cwe-287
Safeguard articles tagged "cwe-287" — guides, analysis, and best practices for software supply chain and application security.
48 articles
CVE-2021-27877: Veritas Backup Exec Agent Improper Authentication Vulnerability
CVE-2021-27877 affects Veritas Backup Exec Agent and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2023-04-07.
CVE-2021-27876: Veritas Backup Exec Agent File Access Vulnerability
CVE-2021-27876 affects Veritas Backup Exec Agent and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2023-04-07.
CVE-2023-20867: VMware Tools Authentication Bypass Vulnerability
CVE-2023-20867 affects VMware Tools and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2023-06-23.
CVE-2023-35078: Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability
CVE-2023-35078 affects Ivanti Endpoint Manager Mobile (EPMM) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2023-07-25.
CVE-2023-46805: Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability
CVE-2023-46805 affects Ivanti Connect Secure and Policy Secure and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-01-10.
CVE-2023-35082: Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability
CVE-2023-35082 affects Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-01-18.
CVE-2024-21410: Microsoft Exchange Server Privilege Escalation Vulnerability
CVE-2024-21410 affects Microsoft Exchange Server and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-02-15.
CVE-2021-33044: Dahua IP Camera Authentication Bypass Vulnerability
CVE-2021-33044 affects Dahua IP Camera Firmware and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-08-21.
CVE-2021-33045: Dahua IP Camera Authentication Bypass Vulnerability
CVE-2021-33045 affects Dahua IP Camera Firmware and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-08-21.
CVE-2024-7593: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
CVE-2024-7593 affects Ivanti Virtual Traffic Manager and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-09-24.
CVE-2024-8956: PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability
CVE-2024-8956 affects PTZOptics PT30X-SDI/NDI Cameras and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-11-04.
CVE-2024-49039: Microsoft Windows Task Scheduler Privilege Escalation Vulnerability
CVE-2024-49039 affects Microsoft Windows and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-11-12.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.