Multiple Huawei products not adequately certified for vulnerability

The OSCA-550AX is a 55-inch smart screen launched by Huawei's brand Honor.The OSCA-550A is the first 55-inch terminal smart screen launched by Honor using Huawei's Hongmeng operating system. A security vulnerability exists in multiple Huawei products, which stems from the system's failure to...

Podman Authorization Issues Vulnerability

Podman is an engine for developing, managing and running OCI containers on Linux systems. An authorization issue vulnerability exists in Podman version 1.6.0 that stems from a lack of authentication measures or insufficient authentication strength in a networked system or product. No detailed...

Western Digital My Cloud Home and ibi Licensing Issues Vulnerability

Western Digital My Cloud is a personal cloud storage device from Western Digital. An authorization issue vulnerability exists in Western Digital My Cloud Home versions prior to 3.6.0 and ibi versions prior to 3.6.0. The vulnerability stems from a lack of authentication measures or insufficient...

Cisco Firepower Management Center Authorization Issues Vulnerability

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. An authorization issue vulnerability exists in Cisco Firepower Management Center. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in...

CVE-2019-20046

The Synergy Systems & Solutions PLC & RTU system has a vulnerability in HUSKY RTU 6049-E70 firmware versions 5.0 and prior. The affected product does not require adequate authentication, which may allow an attacker to read sensitive information or execute arbitrary code. This is a different issue...

Opencast License Issue Vulnerability (CNVD-2020-12671)

Opencast is a free and open source video management solution that is scalable, customizable and low cost. An authorization issue vulnerability exists in Opencast versions prior to 7.6 and prior to 8.1. The vulnerability stems from a lack of authentication measures or insufficient authentication...

Atlassian Jira Server and Data Center Authorization Issues Vulnerability

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. An authorization issue vulnerability exists in Atlassian Jira Server and Data Center. The vulnerability stems from a lack of...

Dolibarr Authorization Issues Vulnerability

Dolibarr is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. An authorization issue vulnerability exists in Dolibarr. The...

Jamf Pro License Issue Vulnerability

Jamf Pro is an Apple device management solution from Jamf USA. Jamf Pro is vulnerable to an authorization issue. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in a networked system or product. An attacker could exploit this vulnerability to...

Schneider Electric EcoStruxure Control Expert and Unity Pro License Issue Vulnerability

Schneider Electric EcoStruxure Control Expert formerly Unity Pro and Unity Pro are both products of Schneider Electric, France. Schneider Electric EcoStruxure Control Expert is a suite of programming software for Schneider Electric's logic controller products, while Unity Pro is a general purpose...

SonicOS Elevation of Privilege Vulnerability

SonicWall SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWall, Inc. An authorization issue vulnerability exists in SonicWall SonicOS. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in a network...

The vulnerability of microprogrammed software in the Intel Baseboard Management Controller (BMC) allows a intruder to escalate their privileges, cause system failures, or gain unauthorized access to protected information.

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller BMC is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges, cause service failures, or gain unauthorized access to...

McAfee Threat Intelligence Exchange Server Authorization Issues Vulnerability

McAfee TIE Server is a network threat defense server from the U.S. company McAfee McAfee. An authorization issue vulnerability exists in the API in McAfee Threat Intelligence Exchange Server version 3.0.0. The vulnerability stems from a lack of authentication measures or insufficient authenticati...

Dell RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance Authorization Issues Vulnerabilities

Dell RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance are a suite of authentication and lifecycle management solutions from Dell, USA. An authorization issue vulnerability exists in Dell RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance versions...

cPanel Authorization Issues Vulnerability (CNVD-2020-03739)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An authorization issue vulnerability exists in versions of cPanel prior to 11.54.0.4. The vulnerability stems from a lack of...

Unspecified Vulnerability in Multiple Weidmueller Models

Weidmueller IE-SW-VL05M-5TX and so on are an industrial Ethernet switch from Weidmueller, Germany. A security vulnerability exists in a number of Weidmueller products. The vulnerability stems from a failure of the authentication mechanism to perform brute force protection, which can be exploited ...

V-Zug Combi-Steam MSLQ Authorization Issue Vulnerability (CNVD-2019-42367)

The V-Zug Combi-Steam MSLQ is an all-in-one microwave, oven, and steam machine unit from Swiss Swiss V-Zug. An authorization issue vulnerability exists in the V-Zug Combi-Steam MSLQ using firmware versions prior to Ethernet R07 and firmware versions prior to WLAN R05. The vulnerability stems from...

ZyXEL NBG-418N v2 License Issue Vulnerability

The ZyXEL NBG-418N v2 is a wireless router from Taiwan, China-based ZyXEL. An authorization issue vulnerability exists in the wan.htm page in the Zyxel NBG-418N v2 using firmware version V1.00AARP.9C0. The vulnerability stems from a lack of authentication measures or insufficient authentication...

Multiple NETGEAR Product License Issue Vulnerabilities (CNVD-2020-23146)

The NETGEAR MBR1515 and others are a wireless router from NETGEAR. An authorization issue vulnerability exists in multiple NETGEAR products. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in the network system or product. No detailed...

V-Zug Combi-Steam MSLQ Authorization Issues Vulnerability

The V-Zug Combi-Steam MSLQ is an all-in-one microwave, oven, and steam machine unit from Swiss Swiss V-Zug. An authorization issue vulnerability exists in the V-Zug Combi-Steam MSLQ using firmware versions prior to Ethernet R07 and firmware versions prior to WLAN R05. The vulnerability stems from...