Search Vulnerabilities

Liferay DXP 2023

An unsafe default authentication vulnerability exists in the Initial Setup Authentication functionality of Tenda AC6 V5

LinkJoin through 882f196 mishandles token ownership in password reset

A missing critical step in authentication vulnerability [CWE-304] in Fortinet FortiOS version 7

Signal App Biometric Authentication missing critical step in authentication

In JetBrains Toolbox App before 2

Authentication Bypass in gaizhenbiao/ChuanhuChatGPT

IDOR Vulnerability in transformeroptimus/superagi

Authentication Bypass in composiohq/composio

Missing check_access in lollms_binding_infos in parisneo/lollms

Improper Access Control in Elfatek Elektronics' ANKA JPD-00028

In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID

Dell Enterprise SONiC OS, version(s) 4

Multi-Factor Authentication Bypass in Progress WS_FTP Server

Infinispan: non-admins should not be able to get cache config via rest api

Infispan: rest bulk ops don't check permissions

Mandatory control bypass in Lime2

Metabase SSO users able to circumvent IdP login by doing password reset

WAVLINK Quantum D4G (WN531G3) Session Management by IP Address

Missing Critical Step in Authentication in namelessmc/nameless