Search Vulnerabilities

Entrust Instant Financial Issuance (IFI) SmartCardController Service .NET Remoting RCE

A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to ...

Administrator Account Creation Vulnerability in BLUVOYIX

eXtplorer<= 2.1.14 - Authentication Bypass & Remote Code Execution (RCE)

Microsoft SQL Server Elevation of Privilege Vulnerability

Github.com/che-incubator/che-code: eclipse che — unauthenticated rce and secret exfiltration via tcp/3333

Privilege escalation vulnerability in SAP HANA database

OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution

WebErpMesv2 allows unauthenticated API Access

Flycatcher Toys smART Sketcher Bluetooth Low Energy missing authentication

Ruckus vRIoT IoT Controller < 3.0.0.0 Hardcoded Tokens RCE

Unprotected RTSP stream in Vivotek IP7137 cameras

wolfSSL Python library `CERT_REQUIRED` mode fails to enforce client certificate requirement

FLIR Thermal Camera F/FC/PT/D Stream 8.0.0.64 Unauthenticated Stream Disclosure

HCL BigFix IVR is impacted by improper authentication and missing CSRF protection

OpenFlagr <= 1.1.18 Authentication Bypass via Prefix Whitelist Path Normalization

D-Link DSL/DIR/DNS Command Injection via DNS Configuration Endpoint

WHILL Model C2 Electric Wheelchairs and Model F Power Chairs do not enforce authentication for Bluetooth connections

Unauthenticated configuration import allows administrative account creation using AWIE component

Petlibro Smart Pet Feeder Platform through 1.7.31 Authorization Bypass via Device Share API