cve.bz

OWASP A07:2025 Authentication Failures vulnerabilities, newest first, page 182

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A07:2025 at MITRE.

Its weaknesses: 36

CWE-258, CWE-259, CWE-287, CWE-288, CWE-289, CWE-290, CWE-291, CWE-293, CWE-294, CWE-295, CWE-297, CWE-298, CWE-299, CWE-300, CWE-302, CWE-303, CWE-304, CWE-305, CWE-306, CWE-307, CWE-308, CWE-309, CWE-346, CWE-350, CWE-384, CWE-521, CWE-613, CWE-620, CWE-640, CWE-798, CWE-940, CWE-941, CWE-1390, CWE-1391, CWE-1392, CWE-1393

  1. 9.8CVE-2024-38437EPSS 0.7%

    D-Link - CWE-288:Authentication Bypass Using an Alternate Path or Channel

  2. 7.3CVE-2024-6637EPSS 0.4%

    The WooCommerce - Social Login plugin for WordPress is vulnerable to unauthenticated privilege escalation in all versions up to, and including, 2.7.3. This is due to a lack of brute force controls on a weak one-time password. This makes it…

  3. 7.3CVE-2024-6635EPSS 0.4%

    The WooCommerce - Social Login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.7.3. This is due to insufficient controls in the 'woo_slg_login_email' function. This makes it possible for unau…

  4. 6.1CVE-2024-6895EPSS 0.2%

    Insufficient authentication in user account management in Yugabyte Platform allows local network attackers with a compromised user session to change critical security information without re-authentication. An attacker with user session and…

  5. 8.1CVE-2024-41107ExploitEPSS 18%

    The CloudStack SAML authentication (disabled by default) does not enforce signature check. In CloudStack environments where SAML authentication is enabled, an attacker that initiates CloudStack SAML single sign-on authentication can bypass…

  6. 6.5CVE-2024-5620EPSS 0.3%

    Authentication Bypass Using an Alternate Path or Channel vulnerability in PruvaSoft Informatics Apinizer Management Console allows Authentication Bypass. This issue affects Apinizer Management Console: before 2024.05.1.

  7. 5.4CVE-2024-40648EPSS 0.3%

    matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. The `UserIdentity::is_verified()` method in the matrix-sdk-crypto crate before version 0.7.2 doesn't take into account the verification status of the user's ow…

  8. 5.7CVE-2023-40704EPSS 0.3%

    The product does not require unique and complex passwords to be created during installation. Using Philips's default password could jeopardize the PACS system if the password was hacked or leaked. An attacker could gain access to the da…

  9. 10.0CVE-2024-20419ExploitEPSS 81%

    A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is…

  10. 8.3CVE-2024-28992EPSS 1.9%

    The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform arbitrary file deletion and leak sensitive information.

  11. 8.8CVE-2024-23471EPSS 1.3%

    The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution.

  12. 8.8CVE-2024-23470EPSS 1.2%

    The SolarWinds Access Rights Manager was found to be susceptible to a pre-authentication remote code execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to run commands and executables.

  13. 8.8CVE-2024-23465EPSS 1.9%

    The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability. This vulnerability allows an unauthenticated user to gain domain admin access within the Active Directory environment.

  14. 9.8CVE-2024-5471EPSS 2.5%

    Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the hard-coded sensitive keys.

  15. 5.3CVE-2024-6535EPSS 0.5%

    A flaw was found in Skupper. When Skupper is initialized with the console-enabled and with console-auth set to Openshift, it configures the openshift oauth-proxy with a static cookie-secret. In certain circumstances, this may allow an atta…

  16. 7.5CVE-2024-21183EPSS 0.4%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with …

  17. 8.1CVE-2024-21146EPSS 0.4%

    Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: GL Accounts). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with networ…

  18. 9.6CVE-2023-4860EPSS 0.4%

    Inappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: H…

  19. 9.8CVE-2024-40515EPSS 0.7%

    An issue in SHENZHEN TENDA TECHNOLOGY CO.,LTD Tenda AX2pro V16.03.29.48_cn allows a remote attacker to execute arbitrary code via the Routing functionality.

  20. 8.8CVE-2024-40516EPSS 0.3%

    An issue in H3C Technologies Co., Limited H3C Magic RC3000 RC3000V100R009 allows a remote attacker to execute arbitrary code via the Routing functionality.

  21. 6.5CVE-2024-40503EPSS 0.4%

    An issue in Tenda AX12 v.16.03.49.18_cn+ allows a remote attacker to cause a denial of service via the Routing functionality and ICMP packet handling.

  22. 9.8CVE-2024-35338EPSS 0.5%

    Tenda i29V1.0 V1.0.0.5 was discovered to contain a hardcoded password for root.

  23. 9.8CVE-2024-22442EPSS 0.6%

    The vulnerability could be remotely exploited to bypass authentication.

  24. 6.8CVE-2024-37016EPSS 0.3%

    Mengshen Wireless Door Alarm M70 2024-05-24 allows Authentication Bypass via a Capture-Replay approach.

  25. 5.3CVE-2024-36457EPSS 0.3%

    The vulnerability allows an attacker to bypass the authentication requirements for a specific PAM endpoint.

