Vulnerabilities (CVE)

Filtered by CWE-1390
Total 43 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-45367 2024-10-04 N/A 9.1 CRITICAL
The web server for ONS-S8 - Spectra Aggregation Switch includes an incomplete authentication process, which can lead to an attacker authenticating without a password.
CVE-2024-38239 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2024-09-17 N/A 7.2 HIGH
Windows Kerberos Elevation of Privilege Vulnerability
CVE-2024-8322 1 Ivanti 1 Endpoint Manager 2024-09-12 N/A 4.3 MEDIUM
Weak authentication in Patch Management of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker to access restricted functionality.