CWE-287

IBM Connect:Direct for UNIX 6.1.0, 6.0.0, 4.3.0, and 4.2.0 can allow a local or remote user to obtain an authenticated C

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to manipulate sy

A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. Wh

In S+ Operations and S+ History, it is possible that an unauthenticated user could inject values to the Operations Histo

An issue was discovered in Zammad before 3.4.1. There is an authentication bypass in the SSO endpoint via a crafted head

HGiga MailSherlock contains weak authentication flaw that attackers grant privilege remotely with default password gener

In GitLab before 13.0.12, 13.1.6 and 13.2.3, it is possible to bypass E-mail verification which is required for OAuth Fl

WordPress Portable phpMyAdmin Plugin has an authentication bypass vulnerability

A Two-Factor Authentication Bypass Vulnerability exists in BS-Client Private Client 2.4 and 2.5 via an XML request that

WordPress Portable phpMyAdmin Plugin 1.4.1 has Multiple Security Bypass Vulnerabilities

An issue was discovered in drf-jwt 1.15.x before 1.15.1. It allows attackers with access to a notionally invalidated tok

A vulnerability was found in Moodle versions 3.7 before 3.7.3, 3.6 before 3.6.7, 3.5 before 3.5.9 and earlier. OAuth 2 p

The web server in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows access to different end

An exploitable authentication bypass vulnerability exists in the ESPON Web Control functionality of Epson EB-1470Ui MAIN

The ABUS Secvest FUMO50110 hybrid module does not have any security mechanism that ensures confidentiality or integrity

FusionCompute 8.0.0 have an insufficient authentication vulnerability. An attacker may exploit the vulnerability to dele

An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 an

Affected versions of Smartstore have a missing WebApi Authentication attribute. This vulnerability affects Smartstore sh

In Alerta before version 8.1.0, users may be able to bypass LDAP authentication if they provide an empty password when A

CRIXP OpenCRX version 4.30 and 5.0-20200717 and prior suffers from an unverified password change vulnerability. An attac

An authentication bypass vulnerability in the Panorama context switching feature allows an attacker with network access

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user w

In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, the authentication system is malformed and an attacker is

The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows (1) remote attackers to execute a

D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-13

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-26

An issue was discovered in Centreon Web through 19.04.3. When a user changes his password on his profile page, the conta

OpenBlocks IoT VX2 prior to Ver.4.0.0 (Ver.3 Series) allows an attacker on the same network segment to bypass authentica

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-86

As of v1.5.0, the default admin password is set to the argocd-server pod name. For insiders with access to the cluster o

Certain NETGEAR devices are affected by authentication bypass. This affects EX3700 before 1.0.0.64, EX3800 before 1.0.0.

NETGEAR XR500 devices before 2.3.2.32 are affected by authentication bypass.

Certain NETGEAR devices are affected by authentication bypass. This affects GS810EMX before 1.0.0.5, XS512EM before 1.0.

NETGEAR WAC510 devices before 5.0.0.17 are affected by authentication bypass.

Certain NETGEAR devices are affected by authentication bypass. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0

Certain NETGEAR devices are affected by authentication bypass. This affects R6300v2 before 1.0.4.8, R6400 before 1.0.1.2

Certain NETGEAR devices are affected by authentication bypass. This affects R6300v2 before 1.0.4.8, PLW1000v2 before 1.0

Certain NETGEAR devices are affected by authentication bypass. This affects D6220 before 1.0.0.28, D6400 before 1.0.0.60

Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0

An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satel

An issue was discovered in Mattermost Server before 4.7.0, 4.6.2, and 4.5.2. An attacker could authenticate to a differe

Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code exe

Certain Zyxel products have a locally accessible binary that allows a non-root user to generate a password for an undocu

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to bypass auth

Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to bypass auth

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to bypass auth

Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allo

Improper authentication in socket services for some Intel(R) Server Boards, Server Systems and Compute Modules before ve