Lucene search
+L

6393 matches found

Huntr
Huntr
added 2022/01/25 8:57 a.m.43 views

Improper Authorization in janeczku/calibre-web

Description With default settings, low-level users will not have permission to edit the sort order of books in private shelf of another user. However, due to incorrect checking, the application does not work as intended. Proof of Concept - Step 1: Login with admin account and go to...

4CVSS0.00663EPSS
SaveExploits1
Huntr
Huntr
added 2022/01/24 11:41 a.m.19 views

Improper Authorization in liukuo362573/yishaadmin

Description When downloading files using the /admin/File/DownloadFile?filePath= URI, you're able to download any file you want, as long as you know the path of the file, even as an unauthenticated user. This means that an unauthenticated user could download the /etc/passwd/ file or any file that...

1.2AI score
SaveExploits0
Huntr
Huntr
added 2022/01/24 3:30 a.m.18 views

Improper Authorization in liukuo362573/yishaadmin

Description Hi there, there is another Improper authorization in /admin/OrganizationManage/Department/GetFormJson Proof of Concept 1. Open link http://106.14.124.170/admin/OrganizationManage/Department/GetFormJson?id=16508640061124402 without logging in demo page. 2. See that department data is...

0.9AI score
SaveExploits0
Huntr
Huntr
added 2022/01/22 9:10 a.m.18 views

Improper Authorization in liukuo362573/yishaadmin

Description Hi there yisshadmin team, I would like to report an improper authorization in yishaadmin source code. The link /admin/ToolManage/Server/ServerIndex requires no authorization and available for anyone to view server information like IP, RAM, CPU... Proof of Concept 1. Access the link...

0.3AI score
SaveExploits0
NVD
NVD
added 2022/01/10 2:12 p.m.24 views

CVE-2022-22288

Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist...

7.5CVSS0.0092EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/10 2:12 p.m.10 views

CVE-2022-22288

Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist...

7.5CVSS7.2AI score0.0092EPSS
SaveExploits0References2
OSV
OSV
added 2022/01/10 2:12 p.m.11 views

CVE-2022-22288

Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist...

7.5CVSS7.2AI score0.0092EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/10 2:12 p.m.10 views

CVE-2022-22272

Improper authorization in TelephonyManager prior to SMR Jan-2022 Release 1 allows attackers to get IMSI without READPRIVILEGEDPHONESTATE permission...

3.3CVSS5.8AI score0.00102EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/10 2:12 p.m.9 views

CVE-2022-22272

Improper authorization in TelephonyManager prior to SMR Jan-2022 Release 1 allows attackers to get IMSI without READPRIVILEGEDPHONESTATE permission...

4CVSS5.8AI score0.00102EPSS
SaveExploits0References2
NVD
NVD
added 2022/01/10 2:12 p.m.34 views

CVE-2022-22272

Improper authorization in TelephonyManager prior to SMR Jan-2022 Release 1 allows attackers to get IMSI without READPRIVILEGEDPHONESTATE permission...

4CVSS0.00102EPSS
SaveExploits0References1
CISA KEV Catalog
CISA KEV Catalog
added 2022/01/10 12:00 a.m.91 views

Fortinet FortiOS and FortiProxy Improper Authorization

An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password...

9.1CVSS4AI score0.81691EPSS
SaveIn wildExploits2
CNNVD
CNNVD
added 2022/01/10 12:00 a.m.12 views

Samsung SMR 安全漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in Samsung SMR that originates from improper authorization in TelephonyManager and allows an attacker to gain access to IMSI without the...

4CVSS5AI score0.00102EPSS
SaveExploits0References2
CVE
CVE
added 2022/01/07 10:39 p.m.127 views

CVE-2022-22288

CVE-2022-22288 affects Samsung Galaxy Store; vulnerability is an improper authorization flaw in Galaxy Store prior to version 4.5.36.5 that enables remote installation from the allowlist. Root cause per sources is improper authorization allowing an attacker to trigger installations without proper...

7.5CVSS7.5AI score0.0092EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/01/07 10:39 p.m.31 views

CVE-2022-22288

Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist...

7.5CVSS7.7AI score0.0092EPSS
SaveExploits0References1
CVE
CVE
added 2022/01/07 10:39 p.m.114 views

CVE-2022-22272

CVE-2022-22272 affects TelephonyManager in Samsung/Android prior to the SMR Jan-2022 Release 1. The issue is improper authorization that allows an attacker to obtain the IMSI without READ_PRIVILEGED_PHONE_STATE permission. Root cause is insufficient access control in TelephonyManager’s handling o...

4CVSS4.1AI score0.00102EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/01/07 10:39 p.m.42 views

CVE-2022-22272

Improper authorization in TelephonyManager prior to SMR Jan-2022 Release 1 allows attackers to get IMSI without READPRIVILEGEDPHONESTATE permission...

4CVSS4.6AI score0.00102EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/01/07 12:00 a.m.11 views

PT-2022-15318 · Unknown · Telephonymanager

Name of the Vulnerable Software and Affected Versions: TelephonyManager versions prior to SMR Jan-2022 Release 1 Description: The issue is related to improper authorization in TelephonyManager, allowing attackers to obtain the IMSI without the required READ PRIVILEGED PHONE STATE permission...

4CVSS3.8AI score0.00102EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/01/07 12:00 a.m.11 views

PT-2022-15332 · Samsung · Galaxy Store

Name of the Vulnerable Software and Affected Versions: Galaxy Store versions prior to 4.5.36.5 Description: The issue is related to an improper authorization vulnerability. It allows for remote app installation from the allowlist. Recommendations: For Galaxy Store versions prior to 4.5.36.5, upda...

7.5CVSS7.5AI score0.0092EPSS
SaveExploits0References3
OSV
OSV
added 2022/01/06 6:32 p.m.16 views

GHSA-83X4-9CWR-5487 Improper Authorization in Keycloak

A incorrect authorization flaw was found in Keycloak 12.0.0, the flaw allows an attacker with any existing user account to create new default user accounts via the administrative REST API even where new user registration is disabled...

8.8CVSS5.8AI score0.01347EPSS
SaveExploits0References6
OSV
OSV
added 2022/01/03 3:15 p.m.16 views

CVE-2021-3837

openwhyd is vulnerable to Improper Authorization...

6.1CVSS6.8AI score
SaveExploits0References2
Rows per page
Query Builder