Vulnerabilities > Improper Authentication

DATE CVE VULNERABILITY TITLE RISK
2021-11-20 CVE-2021-36308 Improper Authentication vulnerability in Dell Networking Os10
Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an authentication bypass vulnerability.
network
low complexity
dell CWE-287
critical
9.8
2021-11-17 CVE-2021-0096 Improper Authentication vulnerability in Intel products
Improper authentication in the software installer for the Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN, NUC7i7DN before version 1.78.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-287
7.8
2021-11-17 CVE-2021-33087 Improper Authentication vulnerability in Intel NUC M15 Laptop KIT Management Engine Driver Pack
Improper authentication in the installer for the Intel(R) NUC M15 Laptop Kit Management Engine driver pack before version 15.0.10.1508 may allow an authenticated user to potentially enable denial of service via local access.
local
low complexity
intel CWE-287
5.5
2021-11-16 CVE-2021-37580 Improper Authentication vulnerability in Apache Shenyu 2.3.0/2.4.0
A flaw was found in Apache ShenYu Admin.
network
low complexity
apache CWE-287
critical
9.8
2021-11-12 CVE-2021-3519 Improper Authentication vulnerability in Lenovo products
A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes.
low complexity
lenovo CWE-287
6.8
2021-11-12 CVE-2021-3788 Improper Authentication vulnerability in Binatoneglobal products
An exposed debug interface was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access unauthorized access to the device.
low complexity
binatoneglobal CWE-287
6.8
2021-11-09 CVE-2021-43203 Improper Authentication vulnerability in Jetbrains Ktor
In JetBrains Ktor before 1.6.4, nonce verification during the OAuth2 authentication process is implemented improperly.
network
low complexity
jetbrains CWE-287
7.5
2021-11-08 CVE-2021-31602 Improper Authentication vulnerability in Hitachi products
An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x.
network
low complexity
hitachi CWE-287
7.5
2021-11-08 CVE-2021-42072 Improper Authentication vulnerability in multiple products
An issue was discovered in Barrier before 2.4.0.
network
low complexity
barrier-project fedoraproject CWE-287
8.8
2021-11-07 CVE-2021-43414 Improper Authentication vulnerability in GNU Hurd
An issue was discovered in GNU Hurd before 0.9 20210404-9.
local
high complexity
gnu CWE-287
7.0