CVE-2022-4148 WP OAuth Server < 4.3.0 - Subscriber+ Arbitrary Client Deletion

The WP OAuth Server OAuth Authentication WordPress plugin before 4.3.0 has a flawed CSRF and authorisation check when deleting a client, which could allow any authenticated users, such as subscriber to delete arbitrary client...

libcurl 授权问题漏洞

libcurl is a tool for transferring data from or to a server. An authorization issue vulnerability exists in libcurl version v8.0.0, which stems from the ability to reuse a previously established SSH connection and an authentication bypass vulnerability...

Adobe Commerce License Issue Vulnerability (CNVD-2024-09608)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce is vulnerable to an authorization issue. The vulnerability stems from improper authorization of the application and can be exploited by a...

IBM Maximo Application Suite Licensing Issue Vulnerability

IBM Maximo Application Suite is a single platform for intelligent asset management, monitoring, maintenance, computer vision, security and reliability from International Business Machines IBM. an authorization issue vulnerability exists in IBM Maximo Application Suite versions 8.8.0 and 8.9.0,...

Cilium 授权问题漏洞

Cilium is an open source software. It is used to provide and transparently secure network connectivity and load balancing between application workloads, such as application containers or processes. An authorization issue vulnerability exists in Cilium version 1.11.14 and earlier, 1.12.7 and...

SAMSUNG Mobile Devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile Devices Exynos baseband SMR Mar-2023 Release 1 version, which stems from an improperly executed...

IBM Maximo Application Suite 授权问题漏洞

IBM Maximo Application Suite is a single platform for intelligent asset management, monitoring, maintenance, computer vision, security and reliability from International Business Machines IBM. an authorization issue vulnerability exists in IBM Maximo Application Suite versions 8.8.0 and 8.9.0,...

Home Assistant 授权问题漏洞

Home Assistant is an open source home automation management system. The system is primarily used to control home automation devices. An authorization issue vulnerability exists in Home Assistant Supervisor versions prior to 2023.01.1 that stems from an authentication bypass vulnerability...

PT-2023-16488 · Wallabag · Wallabag

Name of the Vulnerable Software and Affected Versions: wallabag versions prior to 2.5.4 Description: The issue is related to improper authorization in the wallabag GitHub repository. Recommendations: For versions prior to 2.5.4, update to version 2.5.4 or later to resolve the issue...

ABB Symphony Plus S+ Operations 授权问题漏洞

ABB Symphony Plus S+ Operations is a decentralized control system from ABB. An authorization issue vulnerability exists in ABB Symphony Plus S+ Operations, which stems from the presence of incorrect authentication, and affects the following products and versions: Symphony Plus S+ Operations...

Huawei HiLink AI Life Authorization Issue Vulnerability

Huawei HiLink AI Life is a whole-house smart solution from China's Huawei Huawei. Huawei HiLink AI Life suffers from an authorization issue vulnerability, which stems from a permission assignment error in the software, and can be exploited by an attacker to access restricted functionality...

Dell PowerScale OneFS Licensing Issue Vulnerability (CNVD-2023-14503)

Dell PowerScale OneFS is an operating system from Dell USA Inc. Dell PowerScale OneFS version 9.4.0.x is vulnerable to an authorization issue that stems from the presence of incorrect default privileges, which could be exploited to overwrite arbitrary files and cause a denial of service...

Snyk kubernetes-monitor 授权问题漏洞

Snyk kubernetes-monitor is Snyk's tool for finding and fixing vulnerabilities in Kubernetes workloads using Snyk. Snyk kubernetes-monitor suffers from a security vulnerability that stems from the possibility of causing unrelated data to be published to the Snyk organization, which in turn may...

Huawei HiLink AI Life 安全漏洞

Huawei HiLink AI Life is a whole-house smart solution from China's Huawei Huawei. Huawei HiLink AI Life suffers from an authorization issue vulnerability, which stems from a permission assignment error in the software, and can be exploited by an attacker to access restricted functionality...

Siemens SCALANCE X-200RNA Switch Devices Incorrect Authorization (CVE-2018-20685)

In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side. - In OpenSSH 7.9, scp.c in the scp client allows remote SSH...

Dynosaur-Rails 授权问题漏洞

Dynosaur-Rails is the web management interface for Dynosaur. An authorization issue vulnerability exists in harrystech Dynosaur-Rails that stems from a problem with the function basicauth in the file app/controllers/applicationcontroller.rb, which can lead to incorrect authentication...

Moodle 3.9.x < 3.9.13 Multiple Vulnerabilities

The version of Moodle installed on the remote host is 3.9.x prior to 3.9.13, 3.10.x prior to 3.10.10 or 3.11.x prior to 3.11.6. It is, therefore, affected by multiple vulnerabilities: - An SQL injection vulnerability in the badges code relating to configuring criteria available by default to...

Moodle 3.9.x < 3.9.7 Multiple Vulnerabilities

The version of Moodle installed on the remote host is 3.5.x prior to 3.5.18, 3.8.x prior to 3.8.9, 3.9.x prior to 3.9.7 or 3.10.x prior to 3.10.4. It is, therefore, affected by multiple vulnerabilities: - An authorization issue allowing teachers to export a CSV file containing forums from all...

Moodle 3.10.x < 3.10.9 Multiple Vulnerabilities

The version of Moodle installed on the remote host is 3.9.x prior to 3.9.12, 3.10.x prior to 3.10.9 or 3.11.x prior to 3.11.5. It is, therefore, affected by multiple vulnerabilities: - An SQL injection vulnerability in the h5p activity web service responsible for fetching user attempt data...

Apache ShenYu Authorization Problem Vulnerability (CNVD-2023-23553)

Apache ShenYu is an asynchronous , high-performance , cross-language , responsive API gateway of the United States Apache Apache Foundation . An authorization issue vulnerability exists in Apache ShenYu versions prior to 2.5.1, which stems from improper privilege management and can be exploited b...