CVE-2021-39064

IBM Spectrum Copy Data Management 2.2.13 and earlier has weak authentication and password rules and incorrectly handles default credentials for the Spectrum Copy Data Management Admin console. IBM X-Force ID: 214957...

IBM Spectrum Copy Data Management授权问题漏洞

IBM Spectrum Copy Data Management, an IBM company that modernizes, streamlines and automates data center copy management processes, has a security vulnerability that stems from weak authentication and password rules and incorrectly handling of default credentials for the Spectrum Copy Data...

Spree 跨站请求伪造漏洞

Spree is an open source mall developed using Ruby on Rails by an individual developer. A cross-site request forgery vulnerability exists in Spree auth devise, which stems from a lack of effective validation of the product's authentication against CSRF. This vulnerability can be exploited to send...

The vulnerability of the web interface of the D-Link DIR-868LW router’s microprogramming software allows a hacker to obtain a record of user DNS requests.

The vulnerability of the web interface of D-Link DIR-868LW router software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to obtain user DNS query history...

The vulnerability of the Linux operating system’s Bluetooth Core Specification kernel, related to deficiencies in authentication procedures, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the Linux operating system’s Bluetooth Core Specification kernel is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data and compromise its integrity...

Default credentials

ECOA BAS controller uses weak set of default administrative credentials that can be easily guessed in remote password attacks and gain full control of the system...

IBM Security Guardium 安全漏洞

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. IBM Security Guardium has a security vulnerability that stems from a...

IBM QRadar 加密问题漏洞

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. A security...

Apple iOS 授权问题漏洞

Apple iOS is a suite of operating systems developed by Apple Inc. for mobile devices. An authorization issue vulnerability exists in Apple iOS 15 and prior versions of iPadOS 15, which arises from a lack of authentication measures or insufficient authentication strength in a networked system or...

Open-xchange OX Documents 加密问题漏洞

Open-xchange OX Documents is an office software suite from the American company Open-xchange. The product supports the creation and editing of text documents, spreadsheets, presentations, and more. Open-xchange OX Documents is vulnerable to an encryption issue that arises from a lack of...

ZyXEL ZyWALL USG 授权问题漏洞

Zyxel ZyXEL ZyWALL USG is a network security firewall appliance from Taiwan, China-based Hopkins Zyxel. The ZyXEL ZyWALL USG suffers from an authorization issue vulnerability that originates from a lack of authentication measures or insufficient authentication strength in a network system or...

The vulnerability of the BPF subsystem in Linux operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the BPF subsystem in Linux operating systems is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Receita Federal IRPF 授权问题漏洞

Receita Federal Imposto de Renda Pessoa Física, a personal income tax application from Receita Federal, Inc. has an authorization problem vulnerability in Receita Federal IRPF that stems from a lack of authentication measures or insufficient authentication strength in the network system or produc...

Red Hat Data Grid 跨站请求伪造漏洞

Red Hat Data Grid is a memory-based Nosql database with distributed support from Red Hat. Red Hat Data Grid 8.2.0 suffers from a cross-site request forgery vulnerability that stems from a lack of authentication measures or insufficient authentication strength in a networked system or product. An...

Apple iPadOS 授权问题漏洞

Apple iPadOS is an operating system from Apple Inc. for the iPad tablet computer. A security vulnerability exists in Apple iPadOS, which originates in the Wi-Fi component, and can be exploited by an attacker to force a client to use a less-than-secure authentication mechanism to perform a MitM...

CVE-2020-26556

Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful brute-force attack on an insufficiently random AuthValue before the provisioning procedure times out, to complete authentication by leveraging Malleable Commitment...

The vulnerability of the communication standards for IEEE 802.11 operating systems on Windows allows a intruder to inject arbitrary network packets.

The vulnerability of the IEEE 802.11 communication standard for Windows operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to inject arbitrary network packets remotely...

The vulnerability of the SCADA system of OIK Dispetchner NT, related to deficiencies in authentication procedures, allows attackers to increase their privileges.

The vulnerability of the SCADA system of OIK Dispatching is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers operating remotely to enhance their privileges...

The vulnerability of the ENGINEAPI component of the SAP NetWeaver Java Application Server web application server allows a attacker to cause a service failure.

The vulnerability of the ENGINEAPI component in SAP NetWeaver Java Application Server web applications is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability in the BPF subsystem of the `map_create` or `check_btf_info` function of the Linux kernel allows a malicious actor to cause an unexpected termination of the application.

The vulnerability of the BPF subsystem of the mapcreate function kernel/bpf/syscall.c or checkbtfinfo function kernel/bpf/verifier.c in the Linux operating system kernel is due to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to cause an applicati...