CWE-287

A vulnerability in the HPE Performance Cluster Manager (HPCM) GUI could allow an attacker to bypass authentication.

The JobSearch WP Job Board plugin for WordPress is vulnerable to authentication bypass in all versions up to, and includ

Minion event bus authorization bypass. An attacker with access to a minion key can craft a message which may be able to

A vulnerability was found in Comet System T0510, T3510, T3511, T4511, T6640, T7511, T7611, P8510, P8552 and H3531 1.60.

Unauthorized access and impersonation can occur in versions 4.6.2.3226 and below of Progress Software's Hybrid Data Pipe

An authentication bypass vulnerability in PandoraNext-TokensTool v0.6.8 and before. An attacker can exploit this vulnera

A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allo

OctoPrint-SpoolManager is a plugin for managing spools and all their usage metadata. In versions 1.8.0a2 and older of th

Filament is a collection of full-stack components for accelerated Laravel development. Versions 4.0.0 through 4.3.0 cont

The WPCOM Member plugin for WordPress is vulnerable to authentication bypass via brute force in all versions up to, and

On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-sec

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12

An issue was discovered in PPress 0.0.9 allowing attackers to gain escilated privlidges via crafted session cookie.

BeyondTrust Privileged Remote Access (PRA) versions prior to 25.1 are vulnerable to a local authentication bypass. A loc

An improper authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, t

Insufficient protection against brute-force and runtime manipulation in the local authentication component in Two App St

A weakness has been identified in alaneuler batteryKid up to 2.1 on macOS. The affected element is an unknown function o

A vulnerability was found in whuan132 AIBattery up to 1.0.9. The affected element is an unknown function of the file AIB

The issue was addressed with improved authentication. This issue is fixed in macOS Sequoia 15.6. A local attacker may be

A flaw exists in the Windows login flow where an AuthContext token can be exploited for replay attacks and authenticati

Guangzhou Hongfan Technology Co., LTD. iOffice20 has any user login vulnerability. An attacker can log in to any system

Anyquery is an SQL query engine built on top of SQLite. Versions 0.4.3 and below allow attackers who have already gained

Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful e

A lack of rate limiting in the OTP verification component of Nagios Fusion v2024R1.2 and v2024R2 allows attackers to byp

NiceGUI is an easy-to-use, Python-based UI framework. Prior to 2.9.1, authenticating with NiceGUI logged in the user for

A denial-of-service vulnerability exists in CyberPower PowerPanel Business (PPB) 4.11.0. An unauthenticated remote atta

macrozheng mall-tiny 1.0.1 suffers from Insecure Permissions. The application's JWT signing keys are hardcoded and do no

The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass in all versi

FACTION is a PenTesting Report Generation and Collaboration Framework. Authentication is bypassed when an attacker regis

An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Remotely Dumping of Video Footage and the Liv

Frappe is a full-stack web application framework. Prior to versions 14.89.0 and 15.51.0, making crafted requests could l

Insufficient state checks lead to a vector that allows to bypass 2FA checks.

Improper authentication in the firmware for the Intel(R) Slim Bootloader may allow a privileged user to potentially enab

Improper authentication in Azure Stack allows an unauthorized attacker to disclose information over a network.

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to versio

Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, Hoverfly’s admin WebSocket endpoint /api/v

This issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26. Incoming FaceTime cal

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain a Broken

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions

Memos is a privacy-first, lightweight note-taking service that uses Access Tokens to authenticate application access. Wh

Improper authentication vulnerability in TP-Link WA850RE (httpd modules) allows unauthenticated attackers to download th

BCryptPasswordEncoder.matches(CharSequence,String) will incorrectly return true for passwords larger than 72 characters

In some mod_ssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack allows

A vulnerability has been found in D-Link DHP-W310AV 1.04 and classified as critical. This vulnerability affects unknown

A vulnerability was found in Keytop 路内停车收费系统 2.7.1. It has been declared as critical. Affected by this vulnerability is

A vulnerability, which was classified as critical, was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af447

A vulnerability, which was classified as critical, was found in JAdmin-JAVA JAdmin 1.0. Affected is the function toLogin

A vulnerability was found in D-Link DI-7003GV2 24.04.18D1 R(68125). It has been classified as critical. This affects the

A vulnerability, which was classified as critical, has been found in Gowabby HFish 0.1. This issue affects the function

A vulnerability was found in Netgear WNR614 1.1.0.28_1.0.1WW. It has been classified as critical. This affects an unknow