CWE:

	Topic	Date	Author
Med.	Ember Enterprises E2in Improper Authentication	13.12.2020	KingSkrupellos
Med.	Sanishsoft Authentication Bypass	13.12.2020	KingSkrupellos
Med.	Sharptech Digital Marketing Agency Authentication Bypass	13.12.2020	KingSkrupellos
High	WebDehasi Hosting File Insert Authentication Bypass	09.11.2020	KingSkrupellos
Med.	HindSoft Technology Pvt Ltd India Insert File Authentication Bypass	08.11.2020	KingSkrupellos
Med.	HigsonMedia Improper Authentication	29.05.2020	KingSkrupellos
Med.	UinfoTechnology Pvt Ltd Gentelella Alela Colorlib Improper Authentication	29.05.2020	KingSkrupellos
Med.	Mildtrix Business Solutions Pvt Ltd 2.3.12 Improper Authentication	29.05.2020	KingSkrupellos
Med.	Solidale InfoTech Authentication Bypass	28.05.2020	KingSkrupellos
Med.	Bagwar Softwares Pvt Ltd Authentication Bypass	28.05.2020	KingSkrupellos
Med.	Saloni Info Tech Accocca Constructions Pvt Ltd Authentication Bypass	28.05.2020	KingSkrupellos
Med.	Ayan Advisory Private Limited Authentication Bypass	28.05.2020	KingSkrupellos
Med.	Teak Squash Design and Solutions Authentication Bypass	28.05.2020	KingSkrupellos
Med.	Gharuda Infotech Pvt Ltd Authentication Bypass	28.05.2020	KingSkrupellos
Med.	NextgenUSCorp Authentication Bypass	27.05.2020	KingSkrupellos
Med.	Upturn Smart Online Exam System Mayuri Authentication Bypass	27.05.2020	KingSkrupellos
High	WebIndiaServices Team Authentication Bypass	27.05.2020	KingSkrupellos
Med.	School Sports Promotion Foundation Sspf India Authentication Bypass	27.05.2020	KingSkrupellos
Med.	Gangotri Group Shubham Srivastava Authentication Bypass	27.05.2020	KingSkrupellos
Med.	3NetWorks Authentication Bypass	27.05.2020	KingSkrupellos
Med.	Chamilo © 2020 Campus v1 ElFinder Backdoor Access Shell Upload Vulnerability	27.05.2020	KingSkrupellos
Med.	ABCMedya Bilişim Software 2.0 Authentication Bypass	20.05.2020	KingSkrupellos
Med.	Sync Bilişim Software Arbitrary File Upload Authentication Bypass	20.05.2020	KingSkrupellos
Med.	Ja IT Solution JaisBD Bangladesh Software Authentication Bypass	18.05.2020	KingSkrupellos
Med.	Saudi Indian Football Forum Siffjeddah Authentication Bypass Shell Upload	11.05.2020	KingSkrupellos
Med.	Great Web Solutions Pvt Ltd Improper Authentication	09.05.2020	KingSkrupellos
Med.	LBMInfoTech Improper Authentication	09.05.2020	KingSkrupellos
Med.	Tiol Group WebSites Taxindiainternational Pvt Ltd Improper Authentication	09.05.2020	KingSkrupellos
Med.	Great Web Solutions Pvt Ltd Improper Authentication	09.05.2020	KingSkrupellos
Med.	Tiol Group WebSites Taxindiainternational Pvt Ltd Improper Authentication	09.05.2020	KingSkrupellos
Med.	LBMInfoTech Improper Authentication	09.05.2020	KingSkrupellos
High	ThietkeWebX Quatangtraitim VietNext Unauthorized File Upload Improper Authentication	06.05.2020	KingSkrupellos
Med.	Suvega Digital Media Pvt Ltd Improper Authentication	06.05.2020	KingSkrupellos
Med.	Du Hoc Ioc Vietnamese System Improper Authentication	06.05.2020	KingSkrupellos
Med.	Niladri Marketing Pvt. Ltd. Triimax_Ind Siimax Infotimes Improper Authentication	04.05.2020	KingSkrupellos
Med.	WebTechnologic SQL Injection Improper Authentication	04.05.2020	KingSkrupellos
Med.	ComangSoft Improper Authentication	03.05.2020	KingSkrupellos
Med.	Skynyx Technologies Private Limited Improper Authentication	03.05.2020	KingSkrupellos
Med.	GloriousWebTech Improper Authentication	03.05.2020	KingSkrupellos
Med.	Mystic Media Webinitiate Improper Authentication Backdoor Access	03.05.2020	KingSkrupellos
Med.	SkyWayInfoMedia Improper Authentication	03.05.2020	KingSkrupellos
Med.	TechDomain BD Improper Authentication	03.05.2020	KingSkrupellos
Med.	Pinnacle India Solution Admin Authentication Bypass	15.04.2020	KingSkrupellos
Med.	SSInfoTech Rohini WebDesign Company Authentication Bypass	18.09.2019	KingSkrupellos
Med.	Cisco UCS / IMC Supervisor Authentication Bypass / Command Injection	29.08.2019	Pedro Ribeiro
Med.	RecargatonerAntequera Improper Authentication Vulnerability	20.08.2019	KingSkrupellos
Med.	Sistema Mobiliario en Movimiento ComponentsMx Authentication Bypass Insert File Vulnerability	19.08.2019	KingSkrupellos
Med.	Sistema Suanca Industrias Authentication Bypass Insert File Vulnerability	19.08.2019	KingSkrupellos
Med.	Sistema CodiFarma San Jose de los Cedros Authentication Bypass Insert File Vulnerability	19.08.2019	KingSkrupellos
Med.	Bgrecuperacion Chihuahua Authentication Bypass Insert File Vulnerability	19.08.2019	KingSkrupellos
