HID Global Encoders

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION : Exploitable locally Vendor : HID Global Equipment : iCLASS SE, OMNIKEY Vulnerability : Improper Authorization 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to read data from reader configuration...

HID Global Reader Configuration Cards

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION : Low attack complexity Vendor : HID Global Equipment : Reader Configuration Cards Vulnerability : Improper Authorization 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to read the credential and device...

CVE-2023-25543

Dell Power Manager, versions prior to 3.14, contain an Improper Authorization vulnerability in DPM service. A low privileged malicious user could potentially exploit this vulnerability in order to elevate privileges on the system...

CVE-2023-25543

Summary: CVE-2023-25543 affects Dell Power Manager. Dell Power Manager versions prior to 3.14 contain an Improper Authorization vulnerability in the DPM service that could allow a low-privileged user to elevate privileges (local access). Proven by multiple sources in the connected documents that ...

CVE-2023-25543

Dell Power Manager, versions prior to 3.14, contain an Improper Authorization vulnerability in DPM service. A low privileged malicious user could potentially exploit this vulnerability in order to elevate privileges on the system...

CVE-2024-20828

CVE-2024-20828 concerns Samsung Internet prior to version 24.0, where improper authorization verification allows physical attackers to access files downloaded in SecretMode without authentication. Affected component: Samsung Internet; root cause: insufficient authorization checks. Impact: potenti...

CVE-2024-20828

Improper authorization verification vulnerability in Samsung Internet prior to version 24.0 allows physical attackers to access files downloaded in SecretMode without proper authentication...

Total Upkeep < 1.15.9 - Improper Authorization to Unauthenticated Arbitrary File Download

Description The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to unauthorized access of data due to an improper authorization check in all versions up to, and including, 1.15.8. This makes it possible for unauthenticated attackers to...

PT-2024-12066 · Dell · Dell Power Manager

Name of the Vulnerable Software and Affected Versions: Dell Power Manager versions prior to 3.14 Description: The issue is related to an Improper Authorization vulnerability in the DPM service. A low-privileged malicious user could potentially exploit this vulnerability to elevate privileges on t...

Dell Power Manager Security Vulnerability

Dell Power Manager is an application from Dell Inc. that is used to configure battery maintenance practices to maximize system battery life. A security vulnerability exists in Dell Power Manager versions prior to 3.14 that stems from the inclusion of an improper authorization vulnerability in the...

The vulnerability of the BuildKit container building tool, related to incorrect authorization, allows a malicious actor to execute containers with elevated privileges.

The vulnerability of the BuildKit container-building software is related to improper authorization. Exploiting this vulnerability allows a remote attacker to execute containers with elevated privileges...

Improper Authorization

GitLab is vulnerable to Improper Authorization. The above vulnerability is caused due to improper authorization in GitLab. An unauthorized attacker is able to assign arbitrary users to MRs that they created within the project...

PT-2024-1518 · Buildkit +1 · Buildkit +1

Name of the Vulnerable Software and Affected Versions: BuildKit versions prior to 0.12.5 Description: The issue is related to improper authorization in BuildKit, allowing a remote attacker to run containers with elevated privileges. BuildKit provides APIs for running interactive containers based ...

Improper Authorization

openjdk21 is vulnerable to Improper Authorization. The vulnerability is due to an issue in the Compiler component, allowing an unauthenticated attacker with network access through multiple protocols to compromise the affected systems...

Server-Side Template Injection Vulnerability in Confluence Data Center and Server (CVE-2023-22527)

Introduction On January 16 2024, Atlassian issued a ​​significant alert on a critical Server-Side Template Injection SSTI vulnerability in Confluence Data Center and Server, identified as CVE-2023-22527. This issue found in older versions, poses a serious risk as it allows attackers without any...

Emerson Rosemount GC370XA, GC700XA, GC1500XA

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely Vendor : Emerson Equipment : Rosemount GC370XA, GC700XA, GC1500XA Vulnerabilities : Command Injection, Improper Authentication, Improper Authorization 2. RISK EVALUATION Successful exploitation of these vulnerabilities...

CVE-2024-23388

Improper authorization in handler for custom URL scheme issue in "Mercari" App for Android prior to version 5.78.0 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack...

CVE-2024-23388

Improper authorization in handler for custom URL scheme issue in "Mercari" App for Android prior to version 5.78.0 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack...

Authorization

Improper authorization in handler for custom URL scheme issue in "Mercari" App for Android prior to version 5.78.0 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack...

CVE-2024-23388

Improper authorization in handler for custom URL scheme issue in "Mercari" App for Android prior to version 5.78.0 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack...