6331 matches found
CVE-2025-3550 wowjoy 浙江湖州华卓信息科技有限公司 Internet Doctor Workstation System detail improper authorization
A vulnerability has been found in wowjoy 浙江湖州华卓信息科技有限公司 Internet Doctor Workstation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /v1/pushConfig/detail/. The manipulation leads to improper authorization. The attack can be launched...
CVE-2025-3550
CVE-2025-3550 affects wowjoy Internet Doctor Workstation System 1.0. The vulnerability is an improper authorization in the /v1/pushConfig/detail/ endpoint, enabling remote exploitation. Multiple sources confirm the issue exists in version 1.0 and describe the impact as unauthorized access to the ...
db-hospital-drug 安全漏洞
db-hospital-drug is a hospital inventory management system by James Personal Developer. A security vulnerability exists in db-hospital-drug version 1.0, which stems from improper authorization in the file ShiroConfig.java...
PT-2025-16265 · Zerowdd · Studentmanager
Name of the Vulnerable Software and Affected Versions: ZeroWdd/code-projects studentmanager version 1.0 Description: A critical vulnerability was found in the studentmanager software, affecting unknown code of the file /getTeacherList. The manipulation leads to improper authorization. The attack...
studentmanager 安全漏洞
studentmanager is a student management system by the individual developers of ZeroWdd. A security vulnerability exists in studentmanager version 1.0, which stems from improper authorization in the file /getTeacherList...
PT-2025-16202 · Wowjoy 浙江湖州华卓信息科技有限公司 · Internet Doctor Workstation System
Name of the Vulnerable Software and Affected Versions: wowjoy 浙江湖州华卓信息科技有限公司 Internet Doctor Workstation System version 1.0 Description: A vulnerability has been found in the Internet Doctor Workstation System, affecting an unknown functionality of the file "/v1/pushConfig/detail/". The...
Echo 安全漏洞
Echo is an open source community system with no separation of front and back end for Veal98 individual developers. A security vulnerability exists in Echo version 4.2, which stems from an improper authorization issue in the documentation...
StudentManager 安全漏洞
StudentManager is a student management system by huanfenz individual developer. A security vulnerability exists in StudentManager 1.0 and earlier versions, which is caused by improper authorization...
PT-2025-16215 · Huanfenz/Code Projects · Studentmanager
Name of the Vulnerable Software and Affected Versions: huanfenz/code-projects StudentManager versions up to 1.0 Description: A problematic vulnerability has been found in the Teacher String Handler component, leading to improper authorization. The manipulation can be initiated remotely. The...
CVE-2025-3536
A vulnerability was found in Tutorials-Website Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/delete-user.php. The manipulation of the argument ID leads to improper authorization. The attack may be launched...
CVE-2025-3537 Tutorials-Website Employee Management System update-user.php improper authorization
A vulnerability was found in Tutorials-Website Employee Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/update-user.php. The manipulation of the argument ID leads to improper authorization. It is possible to initiate the attack remotely...
CVE-2025-3537
CVE-2025-3537 affects Tutorials-Website Employee Management System v1.0. The vulnerability exists in an unknown portion of the file /admin/update-user.php, where manipulating the ID argument enables improper authorization and remote attack capability. Public disclosure of the exploit is noted, wi...
CVE-2025-3537 Tutorials-Website Employee Management System update-user.php improper authorization
A vulnerability was found in Tutorials-Website Employee Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/update-user.php. The manipulation of the argument ID leads to improper authorization. It is possible to initiate the attack remotely...
CVE-2025-3536 Tutorials-Website Employee Management System delete-user.php improper authorization
A vulnerability was found in Tutorials-Website Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/delete-user.php. The manipulation of the argument ID leads to improper authorization. The attack may be launched...
CVE-2025-3536
CVE-2025-3536 affects Tutorials-Website Employee Management System 1.0. The vulnerability resides in the /admin/delete-user.php endpoint where manipulating the ID argument leads to improper authorization. The issue is exploitable remotely and the public exploit is available. No vendor response is...
Tutorials Website Employee Management System 安全漏洞
Tutorials Website Employee Management System is an employee management system from Tutorials Website, Inc. A security vulnerability exists in Tutorials Website Employee Management System version 1.0, which is caused by improper authorization...
Tutorials Website Employee Management System 安全漏洞
Tutorials Website Employee Management System is an employee management system from Tutorials Website, Inc. A security vulnerability exists in Tutorials Website Employee Management System version 1.0, which is caused by improper authorization...
Improper Authorization
Jenkins is vulnerable to Improper authorization. The vulnerability is due to missing permission checks in an HTTP endpoint, allowing attackers with only Computer/Create permission to copy an agent and gain unauthorized access to its configuration...
CVE-2025-27188
Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access...