6413 matches found
PT-2022-13448 · Unknown · Orchardcore
Name of the Vulnerable Software and Affected Versions: orchardcore versions prior to 1.3.0 Description: The issue is related to improper authorization in the GitHub repository orchardcms/orchardcore. Recommendations: For versions prior to 1.3.0, update to version 1.3.0 or later to resolve the iss...
Improper Authorization and possible DoS when using PAM Auth
Description When bareos versions after 18.2 are build and configured for PAM authentification it skips checking authorization completely. Expired accounts and accounts with expired passwords can still login. Further after wrong authentication or the code returns without releasing the PAM handle,...
Webmin <= 1.984 Multiple Vulnerabilities
Webmin is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Improper Authorization
Description When veyon is used in a Linux environment and is configured to use PAM as authentication method, The authorization of an account validity is missing. Therefore expired accounts or accounts with expired passwords can still login. This bug is in the provided tool veyon-auth-helper - aft...
CVE-2022-0829
Improper Authorization in GitHub repository webmin/webmin prior to 1.990...
CVE-2022-0829 Improper Authorization in webmin/webmin
Improper Authorization in GitHub repository webmin/webmin prior to 1.990...
CVE-2022-0829 Improper Authorization in webmin/webmin
Improper Authorization in GitHub repository webmin/webmin prior to 1.990...
CVE-2021-25011
The Maps Plugin using Google Maps for WordPress plugin before 1.8.1 does not have proper authorisation and CSRF in most of its AJAX actions, which could allow any authenticated users, such as subscriber to delete arbitrary posts and update the plugin's settings...
Improper Authorization in User Management to Vertical Privilege Escalation
Description Pandora FMS v7.0NG.759 allows improper authorization in User Management where any authenticated user with access to the User Management module could create, modify, delete any user with full admin privilege. The impact could lead to vertical privilege escalation to access the privileg...
Improper Authorization in dolibarr/dolibarr
Dolibarr allows improper access control issues in the userphoto modulepart. The impact could lead to data exposure as the attached files and documents may contain sensitive information of relevant parties such as contacts, suppliers, invoices, orders, stocks, agenda, accounting and more...
GHSA-4XC7-X2JR-CR74 Improper Authorization in dolibarr/dolibarr
Dolibarr allows improper access control issues in the userphoto modulepart. The impact could lead to data exposure as the attached files and documents may contain sensitive information of relevant parties such as contacts, suppliers, invoices, orders, stocks, agenda, accounting and more...
PT-2022-13392 · Peertube · Peertube
Name of the Vulnerable Software and Affected Versions: peertube versions prior to 4.1.0 Description: The issue concerns a missing authorization in the GitHub repository chocobozzz/peertube. This is also referred to as an improper authorization. No information is provided about the estimated numbe...
CVE-2022-21196 Airspan Networks Mimosa Improper Authorization
MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization and authentication checks on multiple API routes. An attacker may gain access to these API routes and achieve remo...
CVE-2022-21196 Airspan Networks Mimosa Improper Authorization
MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization and authentication checks on multiple API routes. An attacker may gain access to these API routes and achieve remo...
PT-2022-14916 · Mmp +2 · Mmp +2
Name of the Vulnerable Software and Affected Versions: MMP versions prior to 1.0.3 PTP C-series versions prior to 2.8.6.1 PTMP C-series and A5x versions prior to 2.5.4.1 Description: The issue concerns improper authorization and authentication checks on multiple API routes. This could allow an...
Improper Authorization in webmin/webmin
Description The /cron/saveallow.cgi endpoint is accessible to any authenticated low privilege users resulting in controlling user access to cron jobs. They could allow and deny other users access to cron jobs affecting the Scheduled Cron Jobs module. Proof of Concept Affected Endpoint: GET...
Improper Authorization
librenms is vulnerable to improper authorization. The vulnerability exists due to the lack of validation of the user's role and level allowing an attacker to switch on/off installed plugins...
Improper Authorization in librenms
Improper Authorization in Packagist librenms/librenms prior to 22.2.0...