rConfig Authorization Issues Vulnerability

rConfig is an open source network configuration management utility . An authorization issue vulnerability exists in rConfig version 3.9.4. An attacker could exploit this vulnerability to access other user sessions...

Multiple NETGEAR Product License Issue Vulnerabilities (CNVD-2020-33662)

NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite SRS60 AC3000 and others are a wireless WiFi device from NETGEAR. NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite SRS60 AC3000 version 2.5.1.106, Outdoor Satellite RBS50Y version 2.5.1.106 and Pro Tri-Band Business WiFi An authorization iss...

Palo Alto Networks PAN-OS Authorization Issue Vulnerability (CNVD-2020-41540)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. An authorization issue vulnerability exists in the Panorama context switching feature of Palo Alto Networks PAN-OS. An attacker could exploit this vulnerability by accessing the Panorama...

Palo Alto Networks PAN-OS Authorization Issue Vulnerability (CNVD-2020-41538)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. An authorization issue vulnerability exists in GlobalProtect Portal in Palo Alto Networks PAN-OS. The vulnerability stems from a lack of authentication measures or insufficient...

SAP Adaptive Server Enterprise Authorization Issues Vulnerability

SAP Adaptive Server Enterprise ASE is a relational database server from SAP, Germany. SAP Adaptive Server Enterprise has an authorization issue vulnerability that stems from a lack of authorization checking. An attacker could exploit the vulnerability to access information...

Zoho ManageEngine DataSecurity Plus Authorization Issues Vulnerability

Zoho ManageEngine DataSecurity Plus is a sensitive data management solution from Zoho USA. The product features data leakage prevention, data risk assessment and file server auditing. Zoho ManageEngine DataSecurity Plus suffers from an authorization issue vulnerability that arises when the progra...

CloudBees Jenkins Amazon EC2 Plugin Authorization Issues Vulnerability

CloudBees Jenkins Hudson Labs is a set of Java-based development of continuous integration tools from the U.S. CloudBees. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Amazon EC2 Plugin is used in which an EC2 connection agen...

SimpliSafe SS3 Authorization Issue Vulnerability (CNVD-2020-31746)

SimpliSafe SS3 is a home security solution from SimpliSafe USA. An authorization issue vulnerability exists in SimpliSafe SS3 using firmware version 1.4, which can be exploited by a local attacker to connect a malicious keypad to a system with an alarm turned on...

Huawei AR3200 Authorization Issue Vulnerability

The Huawei AR3200 is an enterprise router from Huawei China. An authorization issue vulnerability exists in the Huawei AR3200, which can be exploited by an attacker to gain partial privileges on the device...

Cybozu Garoon License Issue Vulnerability

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An authorization issue vulnerability exists in Cybozu Garoon versions 4.0.0 to 4.10.3. A remote attacker can...

Red Hat Satellite Job Invocation Authorization Issue Vulnerability

Red Hat Satellite is a system management platform from Red Hat, Inc. that extends the Linux infrastructure and provides system management capabilities such as administration, configuration, and monitoring. Red Hat Satellite is a system management platform from Red Hat, Inc. that extends the Linux...

NETGEAR R6300, PLW1000 and PLW1010 Authorization Issues Vulnerability

NETGEAR R6300 and others are products of NETGEAR Corporation.NETGEAR R6300 is a wireless router.NETGEAR PLW1000 is a power line communication modem.NETGEAR PLW1010 is a power line communication modem.NETGEAR R6300 is a wireless router.NETGEAR R6300 is a wireless router.NETGEAR PLW1010 is a wirele...

MinIO Authorization Issues Vulnerability

MinIO is an open source object storage server from US-based MinIO. The product supports building infrastructures for machine learning, analytics and application data workloads. An authorization issue vulnerability exists in the MinIO admin API in versions prior to MinIO...

Pion DTLS Authorization Issues Vulnerability

Pion DTLS is a Go-based implementation of DTLS Packet Transport Layer Security Protocol. An authorization issue vulnerability exists in Pion DTLS versions prior to 1.5.2. A remote attacker can exploit this vulnerability to inject arbitrary unencrypted data after the handshake completes...

DAViCal Andrew's Web Libraries Authorization Issues Vulnerability (CNVD-2020-25813)

DAViCal Andrew's Web Libraries AWL is an AWL project that focuses on providing some shared PHP libraries for DAViCal, a calendar sharing server. An authorization issue vulnerability exists in DAViCal AWL version 0.60 and earlier, which stems from a failure of the session management mechanism to u...

WordPress Responsive Poll Authorization Issues Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Responsive Poll is a responsive poll plugin used in it. An authorization issue vulnerability exists in Wordpress Responsive Poll 1.3.4...

Samsung Mobile Device Authorization Issue Vulnerability (CNVD-2020-31814)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have an authorization issue vulnerability that can be exploited by an attacker to bypass the SIM lock function...

Plat'Home EasyBlocks IPv6 Authorization Issues Vulnerability

Plat'Home EasyBlocks IPv6 is an IPv6 address set allocation unit product from Plat'Home Japan. An authorization issue vulnerability exists in Plat'Home EasyBlocks IPv6 version 2.0.1 and earlier Enterprise Edition and version 2.0.1 and earlier. The vulnerability can be exploited by an attacker to...

Samsung Mobile Device Authorization Issue Vulnerability (CNVD-2020-30764)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have an authorization issue vulnerability that can be exploited by attackers to allow authentication bypass...

Argo Authorization Issue Vulnerability (CNVD-2020-27456)

Argo is an open source container native workflow engine. Argo suffers from an authorization issue vulnerability that stems from the program not implementing anti-automation protections. An attacker could use this vulnerability to brute-force break the administrator password...