Authentication bypass.

SQL Server Elevation of Privilege Vulnerability

• Microsoft SQL Server 2017 (CU 31)
• Microsoft SQL Server 2017 (GDR)
• Authentication bypass

Windows iSCSI Security Feature Bypass Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Authentication bypass

Windows Autopilot Tampering Vulnerability

• Microsoft Windows 10 Version 21H2
• Microsoft Windows 10 Version 22H2
• Authentication bypass

Windows Internet Connection Sharing (ICS) Tampering Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Authentication bypass

Windows Modern Device Management (MDM) Security Feature Bypass Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Authentication bypass

aircheng-org iWebShop-5 systemseller.php login improper authentication

• aircheng-org iWebShop-5
• Authentication bypass

Windows Power Dependency Coordinator Tampering Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Authentication bypass

Windows Netlogon Spoofing Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Authentication bypass

Windows Cloud Files Mini Filter Driver Tampering Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Authentication bypass

Microsoft Authenticator Elevation of Privilege Vulnerability

• Microsoft Authenticator for Android
• Authentication bypass

Windows Kerberos Remote Code Execution Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Authentication bypass

Microsoft Windows Search Component Tampering Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Authentication bypass

Windows Shell Elevation of Privilege Vulnerability

• Microsoft Windows 11 version 23H2
• Microsoft Windows 11 Version 24H2
• Authentication bypass

Windows DHCP Server Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Authentication bypass

Azure Arc SQL Server Extension Elevation of Privilege Vulnerability

• Microsoft Azure Arc SQL Server Extension
• SQL injection
• Authentication bypass

WWBN AVideo Unrestricted Authentication Attempts via get_api_preauthorize

• WWBN AVideo
• Authentication bypass

AVideo through 29.0 Unauthenticated Disclosure via epg.json.php

• WWBN AVideo
• Authentication bypass

AVideo through 29.0 Information Disclosure via stats.json.php

• WWBN AVideo
• Authentication bypass

AVideo LoginControl PGP Authentication Bypass via verifyChallenge

• WWBN AVideo
• Authentication bypass

AVideo Authentication Bypass via SQL Cache Invalidation

• WWBN AVideo
• Authentication bypass

AVideo through c3edcc274c Authorization Bypass via Session Cookie

• WWBN AVideo
• Authentication bypass

Authentication bypass in Ivanti Sentry

• Ivanti Sentry
• Authentication bypass

XenForo < 2.3.13 Refresh Token Replay via Expired Access Token

• XenForo
• Authentication bypass

XenForo < 2.3.13 OAuth2 Authorization Code Reuse

• XenForo
• Authentication bypass

CommServe Information Disclosure

• Commvault Cloud
• Authentication bypass

Private Metrics Server Denial of Service

• Commvault Cloud
• Authentication bypass

Command Center API Authentication Bypass

• Commvault Cloud
• Authentication bypass

Authentication bypass in Siemens Reyrolle 7SR5

• Siemens Reyrolle 7SR5
• Authentication bypass

Missing authentication in Siemens Reyrolle 7SR5

• Siemens Reyrolle 7SR5
• Authentication bypass

Missing authentication in ASUS Control Center Express Agent

• ASUS Control Center Express Agent
• Authentication bypass

An issue in the Single-Sign On (SSO) component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any user, including the Admin, without a password.

• Authentication bypass

knowns before 0.30.0 Unauthenticated Management API Exposure

• knowns
• Authentication bypass

ash_authentication_oauth2_server treats an empty resolved secret as valid, opening the gated Dynamic Client Registration endpoint

• Authentication bypass

>=0.1.0, <0.3.1 · fixed in 0.3.1

Missing authentication in JetBrains GoLand

• JetBrains GoLand
• Authentication bypass

Missing authentication in JetBrains IntelliJ IDEA

• JetBrains IntelliJ IDEA
• Authentication bypass

Missing authentication in JetBrains YouTrack

• JetBrains YouTrack
• Authentication bypass

Missing authentication in JetBrains Hub

• JetBrains Hub
• Authentication bypass

Authentication bypass by spoofing in JetBrains YouTrack

• JetBrains YouTrack
• Authentication bypass

389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary property

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.7 E4S for RHEL 8
• Authentication bypass

Missing authentication in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Authentication bypass

Missing authentication in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Authentication bypass

Improper authentication in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Authentication bypass

light0011 cms Cookie Helper UserModel.class.php improper authentication

• light0011 cms
• Authentication bypass

LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion

• librenms
• Authentication bypass

Missing authentication in Dell Secure Connect Gateway 5.0 - Application and others

• Dell Secure Connect Gateway 5.0 - Application
• Dell Secure Connect Gateway 5.0 - Appliance
• Authentication bypass

OTP Bypass in Bahçelievler Muncipality's BiHayat App

• Bahçelievler Muncipality BiHayat App
• Authentication bypass

Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Authentication bypass

Tenda AC9 Web Management R7WebsSecurityHandler improper authentication

• Tenda AC9
• Authentication bypass

SourceCodester Simple Traffic Offense System Deletion Endpoint delete-user.php missing authentication

• SourceCodester Simple Traffic Offense System
• Authentication bypass

SourceCodester Simple Traffic Offense System User Creation saveuser.php missing authentication

• SourceCodester Simple Traffic Offense System
• Authentication bypass

Incorrect access control in PrestaShop

• PrestaShop
• Authentication bypass

SourceCodester Syllabus-Aligned Learning Management & Examination System Login auth_process.php session fixiation

• SourceCodester Syllabus-Aligned Learning Management & Examination System
• Authentication bypass

Unlimited authentication attempts in MediaTek, Inc. MediaTek chipset

• MediaTek, Inc. MediaTek chipset
• Authentication bypass

Unlimited authentication attempts in MediaTek, Inc. MediaTek chipset

• MediaTek, Inc. MediaTek chipset
• Authentication bypass

Missing authentication in NEC Corporation UNIVERGE IX-R/IX-V

• NEC Corporation UNIVERGE IX-R/IX-V
• Authentication bypass

Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step

• Authentication bypass

Mstfakts College-Management-System Logout server.php session expiration

• Mstfakts College-Management-System
• Authentication bypass

Mstfakts College-Management-System login.php improper authentication

• Mstfakts College-Management-System
• Authentication bypass

OpenMAIC before 1.0.1 SSRF via Environment-Gated URL Validation

• THU-MAIC OpenMAIC
• Authentication bypass
• Server-side request forgery (SSRF)

Unauthenticated RCE via Custom Plugin HTTP Path on Dynamically Linked Builds

• maximhq Bifrost
• Code injection
• Broken access control