Med.	UfaCup88 Authentication Bypass Insert File Vulnerability	19.08.2019	KingSkrupellos
Med.	Keros ClaudioGarau Improper Authentication Insert File Vulnerability	19.08.2019	KingSkrupellos
Med.	AlemReklam Ajans Improper Authentication File Upload Vulnerability	17.08.2019	KingSkrupellos
Med.	Sistema Vitapromin Nuticion Inteligente Improper Authentication File Upload Vulnerability	11.08.2019	KingSkrupellos
Med.	Powered By Vlaevski Site Administration 1.0 Improper Authentication File Upload Vulnerability	11.08.2019	KingSkrupellos
Med.	Ellucian Banner Web Tailor / Banner Enterprise Identity Services Improper Authentication	14.05.2019	Joshua Mulliken
Med.	Desenvolvido por Agencia CDG Design Brasil Improper Authentication	09.04.2019	KingSkrupellos
Med.	Webmaster Atom Computer Software Counselling Improper Access Control Vulnerability	16.10.2018	KingSkrupellos
Low	WordPress Developed by Netsoft Limited Software Development Bangladesh Improper Authentication Vulnerability	05.09.2018	KingSkrupellos
Med.	Designed & Developed by Sacit.Lk SriLanka Improper Authentication Vulnerability	05.07.2018	KingSkrupellos
Med.	Powered by Yii Framework RBAC Manager for Yii 2 Improper Authentication Vulnerability	01.07.2018	KingSkrupellos
Med.	JanTek JTC-200 RS232-NET Connector CSRF / Missing Authentication	01.11.2017	Karn Ganeshen
Med.	Samsung Smart TV Wi-Fi Direction Improper Authentication	27.04.2017	Neseso Research Team
Med.	Aruba Networks AOS 6.3.1.19 Improper Authentication	08.11.2016	Klaus Tichman
High	DOKEOS ce30 Authentication Bypass	19.02.2016	High-Tech Bridge Secur...
Low	Pentaho 5.2.x BA Suite / PDI Information Disclosure	20.09.2015	Gregory DRAPERI
High	SAP HANA IU5 SDK Authentication Bypass	30.07.2014	Onapsis
High	Dahua DVR Authentication Bypass	19.07.2014	Zhejiang
High	ASUS RT Router Anonymous FTP Access	14.02.2014	Kyle Lovett
High	Router D-Link DIR-100 Multiple Vulnerabilities	04.02.2014	Felix Richter
High	Nisuta NS-WIR150NE, NS-WIR300N Authentication Bypass	11.01.2014	ampliasecurity
Med.	Burden 1.8 Privilege Escalation	09.01.2014	High-Tech Bridge Secur...
High	Vivotek IP Cameras RTSP Authentication Bypass	06.11.2013	CORE
High	Radio Thermostat Of America Inc Lack Of Authentication	02.08.2013	Daniel Crowley
High	D-Link IP Cameras Injection & Bypass	30.04.2013	CORE
Med.	Cisco Firewall Services Module Software Multiple Vulnerabilities	10.04.2013	Cisco
Med.	EMC Smarts Network Configuration Manager Improper Authentication Vulnerability	27.03.2013	EMC
Med.	Backupbuddy 2.2.4 Sensitive Data Exposure	25.03.2013	robarmstrong.te71
High	PBBoard 2.1.4 SQL Injection and Improper Authentication	09.08.2012	High-Tech Bridge Secur...
Med.	LifeSize Room Vulnerabilities	05.09.2011	securestate net
High	RealVNC Authentication Bypass	31.08.2011	Juha-Matti
High	RSA Adaptive Authentication (On-Premise) Security Issue	24.08.2011	EMC
Med.	FreeRADIUS 2.1.11 Multiple Vulns	06.08.2011	DCERT
High	IBM Lotus Domino Server Controller Authentication Bypass Remote Code Execution Vulnerability	30.03.2011	ZDI
Med.	Arthur de Jong \'nss-pam-ldapd\' Authentication Bypass Vulnerability	17.03.2011	Russell Sim
High	Pointter PHP Content Management System 1.0 Privilege Escalation	16.12.2010	Mark Stanislav
High	Pointter PHP Micro-Blogging Social Network 1.0 Privilege Escalation	16.12.2010	Mark Stanislav
High	OpenSSL J-PAKE Validation Error Lets Remote Users Validate Without Shared Secret Key	08.12.2010	Sebastian Martini
High	Pandora FMS <= 3.1 Authentication Bypass	05.12.2010	Juan Galiana Lara
High	Cisco Unified Videoconferencing multiple vulnerabilities	24.11.2010	Florent Daigniere
High	Camtron CMNC-200 IP Camera Authentication Bypass	18.11.2010	Trustwave's SpiderLabs
High	IBM OmniFind - several vulnerabilities	15.11.2010	Fatih Kilic
High	Likewise Open 5.4 & 6.0 Multiple Vulns	29.07.2010	Gerald Carter
Low	dootzky oblog Persistant XSS, CSRF, Admin Bruteforce	29.06.2010	null
Med.	SpringSource tc Server unauthenticated remote access to JMX interface	25.05.2010	s2-security
High	ToutVirtual VirtualIQ Multiple Vulnerabilities	21.05.2010	Claudio Criscione
High	CA XOsoft Multiple Vulns.	10.04.2010	Andrea Micalizzi aka r...
High	Varnish reverse proxy 2.0.6 Medium security hole	07.04.2010	Tim Brown
Med.	Sahana 0.6.2.2 authentication bypass	19.03.2010	nill
High	HP openview Performance Insight 5.4 Remote Execution of ArbitraryCommands	15.03.2010	HP

