CWE-287

In Jenkins WSO2 Oauth Plugin 1.0 and earlier, authentication claims are accepted without validation by the "WSO2 Oauth"

A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA. This affects

An issue in D-Link DI-8100 16.07.26A1 allows a remote attacker to bypass administrator login authentication

An issue in Ocuco Innovation - INNOVASERVICEINTF.EXE v2.10.24.17 allows attackers to bypass authentication and escalate

An issue in Ocuco Innovation - REPORTSERVER.EXE v2.10.24.13 allows attackers to bypass authentication and escalate privi

An issue in Ocuco Innovation - INVCLIENT.EXE v2.10.24.5 allows attackers to bypass authentication and escalate privilege

An issue in Ocuco Innovation - REPORTS.EXE v2.10.24.13 allows attackers to bypass authentication and escalate privileges

An authentication bypass vulnerability exists in HPE StoreOnce Software.

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.10, secret verificat

Permission vulnerability in the mobile application (com.afmobi.boomplayer) may lead to the risk of unauthorized operatio

An issue was discovered on COROS PACE 3 devices through 3.0808.0. It identifies itself as a device without input or outp

ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to an improper authentication vulnerability wh

A vulnerability, which was classified as critical, was found in LB-LINK BL-AC1900, BL-AC2100_AZ3, BL-AC3600, BL-AX1800,

An authentication bypass vulnerability in the /web/um_open_telnet.cgi endpoint in Nexxt Solutions NCM-X1800 Mesh Router

An attacker of Secrets Manager, Self-Hosted installations that route traffic from Secrets Manager to AWS through a misco

An issue in the OTP mechanism of Chavara Family Welfare Centre Chavara Matrimony Site v2.0 allows attackers to bypass au

In TOTOLINK EX1200T firmware 4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginA

jeewx-boot 1.3 has an authentication bypass vulnerability in the preHandle function

JeeWMS 771e4f5d0c01ffdeae1671be4cf102b73a3fe644 (2025-05-19) contains incorrect authentication bypass vulnerability, whi

An issue in Roadcute API v.1 allows a remote attacker to execute arbitrary code via the application exposing a password

zhisheng17 blog 3.0.1-SNAPSHOT has an authentication bypass vulnerability. An attacker can exploit this vulnerability to

MallChat v1.0-SNAPSHOT has an authentication bypass vulnerability. An attacker can exploit this vulnerability to access

An authentication bypass vulnerability in anji-plus AJ-Report up to v1.4.2 allows unauthenticated attackers to execute a

The RingCentral Communications plugin for WordPress is vulnerable to Authentication Bypass due to improper validation wi

An improper authentication vulnerability has been reported to affect VioStor. If a remote attacker, they can then exploi

The Amp’ed RF BT-AP 111 Bluetooth access point's HTTP admin interface does not have an authentication feature, allowing

Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized in

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integratio

An authentication bypass security issue exists within FactoryTalk View Machine Edition Web Browser ActiveX control. Exp

Improper host authentication vulnerability in wolfSSH version 1.4.20 and earlier clients that allows authentication bypa

Improper authentication in the web-based management interface of NETLINK HG322G V1.0.00-231017, allows a remote unauthen

The communication protocol implemented in Ghost Robotics Vision 60 v0.27.2 could allow an attacker to send commands to t

TM2 Monitoring v3.04 contains an authentication bypass and plaintext credential disclosure.

Dell Storage Center - Dell Storage Manager, version(s) 20.1.21, contain(s) an Improper Authentication vulnerability. An

Starting from 2.53.6, 2.54.3, and 2.55.0, Zitadel only required multi factor authentication in case the login policy has

ZITADEL is an open source identity management platform. Starting in version 2.50.0 and prior to versions 2.71.19, 3.4.4,

The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to broken access control due

The Newtec Celox UHD (models: CELOXA504, CELOXA820) running firmware version celox-21.6.13 is vulnerable to an authentic

An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to access admi

The Email Verification, Email OTP, Block Spam Email, Passwordless login, Hide Login, Magic Login – User Verification plu

FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. Versions are vulnerable to aut

An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 through 24.2.*, and 25.1 through 25.1.*. An incomplete co

An issue in Fossorial fosrl/pangolin v.1.6.2 and before allows a remote attacker to escalate privileges via the 2FA comp

RustFS is a distributed object storage system built in Rust. In versions prior to 1.0.0-alpha.78, RustFS implements gRPC

An Authentication Bypass vulnerability on UniFi Protect Application with Auto-Adopt Bridge Devices enabled could allow a

NATS-Server is a High-Performance server for NATS.io, the cloud and edge native messaging system. In versions starting f

An unauthorized access vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is caused by the val

Hikka is a Telegram userbot. A vulnerability affects all users of versions below 1.6.2, including most of the forks. It

authentik is an open-source identity provider. After authorizing access to a RAC endpoint, authentik creates a token whi

Vulnerabilities* in ActADUR local server product, developed and maintained by ProTNS, allows Remote Code Inclusion on ho