CVE-2025-39596

CVE-2025-39596 relates to the WordPress plugin Quentn WP (versions

CVE-2025-39596: Weak Authentication

Weak Authentication vulnerability in Quentn.com GmbH Quentn WP quentn-wp allows Privilege Escalation.This issue affects Quentn WP: from n/a through = 1.2.8...

PT-2025-17194

Name of the Vulnerable Software and Affected Versions Quentn WP versions 1.2.8 and earlier Description The issue is related to weak authentication, allowing privilege escalation. Recommendations For Quentn WP versions 1.2.8 and earlier, at the moment, there is no information about a newer version...

WordPress plugin Quentn WP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2025-26635

Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network...

CVE-2025-27740

Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network...

CVE-2025-26635

Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network...

CVE-2025-26635

CVE-2025-26635 describes a Windows Hello security feature bypass caused by weak authentication, enabling an authorized attacker to bypass a security feature over the network. The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) yields a base score of 6.5 (Medium) with confidentiality and int...

Active Directory Certificate Services Elevation of Privilege Vulnerability

Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network...

CVE-2024-54092: Weak Authentication

A vulnerability has been identified in Industrial Edge Device Kit - arm64 V1.17 All versions, Industrial Edge Device Kit - arm64 V1.18 All versions, Industrial Edge Device Kit - arm64 V1.19 All versions, Industrial Edge Device Kit - arm64 V1.20 All versions V1.20.2-1, Industrial Edge Device Kit -...

CVE-2025-27740: Weak Authentication

Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network...

PT-2025-15563

Name of the Vulnerable Software and Affected Versions: Windows Active Directory Certificate Services affected versions not specified Description: The issue is related to weak authentication, allowing an authorized attacker to elevate privileges over a network. It is described as an...

CVE-2025-26635: Weak Authentication

Weak authentication in Windows Hello allows an authorized attacker to bypass a security feature over a network...

Siemens Industrial Edge Devices

SUMMARY Siemens Industrial Edge Devices contain a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Siemens has released new versions for several affected products and recommends to update to...

Siemens Industrial Edge Device Kit

SUMMARY Industrial Edge Device Kit contains a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Industrial Edge Device Builders integrate Industrial Edge Device Kit into their offerings...

CVE-2024-45551 Weak Authentication in HLOS

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass...

CVE-2024-45551 Weak Authentication in HLOS

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass...

CVE-2024-45551

CVE-2024-45551 targets Qualcomm closed‑source components (Gatekeeper) and describes a cryptographic issue during PIN/password verification. The vulnerability arises when RPMB writes can be dropped on verification failure, potentially enabling a user throttling bypass. The available sources confir...

CVE-2024-45551: Weak Authentication

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass...

CVE-2025-29991: Weak Authentication

Yubico YubiKey 5.4.1 through 5.7.3 before 5.7.4 has an incorrect FIDO CTAP PIN/UV Auth Protocol Two implementation. It uses the signature length from CTAP PIN/UV Auth Protocol One, even when CTAP PIN/UV Auth Protocol Two was chosen, resulting in a partial signature verification...