CWE:

	Topic	Date	Author
Med.	Barco wePresent Authentication Bypass	21.11.2020	Jim Becher
Med.	ABUS Secvest Hybrid Module FUMO50110 Authentication Bypass	01.08.2020	Matthias Deeg
High	Seagate GoFlex Satellite Remote Telnet Default Password	19.12.2015	Matt Bergin
High	Linksys EA6100 Wireless Router Authentication Bypass	05.12.2015	Matt Bergin
Med.	Password Safe And Repository Enterprise 7.4.4 Build 2247 SQL Injection	13.10.2015	Matthias Deeg
High	BullGuard Internet Security 15.0.297 Authentication Bypass	08.05.2015	Matthias Deeg
High	BullGuard Antivirus 15.0.297 Authentication Bypass	07.05.2015	Matthias Deeg
High	BullGuard Premium Protection 15.0.297 Authentication Bypass	07.05.2015	Matthias Deeg
High	InFocus IN3128HD Projector Missing Authentication	28.04.2015	CORE
High	Panda Internet Security 2015 15.0.1 Authentication Bypass	15.04.2015	Matthias Deeg
High	Panda Gold Protection 2015 15.1.0 Authentication Bypass	15.04.2015	Matthias Deeg
High	Panda Global Protection 2015 15.1.0 Authentication Bypass	15.04.2015	Matthias Deeg
High	Panda Antivirus Pro 2015 15.1.0 Authentication Bypass	15.04.2015	Matthias Deeg
Med.	Linksys Access Bypass	17.08.2013	K Lovett & M Claunch

---

CVEMAP Search Results

CVE

Details

Description

2024-07-25

CVE-2024-7007

Updating...

Positron Broadcast Signal Processor TRA7005 v1.20 is vulnerable to an authentication bypass exploit that could allow an attacker to have unauthorized access to protected areas of the application.

2024-07-21

CVE-2024-38437

Updating...

D-Link - CWE-288:Authentication Bypass Using an Alternate Path or Channel

2024-07-18

CVE-2024-5620

Updating...

Authentication Bypass Using an Alternate Path or Channel vulnerability in PruvaSoft Informatics Apinizer Management Console allows Authentication Bypass.This issue affects Apinizer Management Console: before 2024.05.1.

2024-06-27

CVE-2024-31916

Updating...

IBM OpenBMC FW1050.00 through FW1050.10 BMCWeb HTTPS server component could disclose sensitive URI content to an unauthorized actor that bypasses authentication channels. IBM X-ForceID: 290026.

2024-06-13

CVE-2024-38279

Updating...

The affected product is vulnerable to an attacker modifying the bootloader by using custom arguments to bypass authentication and gain access to the file system and obtain password hashes.

2024-04-16

CVE-2024-1646

Updating...

parisneo/lollms-webui is vulnerable to authentication bypass due to insufficient protection over sensitive endpoints. The application checks if the host parameter is not '0.0.0.0' to restrict access, which is inadequate when the application is bound to a specific interface, allowing unauthorized access to endpoints such as '/restart_program', '/update_software', '/check_update', '/start_recording', and '/stop_recording'. This vulnerability can lead to denial of service, unauthorized disabling or overriding of recordings, and potentially other impacts if certain features are enabled in the configuration.

2023-11-03

CVE-2023-3277

Updating...

The MStore API plugin for WordPress is vulnerable to Unauthorized Account Access and Privilege Escalation in versions up to, and including, 4.10.7 due to improper implementation of the Apple login feature. This allows unauthenticated attackers to log in as any user as long as they know the user's email address. We are disclosing this issue as the developer has not yet released a patch, but continues to release updates and we escalated this issue to the plugin's team 30 days ago.

2023-10-26

CVE-2023-46747

Updating...

Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

2023-10-11

CVE-2023-4957

Updating...

A vulnerability of authentication bypass has been found on a Zebra Technologies ZTC ZT410-203dpi ZPL printer. This vulnerability allows an attacker that is in the same network as the printer, to change the username and password for the Web Page by sending a specially crafted POST request to the setvarsResults.cgi file. For this vulnerability to be exploitable, the printers protected mode must be disabled.

2023-09-19

CVE-2023-42793

Updating...

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

 

---

Copyright 2024, cxsecurity.com