CWE-287

LCDS Laquis SCADA prior to version 4.1.0.4150 allows an authentication bypass, which may allow an attacker access to sen

A vulnerability in the Graphite service of Cisco HyperFlex software could allow an unauthenticated, remote attacker to r

It was found that dropbear before version 2013.59 with GSSAPI leaks whether given username is valid or invalid. When an

A vulnerability in access control list (ACL) functionality of the Gigabit Ethernet Management interface of Cisco IOS XE

Several web pages in SAP NetWeaver Process Integration (Runtime Workbench), fixed in versions 7.10 to 7.11, 7.30, 7.31,

A vulnerability in the session identification management functionality of the web-based interface of Cisco Wireless LAN

In Webbukkit Dynmap 3.0-beta-3 or below, due to a missing login check in servlet/MapStorageHandler.java, an attacker can

The generated Kotlin DSL settings allowed usage of an unencrypted connection for resolving artifacts. The issue was fixe

In GE Aestiva and Aespire versions 7100 and 7900, a vulnerability exists where serial devices are connected via an added

In Knowage through 6.1.1, the sign up page does not invalidate a valid CAPTCHA token. This allows for CAPTCHA bypass in

A vulnerability in the protocol detection component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services

Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy (MCP) prior to 3.0.0 allows l

A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center

In jpv (aka Json Pattern Validator) before 2.1.1, compareCommon() can be bypassed because certain internal attributes ca

A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The Applica

A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The Applica

A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network acces

A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker

A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The SFTP service (default po

The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed for unauthenticated option c

An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x befo

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an unauthenticated user can use the "local port forwarding" and "dyn

In Medtronic Valleylab FT10 Energy Platform (VLFT10GEN) version 2.1.0 and lower and version 2.0.3 and lower, and Valleyl

A vulnerability in 802.1x function of Cisco IOS Software on the Catalyst 6500 Series Switches could allow an unauthentic

It was found that Keycloak's Node.js adapter before version 4.8.3 did not properly verify the web token received from th

An elevation of privilege vulnerability exists when Skype for Andriod fails to properly handle specific authentication r

The product M2M ETHERNET (FW Versions 2.22 and prior, ETH-FW Versions 1.01 and prior) is vulnerable in that an attacker

It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual action

When a new protocol handler is registered, the API accepts a title argument which can be used to mislead users about whi

Information leakage vulnerability in the /mc login page in ManageEngine ServiceDesk Plus 9.3 software allows authenticat

A missing check in the Nextcloud Server prior to version 15.0.1 causes leaking of calendar event names when adding or mo

cPanel before 55.9999.141 allows a POP/IMAP cPHulk bypass via account name munging (SEC-107).

cPanel before 68.0.27 does not validate database and dbuser names during renames (SEC-321).

There is an improper authentication vulnerability in Huawei smartphones (Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro).

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321(C00E320R1P1T8) have an insufficient authentica

Authentication Bypass vulnerability in the administrative user interface in McAfee Web Gateway 7.8.1.0 through 7.8.1.5 a

A vulnerability has been identified in TIM 1531 IRC (All version < V2.0). The devices was missing proper authentication

A vulnerability in the role-based resource checking functionality of the Cisco Unified Computing System (UCS) Director c

Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unau

An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.

Sitefinity 5.1, 5.2, 5.3, 5.4, 6.x, 7.x, 8.x, 9.x, and 10.x allow remote attackers to bypass authentication and conseque

Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices improperly manage sessions, which allows remote attackers to

ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows access to various /UserManagement/ privileged modules without authenticat

Symantec Reporter 9.5 prior to 9.5.4.1 and 10.1 prior to 10.1.5.5 does not restrict excessive authentication attempts fo

ASUS DSL-AC51, DSL-AC52U, DSL-AC55U, DSL-N55U C1, DSL-N55U D1, DSL-AC56U, DSL-N10_C1, DSL-N12U C1, DSL-N12E C1, DSL-N14U

The check_password function in html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to bypass authen

A remote attacker could bypass the Sandstorm organization restriction before build 0.203 via a comma in an email-address

This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Quest NetVault Backup

A flaw in the profile section of Online Voting System 1.0 allows an unauthenticated user to set an arbitrary password fo

A password hash usage authentication bypass vulnerability in Trend Micro Control Manager 6.0 could allow a remote attack