Lucene search
+L

9518 matches found

OSV
OSV
•added 2021/02/15 10:15 p.m.•13 views

CVE-2021-21511

Dell EMC Avamar Server, versions 19.3 and 19.4 contain an Improper Authorization vulnerability in the web UI. A remote low privileged attacker could potentially exploit this vulnerability, to gain unauthorized read or modification access to other users' backup data...

8.1CVSS7.3AI score0.01043EPSS
SaveExploits0References1
NVD
NVD
•added 2021/02/15 10:15 p.m.•29 views

CVE-2021-21511

Dell EMC Avamar Server, versions 19.3 and 19.4 contain an Improper Authorization vulnerability in the web UI. A remote low privileged attacker could potentially exploit this vulnerability, to gain unauthorized read or modification access to other users' backup data...

8.1CVSS0.01043EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/02/15 10:10 p.m.•40 views

CVE-2021-21511

Dell EMC Avamar Server, versions 19.3 and 19.4 contain an Improper Authorization vulnerability in the web UI. A remote low privileged attacker could potentially exploit this vulnerability, to gain unauthorized read or modification access to other users' backup data...

8.1CVSS8.2AI score0.01043EPSS
SaveExploits0References1
CVE
CVE
•added 2021/02/15 10:10 p.m.•66 views

CVE-2021-21511

CVE-2021-21511 affects Dell EMC Avamar Server, versions 19.3 and 19.4, with an Improper Authorization flaw in the web UI. The vulnerability allows a remote, low-privileged attacker to gain unauthorized read or modification access to other users’ backup data. The issue is rooted in insufficient ac...

8.1CVSS7.9AI score0.01043EPSS
SaveExploits0References1Affected Software2
Positive Technologies
Positive Technologies
•added 2021/02/15 12:00 a.m.•4 views

PT-2021-14568

Name of the Vulnerable Software and Affected Versions Dell EMC Avamar Server versions 19.3 through 19.4 Description The issue is related to an Improper Authorization vulnerability in the web UI. A remote low-privileged attacker could potentially exploit this vulnerability to gain unauthorized rea...

8.1CVSS6.1AI score0.01043EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/15 12:00 a.m.•6 views

CVE-2021-21511: Improper Authorization

Dell EMC Avamar Server, versions 19.3 and 19.4 contain an Improper Authorization vulnerability in the web UI. A remote low privileged attacker could potentially exploit this vulnerability, to gain unauthorized read or modification access to other users' backup data...

8.1CVSS6AI score0.01043EPSS
SaveExploits0References2
NVD
NVD
•added 2021/02/11 8:15 p.m.•20 views

CVE-2021-21026

Magento versions 2.4.1 and earlier, 2.4.0-p1 and earlier and 2.3.6 and earlier are affected by an improper authorization vulnerability in the integrations module. Successful exploitation could lead to unauthorized access to restricted resources by an unauthenticated attacker. Access to the admin...

5.3CVSS0.01808EPSS
SaveExploits0References1
CVE
CVE
•added 2021/02/11 7:29 p.m.•76 views

CVE-2021-21026

Magento exposes an improper authorization vulnerability in the integrations module affecting Magento Community/OOS and Commerce editions: versions 2.4.1 and earlier, 2.4.0-p1 and earlier, and 2.3.6 and earlier are impacted. The root cause is improper authorization, potentially allowing an unauthe...

5.3CVSS5.5AI score0.01808EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2021/02/11 7:29 p.m.•4 views

CVE-2021-21026

Magento versions 2.4.1 and earlier, 2.4.0-p1 and earlier and 2.3.6 and earlier are affected by an improper authorization vulnerability in the integrations module. Successful exploitation could lead to unauthorized access to restricted resources by an unauthenticated attacker. Access to the admin...

6CVSS0.01808EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/11 12:00 a.m.•5 views

CVE-2021-21026: Improper Authorization

Magento versions 2.4.1 and earlier, 2.4.0-p1 and earlier and 2.3.6 and earlier are affected by an improper authorization vulnerability in the integrations module. Successful exploitation could lead to unauthorized access to restricted resources by an unauthenticated attacker. Access to the admin...

5.3CVSS5.8AI score0.01808EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/02/10 12:00 a.m.•18 views

Adobe Magento Improper Authorization Vulnerability (CNVD-2021-13920)

Adobe Magento is Adobe's one with PHP written in open source e-commerce platform.Magento Community Edition is the community edition, later renamed Magento Open Source, Magento Enterprise Edition is the enterprise edition, later renamed Magento Magento Enterprise Edition is the enterprise edition,...

5.3CVSS6.9AI score0.01808EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/02/09 12:00 a.m.•10 views

PT-2021-2309 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.4.1 and earlier Magento versions 2.4.0-p1 and earlier Magento versions 2.3.6 and earlier Description: The issue is related to improper authorization in the integrations module of Magento Commerce, which can be exploited by ...

5.3CVSS5.6AI score0.01808EPSS
SaveExploits0References10
OSV
OSV
•added 2021/01/29 7:15 a.m.•20 views

CVE-2020-28405

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to change the privileges of any user of the application. This can be used to grant himself the administrative role or remove all administrative accounts of the...

8.8CVSS7.3AI score0.01618EPSS
SaveExploits0References3
OSV
OSV
•added 2021/01/29 7:15 a.m.•15 views

CVE-2020-28402

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access Launcher Configuration Panel...

8.8CVSS7.3AI score0.01416EPSS
SaveExploits0References3
OSV
OSV
•added 2021/01/29 7:15 a.m.•14 views

CVE-2020-28406

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access details about jobs he should not have access to via the Audit Trail Feature...

6.5CVSS6.6AI score0.01306EPSS
SaveExploits0References3
OSV
OSV
•added 2021/01/29 7:15 a.m.•14 views

CVE-2020-28401

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access WIP details about jobs he should not have access to...

6.5CVSS6.6AI score0.01306EPSS
SaveExploits0References3
NVD
NVD
•added 2021/01/29 7:15 a.m.•28 views

CVE-2020-28402

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access Launcher Configuration Panel...

8.8CVSS6.2AI score0.01416EPSS
SaveExploits0References3
NVD
NVD
•added 2021/01/29 7:15 a.m.•23 views

CVE-2020-28406

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access details about jobs he should not have access to via the Audit Trail Feature...

6.5CVSS6.4AI score0.01306EPSS
SaveExploits0References3
NVD
NVD
•added 2021/01/29 7:15 a.m.•33 views

CVE-2020-28404

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access the Billing page without the appropriate privileges...

6.5CVSS6.4AI score0.01306EPSS
SaveExploits0References3
Prion
Prion
•added 2021/01/29 7:15 a.m.•22 views

Authorization

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access details about jobs he should not have access to via the Audit Trail Feature...

4CVSS6.4AI score0.01306EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder