The vulnerability of the Compiler component in Oracle GraalVM Enterprise Edition and Oracle GraalVM for JDK allows a attacker to trigger a service failure.

The vulnerability of the Compiler component in Oracle GraalVM Enterprise Edition and Oracle GraalVM for JDK is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2024-0949

CVE-2024-0949 affects Talya Informatics’ Elektraweb prior to 17.0.68. The issue is described as Missing Authentication and Use of Hard-coded Credentials that enables Authentication Bypass due to improper access control, potentially exposing files/directories externally and impacting confidentiali...

CVE-2024-0949 Improper Access Control in Talya Informatics' Elektraweb

Missing Authentication, Files or Directories Accessible to External Parties, Use of Hard-coded Credentials vulnerability in Talya Informatics Elektraweb allows Authentication Bypass. This issue affects Elektraweb: before v17.0.68...

PT-2024-4262

Name of the Vulnerable Software and Affected Versions Rockwell Automation FactoryTalk View SE version v12 Description The issue is related to weaknesses in the authentication procedure of the Rockwell Automation FactoryTalk View SE software. This allows a remote attacker to potentially disclose...

The vulnerability of the software for centralized management of FortiWeb Manager firewalls lies in the authentication procedures’ deficiencies, which allow an attacker to gain access to read, modify, or delete data.

The vulnerability of the FortiWeb Manager software for centralized control of network firewalls is related to deficiencies in its authentication procedures. Exploiting this vulnerability could allow an attacker to gain access to read, modify, or delete data by sending specially crafted HTTP...

PT-2024-5492

Name of the Vulnerable Software and Affected Versions Microsoft Dynamics 365 Field Service On-Premises version 7 Description The issue is related to weak authentication in Microsoft Dynamics 365, allowing an unauthenticated attacker to elevate privileges over a network. This can enable a remote...

CVE-2024-5891: Weak Authentication

A vulnerability was found in Quay. If an attacker can obtain the client ID for an application, they can use an OAuth token to authenticate despite not having access to the organization from which the application was created. This issue is limited to authentication and not authorization. However, ...

CVE-2024-35248: Weak Authentication

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability...

CVE-2024-37019

Northern.tech Mender Enterprise before 3.6.4 and 3.7.x before 3.7.4 has Weak Authentication...

CVE-2024-37019

Northern.tech Mender Enterprise before 3.6.4 and 3.7.x before 3.7.4 has Weak Authentication...

CVE-2024-37019

Northern.tech Mender Enterprise before 3.6.4 and 3.7.x before 3.7.4 has Weak Authentication...

PT-2024-27247 · Unknown · Mender Enterprise

Name of the Vulnerable Software and Affected Versions: Mender Enterprise versions 3.6.4 and earlier Mender Enterprise versions 3.7.x before 3.7.4 Description: The issue is related to weak authentication in Mender Enterprise. Recommendations: For Mender Enterprise versions 3.6.4 and earlier, updat...

CVE-2024-37019: Improper Authentication

Northern.tech Mender Enterprise before 3.6.4 and 3.7.x before 3.7.4 has Weak Authentication...

The vulnerability of the update_form() function in the Admin Bar Editor plugin of the WordPress content management system allows a hacker to enable or disable the administrator panel on the website’s external interface.

The vulnerability of the updateform function in the Admin Bar Editor plugin of the WordPress content management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to enable or disable the administrator panel on the website’s...

The vulnerability of micro-programmed quadrocopters’ software, such as DJI Mavic 3 Pro, DJI Mavic 3, DJI Mavic 3 Classic, DJI Mavic 3 Enterprise, DJI Matrice 300, DJI Matrice M30, DJI Mavic Mini 3 Pro, is related to the use of weak credentials. This allows a intruder to gain access to the device.

The vulnerability of microprogrammed software in DJI’s Mavic 3 Pro, Mavic 3, Mavic 3 Classic, Mavic 3 Enterprise, Matrice 300, Matrice M30, and Mavic Mini 3 Pro drones is related to the use of weak authentication credentials. Exploiting this vulnerability can allow a remote attacker to gain acces...

The vulnerability in the web interface of the Cisco Catalyst Center (formerly Cisco DNA Center) allows a attacker to access and modify data.

The vulnerability of the web-based interface of the Cisco Catalyst Center formerly Cisco DNA Center is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain access and modify data by sending a specially crafted HTTP request...

CVE-2023-52043

An issue in D-Link COVR 1100, 1102, 1103 AC1200 Dual-Band Whole-Home Mesh Wi-Fi System Hardware Rev B1 truncates Wireless Access Point Passwords WPA-PSK allowing an attacker to gain unauthorized network access via weak authentication controls...

D-Link COVR 多款产品安全漏洞

D-Link COVR is a series of routers from China-based AUO D-Link. A security vulnerability exists in multiple D-Link COVR products. An attacker could exploit the vulnerability to gain unauthorized access via weak authentication. The following products and versions are affected: D-Link COVR 1100,...

CVE-2023-52043

An issue in D-Link COVR 1100, 1102, 1103 AC1200 Dual-Band Whole-Home Mesh Wi-Fi System Hardware Rev B1 truncates Wireless Access Point Passwords WPA-PSK allowing an attacker to gain unauthorized network access via weak authentication controls...

CVE-2023-52043: Improper Verification of Cryptographic Signature

An issue in D-Link COVR 1100, 1102, 1103 AC1200 Dual-Band Whole-Home Mesh Wi-Fi System Hardware Rev B1 truncates Wireless Access Point Passwords WPA-PSK allowing an attacker to gain unauthorized network access via weak authentication controls...