CWE:

	Topic	Date	Author
Low	SAP FRUN Simple Diagnostics Agent 1.0 Missing Authentication	22.06.2022	Yvan Genuer
Med.	SAP Netweaver JAVA 7.50 Missing Authorization	17.06.2021	Ignacio D. Favro
Med.	URVE Software Build 24.03.2020 Authentication Bypass / Remote Code Execution	30.12.2020	Erik Steltzner
Med.	IBM Cognos TM1 / IBM Planning Analytics Server Configuration Overwrite / Code Execution	29.03.2020	Pedro Ribeiro
Med.	Sophos UTM 9.410 loginuser confd Service Privilege Escalation	06.03.2018	KoreLogic
Med.	JD Edwards 9.1 EnterpriseOne Server Denial Of Service	28.08.2016	Fernando Russ and Mati...
Med.	JD Edwards 9.1 EnterpriseOne Server Create Users	28.08.2016	Fernando Russ and Mati...
High	SAP TREX 7.10 Revision 63 Remote Command Execution	22.08.2016	Multiple
Med.	Davolink DV-2051 Missing Access Control	06.08.2016	Eric Flokstra
High	InFocus IN3128HD Projector Missing Authentication	28.04.2015	CORE
High	Allied Telesis AT-RG634A ADSL router unauthenticated webshell	26.03.2014	Sebastian Muniz
High	INSTEON Hub 2242-222 Lack Of Authentication	02.08.2013	David Bryan

---

CVEMAP Search Results

CVE

Details

Description

2024-04-18

	CVE-2024-1491	Updating...	The devices allow access to an unprotected endpoint that allows MPFS file system binary image upload without authentication. The MPFS2 file system module provides a light-weight read-only file system that can be stored in external EEPROM, external serial flash, or internal flash program memory. This file system serves as the basis for the HTTP2 web server module, but is also used by the SNMP module and is available to other applications that require basic read-only storage capabilities. This can be exploited to overwrite the flash program memory that holds the web server's main interfaces and execute arbitrary code.
	CVE-2024-21846	Updating...	An unauthenticated attacker can reset the board and stop transmitter operations by sending a specially-crafted GET request to the command.cgi gateway, resulting in a denial-of-service scenario.

2024-03-12

	CVE-2022-34321	Updating...	Improper Authentication vulnerability in Apache Pulsar Proxy allows an attacker to connect to the /proxy-stats endpoint without authentication. The vulnerable endpoint exposes detailed statistics about live connections, along with the capability to modify the logging level of proxied connections without requiring proper authentication credentials. This issue affects Apache Pulsar versions from 2.6.0 to 2.10.5, from 2.11.0 to 2.11.2, from 3.0.0 to 3.0.1, and 3.1.0. The known risks include exposing sensitive information such as connected client IP and unauthorized logging level manipulation which could lead to a denial-of-service condition by significantly increasing the proxy's logging overhead. When deployed via the Apache Pulsar Helm chart within Kubernetes environments, the actual client IP might not be revealed through the load balancer's default behavior, which typically obscures the original source IP addresses when externalTrafficPolicy is being configured to "Cluster" by default. The /proxy-stats endpoint contains topic level statistics, however, in the default configuration, the topic level statistics aren't known to be exposed. 2.10 Pulsar Proxy users should upgrade to at least 2.10.6. 2.11 Pulsar Proxy users should upgrade to at least 2.11.3. 3.0 Pulsar Proxy users should upgrade to at least 3.0.2. 3.1 Pulsar Proxy users should upgrade to at least 3.1.1. Users operating versions prior to those listed above should upgrade to the aforementioned patched versions or newer versions. Additionally, it's imperative to recognize that the Apache Pulsar Proxy is not intended for direct exposure to the internet. The architectural design of Pulsar Proxy assumes that it will operate within a secured network environment, safeguarded by appropriate perimeter defenses.
	CVE-2024-25995	Updating...	An unauthenticated remote attacker can modify configurations to perform a remote code execution due to a missing authentication for a critical function.

2024-01-18

CVE-2024-22212

Updating...

Nextcloud Global Site Selector is a tool which allows you to run multiple small Nextcloud instances and redirect users to the right server. A problem in the password verification method allows an attacker to authenticate as another user. It is recommended that the Nextcloud Global Site Selector is upgraded to version 1.4.1, 2.1.2, 2.3.4 or 2.4.5. There are no known workarounds for this issue.

2023-12-08

CVE-2023-32460

Updating...

Dell PowerEdge BIOS contains an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.

2023-09-27

	CVE-2023-4506	Updating...	The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Passback in versions up to, and including, 4.1.10. This is due to insufficient validation when changing the LDAP server. This makes it possible for authenticated attackers, with administrative access and above, to change the LDAP server and retrieve the credentials for the original LDAP server.
	CVE-2023-4505	Updating...	The Staff / Employee Business Directory for Active Directory plugin for WordPress is vulnerable to LDAP Passback in versions up to, and including, 1.2.3. This is due to insufficient validation when changing the LDAP server. This makes it possible for authenticated attackers, with administrative access and above, to change the LDAP server and retrieve the credentials for the original LDAP server.
	CVE-2023-41333	Updating...	Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An attacker with the ability to create or modify CiliumNetworkPolicy objects in a particular namespace is able to affect traffic on an entire Cilium cluster, potentially bypassing policy enforcement in other namespaces. By using a crafted `endpointSelector` that uses the `DoesNotExist` operator on the `reserved:init` label, the attacker can create policies that bypass namespace restrictions and affect the entire Cilium cluster. This includes potentially allowing or denying all traffic. This attack requires API server access, as described in the Kubernetes API Server Attacker section of the Cilium Threat Model. This issue has been resolved in Cilium versions 1.14.2, 1.13.7, and 1.12.14. As a workaround an admission webhook can be used to prevent the use of `endpointSelectors` that use the `DoesNotExist` operator on the `reserved:init` label in CiliumNetworkPolicies.

2023-09-25

CVE-2023-43644

Updating...

Sing-box is an open source proxy system. Affected versions are subject to an authentication bypass when specially crafted requests are sent to sing-box. This affects all SOCKS5 inbounds with user authentication and an attacker may be able to bypass authentication. Users are advised to update to sing-box 1.4.4 or to 1.5.0-rc.4. Users unable to update should not expose the SOCKS5 inbound to insecure environments.

 

---

Copyright 2024, cxsecurity.com