752 matches found
CVE-2024-8322
Weak authentication in Patch Management of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker to access restricted functionality...
PT-2024-6279 · Microsoft · Windows Remote Desktop Licensing Service +1
Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Licensing Service affected versions not specified Description: The issue is related to a denial-of-service vulnerability in the Windows Remote Desktop Licensing Service, which is caused by weaknesses in the authenticati...
The vulnerability of the server.c file in the server library allows remote access to computers via Neat VNC, enabling a hacker to circumvent existing security restrictions.
The vulnerability of the server.c file in the server library for remote access by Neat VNC is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...
U.S. Dept Of Defense: Improper Authentication Allows Making Requests as Other Users
A vulnerability was discovered that allowed unauthenticated users to submit requests as other users by manipulating HTTP responses. The vulnerability was caused by the application's failure to enforce strict authentication checks on sensitive endpoints, and its inability to properly validate serv...
CVE-2024-38182
Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network...
CVE-2024-38182
Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network...
CVE-2024-38182
Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network...
CVE-2024-38182
CVE-2024-38182 is a Microsoft Dynamics 365 elevation-of-privilege vulnerability described as weak authentication that allows an unauthenticated, network-based attacker to escalate privileges. Connected sources confirm the issue affects Microsoft Dynamics 365 Field Service On-Premises version 7 (o...
Microsoft Dynamics 365 Elevation of Privilege Vulnerability
Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network...
Microsoft Dynamics 365 安全漏洞
Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. It is used for financial management, production management and business intelligence management. A security vulnerability exists in Microsoft Dynamics 365 that stems from the presence o...
The vulnerability of the application component for managing the lifecycle of mobile devices and mobile applications, Ivanti Endpoint Manager Mobile (EPMM) (formerly MobileIron Core), allows a perpetrator to execute arbitrary commands in the basic operating system.
The vulnerability of the Ivanti Endpoint Manager Mobile EPMM web component for managing the lifecycle of mobile devices and mobile applications formerly known as MobileIron Core is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor t...
The vulnerability of MicroLogix 1400 programmable logic controllers’ microprogramming software, related to deficiencies in authentication procedures, allows attackers to delete user accounts.
The vulnerability of MicroLogix 1400 programmable logic controllers’ microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker, operating remotely, to delete user accounts...
The vulnerability of the ChangeHumster class in the SolarWinds Access Rights Manager software allows a perpetrator to bypass security restrictions and increase their privileges.
The vulnerability of the ChangeHumster class in the SolarWinds Access Rights Manager ARM access control software is related to deficiencies in authentication procedures due to the use of dangerous methods or functions. Exploiting this vulnerability can allow an attacker to bypass security...
The vulnerability of the Compiler component in Oracle GraalVM Enterprise Edition and Oracle GraalVM for JDK allows a attacker to trigger a service failure.
The vulnerability of the Compiler component in Oracle GraalVM Enterprise Edition and Oracle GraalVM for JDK is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to cause service failures...
CVE-2024-0949
CVE-2024-0949 affects Talya Informatics’ Elektraweb prior to 17.0.68. The issue is described as Missing Authentication and Use of Hard-coded Credentials that enables Authentication Bypass due to improper access control, potentially exposing files/directories externally and impacting confidentiali...
CVE-2024-0949 Improper Access Control in Talya Informatics' Elektraweb
Missing Authentication, Files or Directories Accessible to External Parties, Use of Hard-coded Credentials vulnerability in Talya Informatics Elektraweb allows Authentication Bypass. This issue affects Elektraweb: before v17.0.68...
The vulnerability of the software for centralized management of FortiWeb Manager firewalls lies in the authentication procedures’ deficiencies, which allow an attacker to gain access to read, modify, or delete data.
The vulnerability of the FortiWeb Manager software for centralized control of network firewalls is related to deficiencies in its authentication procedures. Exploiting this vulnerability could allow an attacker to gain access to read, modify, or delete data by sending specially crafted HTTP...
PT-2024-5492
Name of the Vulnerable Software and Affected Versions Microsoft Dynamics 365 Field Service On-Premises version 7 Description The issue is related to weak authentication in Microsoft Dynamics 365, allowing an unauthenticated attacker to elevate privileges over a network. This can enable a remote...