All CVEs — page 590 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This flaw allows unauthenticated users to exploit broken authentication mechanisms in Headless Single Sign On versions 1.7.0 and earlier, leading to unauthorized access to sensitive resources.
The flaw allows unauthenticated attackers to execute arbitrary code on the server, leading to full control over the system.
The flaw is an unauthenticated broken authentication vulnerability in EduAdmin Booking versions 5.4.2 and earlier, allowing attackers to bypass authentication mechanisms and gain unauthorized access to the system.
The flaw allows authenticated users to write files outside the storage root, potentially overwriting arbitrary files. This can lead to data loss or corruption.
The flaw allows attackers with log:view permission to read session tokens from the audit log, which can be used to gain full user access.
AVideo LoginControl has an authentication bypass vulnerability due to loose equality comparison against an uninitialized session variable, allowing attackers with a victim's password to bypass the second factor.
A vulnerability exists in the Username input handling of the Quick Security Setup Handler, allowing remote attackers to exploit improper input validation, leading to potential system compromise.
This flaw is a stack-based buffer overflow in the /usr/sbin/auth_user_pass script, allowing unauthenticated attackers to potentially execute arbitrary code as root via a crafted authentication request.
The flaw is an OS command injection vulnerability in the xtremed daemon, allowing unauthenticated remote attackers to execute arbitrary commands as root via the AuthFormServlet endpoint.