The vulnerability of the application component for managing the lifecycle of mobile devices and mobile applications, Ivanti Endpoint Manager Mobile (EPMM) (formerly MobileIron Core), allows a perpetrator to execute arbitrary commands in the basic operating system.

The vulnerability of the Ivanti Endpoint Manager Mobile EPMM web component for managing the lifecycle of mobile devices and mobile applications formerly known as MobileIron Core is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor t...

The vulnerability of MicroLogix 1400 programmable logic controllers’ microprogramming software, related to deficiencies in authentication procedures, allows attackers to delete user accounts.

The vulnerability of MicroLogix 1400 programmable logic controllers’ microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker, operating remotely, to delete user accounts...

The vulnerability of the ChangeHumster class in the SolarWinds Access Rights Manager software allows a perpetrator to bypass security restrictions and increase their privileges.

The vulnerability of the ChangeHumster class in the SolarWinds Access Rights Manager ARM access control software is related to deficiencies in authentication procedures due to the use of dangerous methods or functions. Exploiting this vulnerability can allow an attacker to bypass security...

The vulnerability of the Compiler component in Oracle GraalVM Enterprise Edition and Oracle GraalVM for JDK allows a attacker to trigger a service failure.

The vulnerability of the Compiler component in Oracle GraalVM Enterprise Edition and Oracle GraalVM for JDK is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2024-0949

CVE-2024-0949 affects Talya Informatics’ Elektraweb prior to 17.0.68. The issue is described as Missing Authentication and Use of Hard-coded Credentials that enables Authentication Bypass due to improper access control, potentially exposing files/directories externally and impacting confidentiali...

CVE-2024-0949 Improper Access Control in Talya Informatics' Elektraweb

Missing Authentication, Files or Directories Accessible to External Parties, Use of Hard-coded Credentials vulnerability in Talya Informatics Elektraweb allows Authentication Bypass. This issue affects Elektraweb: before v17.0.68...

The vulnerability of the software for centralized management of FortiWeb Manager firewalls lies in the authentication procedures’ deficiencies, which allow an attacker to gain access to read, modify, or delete data.

The vulnerability of the FortiWeb Manager software for centralized control of network firewalls is related to deficiencies in its authentication procedures. Exploiting this vulnerability could allow an attacker to gain access to read, modify, or delete data by sending specially crafted HTTP...

PT-2024-5492

Name of the Vulnerable Software and Affected Versions Microsoft Dynamics 365 Field Service On-Premises version 7 Description The issue is related to weak authentication in Microsoft Dynamics 365, allowing an unauthenticated attacker to elevate privileges over a network. This can enable a remote...

CVE-2024-37019

Northern.tech Mender Enterprise before 3.6.4 and 3.7.x before 3.7.4 has Weak Authentication...

CVE-2024-37019

Northern.tech Mender Enterprise before 3.6.4 and 3.7.x before 3.7.4 has Weak Authentication...

CVE-2024-37019

Northern.tech Mender Enterprise before 3.6.4 and 3.7.x before 3.7.4 has Weak Authentication...

PT-2024-27247 · Unknown · Mender Enterprise

Name of the Vulnerable Software and Affected Versions: Mender Enterprise versions 3.6.4 and earlier Mender Enterprise versions 3.7.x before 3.7.4 Description: The issue is related to weak authentication in Mender Enterprise. Recommendations: For Mender Enterprise versions 3.6.4 and earlier, updat...

The vulnerability of the update_form() function in the Admin Bar Editor plugin of the WordPress content management system allows a hacker to enable or disable the administrator panel on the website’s external interface.

The vulnerability of the updateform function in the Admin Bar Editor plugin of the WordPress content management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to enable or disable the administrator panel on the website’s...

The vulnerability of micro-programmed quadrocopters’ software, such as DJI Mavic 3 Pro, DJI Mavic 3, DJI Mavic 3 Classic, DJI Mavic 3 Enterprise, DJI Matrice 300, DJI Matrice M30, DJI Mavic Mini 3 Pro, is related to the use of weak credentials. This allows a intruder to gain access to the device.

The vulnerability of microprogrammed software in DJI’s Mavic 3 Pro, Mavic 3, Mavic 3 Classic, Mavic 3 Enterprise, Matrice 300, Matrice M30, and Mavic Mini 3 Pro drones is related to the use of weak authentication credentials. Exploiting this vulnerability can allow a remote attacker to gain acces...

The vulnerability in the web interface of the Cisco Catalyst Center (formerly Cisco DNA Center) allows a attacker to access and modify data.

The vulnerability of the web-based interface of the Cisco Catalyst Center formerly Cisco DNA Center is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain access and modify data by sending a specially crafted HTTP request...

CVE-2023-52043

An issue in D-Link COVR 1100, 1102, 1103 AC1200 Dual-Band Whole-Home Mesh Wi-Fi System Hardware Rev B1 truncates Wireless Access Point Passwords WPA-PSK allowing an attacker to gain unauthorized network access via weak authentication controls...

D-Link COVR 多款产品安全漏洞

D-Link COVR is a series of routers from China-based AUO D-Link. A security vulnerability exists in multiple D-Link COVR products. An attacker could exploit the vulnerability to gain unauthorized access via weak authentication. The following products and versions are affected: D-Link COVR 1100,...

CVE-2023-52043

An issue in D-Link COVR 1100, 1102, 1103 AC1200 Dual-Band Whole-Home Mesh Wi-Fi System Hardware Rev B1 truncates Wireless Access Point Passwords WPA-PSK allowing an attacker to gain unauthorized network access via weak authentication controls...

CVE-2023-52043

CVE-2023-52043 affects D-Link COVR 1100, 1102, and 1103 AC1200 Dual‑Band Whole‑Home Mesh Wi‑Fi System (Hardware Rev B1). The issue truncates WPA‑PSK passwords, enabling an attacker to gain unauthorized network access due to weak authentication controls. Documents consistently describe the affecte...

The vulnerability of the fromSysToolReboot() function (/goform/SysToolReboot) in the Tenda AC15 router’s microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the fromSysToolReboot function /goform/SysToolReboot in the Tenda AC15 router’s microprogramming software is related to insufficient verification of the authenticity of the requests being executed. Exploiting this vulnerability could allow a remote attacker to cause service...