CVE-2024-50310

A vulnerability has been identified in SIMATIC CP 1543-1 V4.0 6GK7543-1AX10-0XE0 All versions = V4.0.44 V4.0.50. Affected devices do not properly handle authorization. This could allow an unauthenticated remote attacker to gain access to the filesystem...

Ivanti Secure Access Client 安全漏洞

Ivanti Secure Access Client is a security software client developed by Ivanti, Inc. that is primarily used to enable remote secure access with support for enterprise-class VPN connections and encrypted access to resources. Ivanti Secure Access Client suffers from an improper authorization...

CVE-2024-11073

A vulnerability classified as problematic has been found in SourceCodester Hospital Management System 1.0. This affects an unknown part of the file /vm/patient/delete-account.php. The manipulation of the argument id leads to improper authorization. It is possible to initiate the attack remotely...

CVE-2024-11073

A vulnerability classified as problematic has been found in SourceCodester Hospital Management System 1.0. This affects an unknown part of the file /vm/patient/delete-account.php. The manipulation of the argument id leads to improper authorization. It is possible to initiate the attack remotely...

CVE-2024-11073 SourceCodester Hospital Management System delete-account.php improper authorization

A vulnerability classified as problematic has been found in SourceCodester Hospital Management System 1.0. This affects an unknown part of the file /vm/patient/delete-account.php. The manipulation of the argument id leads to improper authorization. It is possible to initiate the attack remotely...

CVE-2024-11073 SourceCodester Hospital Management System delete-account.php improper authorization

A vulnerability classified as problematic has been found in SourceCodester Hospital Management System 1.0. This affects an unknown part of the file /vm/patient/delete-account.php. The manipulation of the argument id leads to improper authorization. It is possible to initiate the attack remotely...

CVE-2024-11073

SourceCodester Hospital Management System 1.0 contains an IDOR-like issue in /vm/patient/delete-account.php where manipulation of the id parameter allows improper authorization. The vulnerability can be exploited remotely and exploits have been disclosed publicly. No patch/version specifics are p...

SourceCodester Hospital Management System 安全漏洞

SourceCodester Hospital Management System is an open source hospital management system from SourceCodester. A security vulnerability exists in SourceCodester Hospital Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to improper...

MGT-COMMERCE CloudPanel 安全漏洞

MGT-COMMERCE CloudPanel is a free solution from MGT-COMMERCE Open Source. Designed to ease the burden of managing self-hosted Linux servers. A security vulnerability exists in MGT-COMMERCE CloudPanel versions v2.0.0 through v2.4.2, which stems from improper authorization and allows an attacker to...

CVE-2024-44765

An Improper Authorization Access Control Misconfiguration vulnerability in MGT-COMMERCE GmbH CloudPanel v2.0.0 to v2.4.2 allows low-privilege users to bypass access controls and gain unauthorized access to sensitive configuration files and administrative functionality...

The vulnerability of Zendesk’s customer service and sales software, related to improper authorization, allows a hacker to disclose protected information.

The vulnerability of Zendesk’s customer service and sales software is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

Improper Authorization

Overview symfony/security-bundle is a security bundle for Symfony. Affected versions of this package are vulnerable to Improper Authorization in the createFirewall function in SecurityExtension.php, which does not apply userchecker during programmatic login. Remediation Upgrade...

CVE-2024-34682

Improper authorization in Settings prior to SMR Nov-2024 Release 1 allows physical attackers to access stored WiFi password in Maintenance Mode...

CVE-2024-34682

Improper authorization in Settings prior to SMR Nov-2024 Release 1 allows physical attackers to access stored WiFi password in Maintenance Mode...

CVE-2024-34682

Improper authorization in Settings prior to SMR Nov-2024 Release 1 allows physical attackers to access stored WiFi password in Maintenance Mode...

CVE-2024-34682

Improper authorization in Settings prior to SMR Nov-2024 Release 1 allows physical attackers to access stored WiFi password in Maintenance Mode...

CVE-2024-34682

CVE-2024-34682 corresponds to Samsung Mobile devices with an improper authorization flaw in Settings before SMR Nov-2024 Release 1. The issue allows a physical attacker in Maintenance Mode to access stored Wi‑Fi passwords. Affected component: Settings; root cause: improper authorization. Risk is ...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Nov-2024 Release 1 prior to version 1, which stems from Settings containing an improper...

PT-2024-26103 · Settings · Settings

Name of the Vulnerable Software and Affected Versions: Settings versions prior to SMR Nov-2024 Release 1 Description: The issue is related to improper authorization in Settings, allowing physical attackers to access stored WiFi passwords in Maintenance Mode. This affects devices that have not bee...

Improper Authorization

Overview volttron-core is a VOLTTRON™ is an open source platform for distributed sensing and control. The platform provides services for collecting and storing data from buildings and devices and provides an environment for developing applications which interact with that data. Affected versions ...