critical Function
The issue was addressed with improved UI handling. This issue is fixed in iOS 12.4, watchOS 5.3. A user may inadvertently complete an in-app purchase while on the lock screen...
CVE-2019-16731: Missing Authentication for Critical Function
The udpServerSys service in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to initiate firmware upgrades and alter device settings...
CVE-2019-4244
IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to gain unauthorized information and unrestricted control over Zookeeper installations due to missing authentication. IBM X-Force ID: 159518...
Design/Logic Flaw
IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to gain unauthorized information and unrestricted control over Zookeeper installations due to missing authentication. IBM X-Force ID: 159518...
PT-2019-16990
Name of the Vulnerable Software and Affected Versions IBM SmartCloud Analytics versions 1.3.1 through 1.3.5 Description The issue allows a remote attacker to gain unauthorized information and unrestricted control over Zookeeper installations due to missing authentication. Recommendations For IBM...
CVE-2019-4244: Missing Authentication for Critical Function
IBM SmartCloud Analytics 1.3.1 through 1.3.5 could allow a remote attacker to gain unauthorized information and unrestricted control over Zookeeper installations due to missing authentication. IBM X-Force ID: 159518...
Siemens and PKE SiNVR, SiVMS Video Server (Update A)
1. EXECUTIVE SUMMARY --------- Begin Update A Part 1 of 6 --------- CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendors: Siemens and PKE Equipment: SiNVR, SiVMS Video Servers Vulnerabilities: Missing Authentication for Critical Function, Weak Cryptography for Passwords...
CVE-2013-1793: Missing Authentication for Critical Function
openstack-utils openstack-db has insecure password creation...
Shadowsocks-libev ss-manager add_server Code Execution Vulnerability
Summary An exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev 3.3.2. Specially crafted network packets sent to ss-manager can cause an arbitrary binary to run, resulting in code execution and privilege escalation. An attacker can send network packets to...