CWE:

	Tytuł	Data	Autor
Med.	HealthForYou 1.11.1 / HealthCoach 2.9.2 Account Takeover	06.06.2021	Nick Decker

---

Common Weakness Enumeration (CWE)

CVE

Szczegóły

Opis

2024-10-17

CVE-2024-9683

Updating...

A vulnerability was found in Quay, which allows successful authentication even when a truncated password version is provided. This flaw affects the authentication mechanism, reducing the overall security of password enforcement.  While the risk is relatively low due to the typical length of the passwords used (73 characters), this vulnerability can still be exploited to reduce the complexity of brute-force or password-guessing attacks. The truncation of passwords weakens the overall authentication process, thereby reducing the effectiveness of password policies and potentially increasing the risk of unauthorized access in the future.

2024-09-05

	CVE-2024-5956	Updating...	This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in response mostly
	CVE-2024-5957	Updating...	This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager.

2024-07-11

CVE-2024-38433

Updating...

Nuvoton - CWE-305: Authentication Bypass by Primary Weakness An attacker with write access to the SPI-Flash on an NPCM7xx BMC subsystem that uses the Nuvoton BootBlock reference code can modify the u-boot image header on flash parsed by the BootBlock which could lead to arbitrary code execution.

2024-06-11

CVE-2023-4727

Updating...

A flaw was found in dogtag-pki and pki-core. The token authentication scheme can be bypassed with a LDAP injection. By passing the query string parameter sessionID=*, an attacker can authenticate with an existing session saved in the LDAP directory server, which may lead to escalation of privilege.

2024-06-02

CVE-2024-36388

Updating...

MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function

2024-03-05

CVE-2023-7103

Updating...

Authentication Bypass by Primary Weakness vulnerability in ZKSoftware Biometric Security Solutions UFace 5 allows Authentication Bypass.This issue affects UFace 5: through 12022024.

2023-09-12

CVE-2023-4898

Updating...

Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1.

2023-08-02

CVE-2023-1935

Updating...

ROC800-Series RTU devices are vulnerable to an authentication bypass, which could allow an attacker to gain unauthorized access to data or control of the device and cause a denial-of-service condition.

2023-07-17

CVE-2023-2959

Updating...

Authentication Bypass by Primary Weakness vulnerability in Oliva Expertise Oliva Expertise EKS allows Collect Data as Provided by Users.This issue affects Oliva Expertise EKS: before 1.2.

 

---

Copyright 2024, cxsecurity.com