The vulnerability of microprogrammed software in the Intel Baseboard Management Controller (BMC) allows a intruder to escalate their privileges, cause system failures, or gain unauthorized access to protected information.

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller BMC is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges, cause service failures, or gain unauthorized access to...

McAfee Threat Intelligence Exchange Server Authorization Issues Vulnerability

McAfee TIE Server is a network threat defense server from the U.S. company McAfee McAfee. An authorization issue vulnerability exists in the API in McAfee Threat Intelligence Exchange Server version 3.0.0. The vulnerability stems from a lack of authentication measures or insufficient authenticati...

Dell RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance Authorization Issues Vulnerabilities

Dell RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance are a suite of authentication and lifecycle management solutions from Dell, USA. An authorization issue vulnerability exists in Dell RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance versions...

cPanel Authorization Issues Vulnerability (CNVD-2020-03739)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An authorization issue vulnerability exists in versions of cPanel prior to 11.54.0.4. The vulnerability stems from a lack of...

Unspecified Vulnerability in Multiple Weidmueller Models

Weidmueller IE-SW-VL05M-5TX and so on are an industrial Ethernet switch from Weidmueller, Germany. A security vulnerability exists in a number of Weidmueller products. The vulnerability stems from a failure of the authentication mechanism to perform brute force protection, which can be exploited ...

ZyXEL NBG-418N v2 License Issue Vulnerability

The ZyXEL NBG-418N v2 is a wireless router from Taiwan, China-based ZyXEL. An authorization issue vulnerability exists in the wan.htm page in the Zyxel NBG-418N v2 using firmware version V1.00AARP.9C0. The vulnerability stems from a lack of authentication measures or insufficient authentication...

Multiple NETGEAR Product License Issue Vulnerabilities (CNVD-2020-23146)

The NETGEAR MBR1515 and others are a wireless router from NETGEAR. An authorization issue vulnerability exists in multiple NETGEAR products. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in the network system or product. No detailed...

V-Zug Combi-Steam MSLQ Authorization Issue Vulnerability (CNVD-2019-42367)

The V-Zug Combi-Steam MSLQ is an all-in-one microwave, oven, and steam machine unit from Swiss Swiss V-Zug. An authorization issue vulnerability exists in the V-Zug Combi-Steam MSLQ using firmware versions prior to Ethernet R07 and firmware versions prior to WLAN R05. The vulnerability stems from...

V-Zug Combi-Steam MSLQ Authorization Issues Vulnerability

The V-Zug Combi-Steam MSLQ is an all-in-one microwave, oven, and steam machine unit from Swiss Swiss V-Zug. An authorization issue vulnerability exists in the V-Zug Combi-Steam MSLQ using firmware versions prior to Ethernet R07 and firmware versions prior to WLAN R05. The vulnerability stems from...

Multiple Huawei bracelet product certification insufficient vulnerability

The Huawei Bracelet 2 and Honor Bracelet 3 are both smart bracelets from the Chinese company Huawei Huawei. A security vulnerability exists in the Huawei Bracelet 2 Eris-B19/Eris-B29 prior to version 1.2.53 and the Honor Bracelet 3 NYX-B10HN prior to version 1.5.53, which stems from a program tha...

CVE-2019-18226

Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products...

Palo Alto Networks Zingbox Inspector Authorization Issues Vulnerability

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. An authorization issue vulnerability exists in Palo Alto Networks Zingbox Inspector version 1.280 and earlier. The vulnerability stems...

Atlassian Crowd Session Hijacking Vulnerability

Atlassian Crowd is a Web-based single sign-on system from Atlassian Australia. The system provides authentication, authorization, and other functions for multiple users, web applications, and directory servers. A session hijacking vulnerability exists in Atlassian Crowd versions prior to 2.9.1 th...

Atlassian Crowd Session Fixation Vulnerability

Atlassian Crowd is a Web-based single sign-on system from Atlassian Australia. The system provides authentication, authorization, and other functions for multiple users, web applications, and directory servers. A security vulnerability exists in Atlassian Crowd versions prior to 3.0.2 and 3.1.0...

Couchbase Server Authorization Issues Vulnerability

Couchbase Server is a distributed open source NoSQL non-relational database from the U.S. company Couchbase , which mainly supports data query , full-text search and active global replication and other functions . An authorization issue vulnerability exists in Couchbase Server 5.0 and prior...

FreeBSD : Gitlab -- Multiple Vulnerabilities (b68cc195-cae7-11e9-86e9-001b217b3468)

Gitlab reports : Kubernetes Integration Server-Side Request Forgery Server-Side Request Forgery in Jira Integration Improved Protection Against Credential Stuffing Attacks Markdown Clientside Resource Exhaustion Pipeline Status Disclosure Group Runner Authorization Issue CI Metrics Disclosure Use...

cPanel Authorization Issues Vulnerability (CNVD-2019-28996)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An authorization issue vulnerability exists in versions of cPanel prior to 68.0.27. The vulnerability stems from a lack of...

B2B2C Multi-User Mall System Existing Vulnerabilities in B2B2C Multi-User Mall System

Business Amoy software B2B2C multi-user mall system is a comprehensive mall platform to support multi-store stationed. Business Amoy software B2B2C multi-user mall system there is an override access vulnerability, the vulnerability stems from the failure to set the rights of strict authentication...

Nextcloud Android Authorization Issues Vulnerability

Nextcloud Android is an Android-based mobile application from Nextcloud Germany for accessing Nextcloud servers. Nextcloud Android is vulnerable to an authorization issue. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in a networked system ...

Amcrest IPM-721S License Issue Vulnerability

The Amcrest IPM-721S is a wireless IP camera from Amcrest. An authorization issue vulnerability exists in the Amcrest IPM-721S V2.420.AC00.16.R.20160909 release. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in a networked system or product...