761 matches found
The vulnerability of the BPF subsystem in Linux operating systems allows attackers to gain unauthorized access to protected information.
The vulnerability of the BPF subsystem in Linux operating systems is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Receita Federal IRPF 授权问题漏洞
Receita Federal Imposto de Renda Pessoa Física, a personal income tax application from Receita Federal, Inc. has an authorization problem vulnerability in Receita Federal IRPF that stems from a lack of authentication measures or insufficient authentication strength in the network system or produc...
Red Hat Data Grid 跨站请求伪造漏洞
Red Hat Data Grid is a memory-based Nosql database with distributed support from Red Hat. Red Hat Data Grid 8.2.0 suffers from a cross-site request forgery vulnerability that stems from a lack of authentication measures or insufficient authentication strength in a networked system or product. An...
Apple iPadOS 授权问题漏洞
Apple iPadOS is an operating system from Apple Inc. for the iPad tablet computer. A security vulnerability exists in Apple iPadOS, which originates in the Wi-Fi component, and can be exploited by an attacker to force a client to use a less-than-secure authentication mechanism to perform a MitM...
CVE-2020-26556
Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful brute-force attack on an insufficiently random AuthValue before the provisioning procedure times out, to complete authentication by leveraging Malleable Commitment...
The vulnerability of the communication standards for IEEE 802.11 operating systems on Windows allows a intruder to inject arbitrary network packets.
The vulnerability of the IEEE 802.11 communication standard for Windows operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to inject arbitrary network packets remotely...
The vulnerability of the SCADA system of OIK Dispetchner NT, related to deficiencies in authentication procedures, allows attackers to increase their privileges.
The vulnerability of the SCADA system of OIK Dispatching is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers operating remotely to enhance their privileges...
The vulnerability in the BPF subsystem of the `map_create` or `check_btf_info` function of the Linux kernel allows a malicious actor to cause an unexpected termination of the application.
The vulnerability of the BPF subsystem of the mapcreate function kernel/bpf/syscall.c or checkbtfinfo function kernel/bpf/verifier.c in the Linux operating system kernel is due to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to cause an applicati...
The vulnerability of the ENGINEAPI component of the SAP NetWeaver Java Application Server web application server allows a attacker to cause a service failure.
The vulnerability of the ENGINEAPI component in SAP NetWeaver Java Application Server web applications is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
NEC Calsos CSDJ Authorization Issues Vulnerability
NEC Calsos CSDJ is a monitoring device from NEC Corporation of Japan. It provides IoT-enabled remote monitoring systems in various industries such as water and wastewater, manufacturing and agriculture. An authorization issue vulnerability exists in Calsos CSDJ that stems from a lack of...
IBM Spectrum Protect Operations Center 授权问题漏洞
IBM Spectrum Protect Operations Center is a software from IBM USA that provides visual control for IBM Spectrum Protect environments. An authorization issue vulnerability exists in IBM Spectrum Protect Operations Center that arises from a lack of authentication measures or insufficient...
Multiple Netgear Products Licensing Issues Vulnerabilities
Netgear NETGEAR WNR2020 and others are products of Netgear, Inc.NETGEAR WNR2020 is a wireless router.NETGEAR R6220 is a wireless router.NETGEAR R6700v2 is a wireless router. An authorization issue vulnerability exists in multiple NETGEAR routers that stems from a lack of authentication measures o...
HCL OneTest Information Disclosure Vulnerability
HCL OneTest is a software testing tool from HCL India that provides multiple testing options. The software supports API testing, functional testing, UI testing, performance testing and service virtualization to support software automation testing. A security vulnerability exists in HCL OneTest...
CVE-2020-14246
HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potentially decode the encoded credentials...
CVE-2020-14246
The CVE-2020-14246 entry concerns HCL OneTest Performance (V9.5, V10.0, V10.1) using basic authentication, which can be decoded to reveal credentials. The affected software is HCL OneTest Performance; the root cause is weak basic authentication. Practical impact states that an attacker could deco...
Security Bulletin: A Weak Authentication vulnerability affect IBM Rational Performance Tester
Summary IBM Rational Performance Tester uses basic authentication wihch is relatively weak. An attacker could potentially decode the encoded credentials. Vulnerability Details Third Party Entry: PSIRT-ADV0027320 DESCRIPTION: Created from Advisory: ADV0027320 CVSS Base score: 5.9 CVSS Vector:...
Marvell QConvergeConsole GUI Authorization Issues Vulnerability
Marvell QConvergeConsole QCC is a unified adapter management software across data centers from Marvell. The software is primarily used for Ethernet and Fibre Channel adapter management, among other things. A security vulnerability exists in the Marvell QConvergeConsole GUI version 5.5.0.74 and...
Bumble: Misconfigured oauth leads to Pre account takeover
Summary While testing badoo i have noticed that users can use SMAL Google,MSN,VKontakte,Odnoklassniki,Yandex Mail.Ru to create and login to badoo accounts. Now there are two ways of registering into badoo By email registration Google,MSN,VKontakte,Odnoklassniki,Yandex,Mail.Ru oauth login Now here...
HGiga MailSherlock Weak Authentication Vulnerability
HGiga MailSherlock is an email archiving and auditing system that provides a complete email security solution. A weak authentication vulnerability exists in HGiga MailSherlock. An attacker can exploit this vulnerability to elevate privileges using a default password generation mechanism...