Vulnerabilities > Improper Authentication

DATE CVE VULNERABILITY TITLE RISK
2018-06-13 CVE-2018-11407 Improper Authentication vulnerability in Sensiolabs Symfony
An issue was discovered in the Ldap component in Symfony 2.8.x before 2.8.37, 3.3.x before 3.3.17, 3.4.x before 3.4.7, and 4.0.x before 4.0.7.
network
low complexity
sensiolabs CWE-287
critical
9.8
2018-06-08 CVE-2018-12049 Improper Authentication vulnerability in Canon Lbp6030W Firmware
A remote attacker can bypass the System Manager Mode on the Canon LBP6030w web interface without a PIN for /checkLogin.cgi via vectors involving /portal_top.html to get full access to the device.
network
low complexity
canon CWE-287
critical
9.8
2018-06-08 CVE-2018-12048 Improper Authentication vulnerability in Canon Lbp7110Cw Firmware
A remote attacker can bypass the Management Mode on the Canon LBP7110Cw web interface without a PIN for /checkLogin.cgi via vectors involving /portal_top.html to get full access to the device.
network
low complexity
canon CWE-287
critical
9.8
2018-06-07 CVE-2018-0321 Improper Authentication vulnerability in Cisco products
A vulnerability in Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the Java Remote Method Invocation (RMI) system.
network
low complexity
cisco CWE-287
critical
9.8
2018-06-07 CVE-2018-0319 Improper Authentication vulnerability in Cisco products
A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device.
network
low complexity
cisco CWE-287
critical
9.8
2018-06-07 CVE-2018-0318 Improper Authentication vulnerability in Cisco products
A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device.
network
low complexity
cisco CWE-287
critical
9.8
2018-06-06 CVE-2017-7931 Improper Authentication vulnerability in ABB IP Gateway Firmware 3.39
In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access the configuration files and application pages without authentication.
network
low complexity
abb CWE-287
critical
9.8
2018-06-05 CVE-2017-7639 Improper Authentication vulnerability in Qnap NAS Proxy Server
QNAP NAS application Proxy Server through version 1.2.0 does not authenticate requests properly.
network
low complexity
qnap CWE-287
5.3
2018-06-05 CVE-2018-7943 Improper Authentication vulnerability in Huawei products
There is an authentication bypass vulnerability in some Huawei servers.
network
low complexity
huawei CWE-287
8.8
2018-06-04 CVE-2017-16025 Improper Authentication vulnerability in Hapijs NES
Nes is a websocket extension library for hapi.
network
high complexity
hapijs CWE-287
5.9