  26. 6.5CVE-2024-39767EPSS 0.2%

    Mattermost Mobile Apps versions <=2.16.0 fail to validate that the push notifications received for a server actually came from this serve that which allows a malicious server to send push notifications with another server’s diagnostic ID o…

  27. 9.8CVE-2024-39917EPSS 0.6%

    xrdp is an open source RDP server. xrdp versions prior to 0.10.0 have a vulnerability that allows attackers to make an infinite number of login attempts. The number of max login attempts is supposed to be limited by a configuration parame…

  28. 8.8CVE-2024-39340EPSS 0.9%

    The authentication system of Securepoint UTM mishandles OTP keys. This allows the bypassing of second-factor verification (when OTP is enabled) in both the administration web interface and the user portal. Affected versions include UTM 11.…

  29. 9.8CVE-2024-6328EPSS 0.7%

    The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.14.7. This is due to insufficient verification on the 'phone' parameter of t…

  30. 8.1CVE-2024-28872EPSS 0.3%

    The TLS certificate validation code is flawed. An attacker can obtain a TLS certificate from the Stork server and use it to connect to the Stork agent. Once this connection is established with the valid certificate, the attacker can send m…

  31. 6.7CVE-2024-38433EPSS 0.2%

    Nuvoton - CWE-305: Authentication Bypass by Primary Weakness An attacker with write access to the SPI-Flash on an NPCM7xx BMC subsystem that uses the Nuvoton BootBlock reference code can modify the u-boot image header on flash parsed by …

  32. 9.8CVE-2024-6397EPSS 0.7%

    The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 0.1.0.44. This is due to insufficient verification of the API key. This makes it possibl…

  33. 9.4CVE-2024-6235ExploitEPSS 21%

    Sensitive information disclosure in NetScaler Console

  34. 9.3CVE-2024-5910KEVExploitEPSS 92%

    Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attackers with network access to Expedition. Note: Expedition is a tool aiding in configuration migration…

  35. 7.7CVE-2024-32759EPSS 0.4%

    Under certain circumstances the Software House C●CURE 9000 installer will utilize weak credentials.

  36. 9.8CVE-2024-6422EPSS 0.6%

    An unauthenticated remote attacker can manipulate the device via Telnet, stop processes, read, delete and change data.

  37. 5.9CVE-2024-37865EPSS 0.7%

    An issue in S3Browser v.11.4.5 and v.10.9.9 and fixed in v.11.5.7 allows a remote attacker to obtain sensitive information via the S3 compatible storage component.

  38. 8.8CVE-2024-37829EPSS 0.7%

    An issue in Outline <= v0.76.1 allows attackers to execute a session hijacking attack via user interaction with a crafted magic sign-in link.

  39. 8.8CVE-2024-34722EPSS 0.3%

    In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a protocol. This could lead to remote escalation of privilege with no additional execution privileges ne…

  40. 5.3CVE-2024-39899EPSS 0.6%

    PrivateBin is an online pastebin where the server has zero knowledge of pasted data. In v1.5, PrivateBin introduced the YOURLS server-side proxy. The idea was to allow using the YOURLs URL shortener without running the YOURLs instance with…

  41. 7.5CVE-2024-39698EPSS 0.4%

    electron-updater allows for automatic updates for Electron apps. The file `packages/electron-updater/src/windowsExecutableCodeSignatureVerifier.ts` implements the signature validation routine for Electron applications on Windows. Because o…

  42. 3.7CVE-2024-28067EPSS 0.3%

    A vulnerability in Samsung Exynos Modem 5300 allows a Man-in-the-Middle (MITM) attacker to downgrade the security mode of packets going to the victim, enabling the attacker to send messages to the victim in plaintext.

  43. 5.9CVE-2024-38099EPSS 1.3%

    Windows Remote Desktop Licensing Service Denial of Service Vulnerability

  44. 9.8CVE-2024-36526EPSS 0.9%

    ZKTeco ZKBio CVSecurity v6.1.1 was discovered to contain a hardcoded cryptographic key.

  45. 4.8CVE-2024-33509EPSS 0.2%

    An improper certificate validation vulnerability [CWE-295] in FortiWeb 7.2.0 through 7.2.1, 7.0 all versions, 6.4 all versions and 6.3 all versions may allow a remote and unauthenticated attacker in a Man-in-the-Middle position to decipher…

  46. 9.8CVE-2024-27782EPSS 0.7%

    Multiple insufficient session expiration weaknesses [CWE-613] vulnerability in Fortinet FortiAIOps 2.0.0 may allow an attacker to re-use stolen old session tokens to perform unauthorized operations via crafted requests.

  47. 5.9CVE-2023-50179EPSS 0.2%

    An improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2 all versions, 7.1 all versions, 7.0 all versions may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication c…

  48. 7.4CVE-2023-50178EPSS 0.2%

    An improper certificate validation vulnerability [CWE-295] in FortiADC 7.4.0, 7.2.0 through 7.2.3, 7.1 all versions, 7.0 all versions, 6.2 all versions, 6.1 all versions and 6.0 all versions may allow a remote and unauthenticated attacker …

  49. 7.7CVE-2023-40702EPSS 0.4%

    PingOne MFA Integration Kit contains a vulnerability where the skipMFA action can be configured such that user authentication does not require the second factor authentication from the user's existing registered devices. A threat actor mig…

  50. 8.7CVE-2023-40356EPSS 0.4%

    PingOne MFA Integration Kit contains a vulnerability related to the Prompt Users to Set Up MFA configuration. Under certain conditions, this configuration could allow for a new MFA device to be paired with a target user account without req…