---

CVEMAP Search Results

CVE

Details

Description

2024-07-17

	CVE-2024-28992	Updating...	The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.
	CVE-2024-23471	Updating...	The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution.
	CVE-2024-23470	Updating...	The SolarWinds Access Rights Manager was found to be susceptible to a pre-authentication remote code execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to run commands and executables.

2024-07-04

CVE-2024-1573

Updating...

Improper Authentication vulnerability in the mobile monitoring feature of ICONICS GENESIS64 versions 10.97 to 10.97.2, Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.2 and Mitsubishi Electric MC Works64 all versions allows a remote unauthenticated attacker to bypass proper authentication and log in to the system when all of the following conditions are met: * Active Directory is used in the security setting. * �??Automatic log in�?� option is enabled in the security setting. * The IcoAnyGlass IIS Application Pool is running under an Active Directory Domain Account. * The IcoAnyGlass IIS Application Pool account is included in GENESIS64TM and MC Works64 Security and has permission to log in.

2024-06-24

CVE-2024-37233

Updating...

Improper Authentication vulnerability in Play.Ht allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Play.Ht: from n/a through 3.6.4.

2024-06-14

CVE-2024-3080

Updating...

Certain ASUS router models have authentication bypass vulnerability, allowing unauthenticated remote attackers to log in the device.

2024-06-13

CVE-2024-30299

Updating...

Adobe Framemaker Publishing Server versions 2020.3, 2022.2 and earlier are affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access or elevated privileges within the application. Exploitation of this issue does not require user interaction.

2024-06-12

CVE-2024-36264

Updating...

** UNSUPPORTED WHEN ASSIGNED ** Improper Authentication vulnerability in Apache Submarine Commons Utils. This issue affects Apache Submarine Commons Utils: from 0.8.0. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

2024-06-11

CVE-2024-36266

Updating...

A vulnerability has been identified in PowerSys (All versions < V3.11). The affected application insufficiently protects responses to authentication requests. This could allow a local attacker to bypass authentication, thereby gaining administrative privileges for the managed remote devices.

2024-06-07

CVE-2024-5732

Updating...

A vulnerability was found in Clash up to 0.20.1 on Windows. It has been declared as critical. This vulnerability affects unknown code of the component Proxy Port. The manipulation leads to improper authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. VDB-267406 is the identifier assigned to this vulnerability.

 

---

Copyright 2024, cxsecurity.com