9526 matches found
CVE-2023-36633
An improper authorization vulnerability CWE-285 in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authenticated attacker to see and modify the title of address book folders of other users via crafted HTTP or HTTPs requests...
CVE-2023-36633
An improper authorization vulnerability CWE-285 in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authenticated attacker to see and modify the title of address book folders of other users via crafted HTTP or HTTPs requests...
PT-2023-6938 · Zoom · Zoom
Name of the Vulnerable Software and Affected Versions: Zoom affected versions not specified Description: The issue is related to improper authorization in some Zoom clients, which may allow an authorized user to conduct an escalation of privilege via network access. This is due to deficiencies in...
Fortinet FortiMail webmail Security Vulnerability
Fortinet FortiMail is a set of e-mail security gateway products of the U.S. Fita Fortinet. The product provides email security and data protection features. A security vulnerability exists in Fortinet FortiMail webmail that stems from an improper authorization vulnerability. An authenticated...
CVE-2023-28378: Improper Authorization
Improper authorization in some IntelR QAT drivers for Windows - HW Version 2.0 before version 2.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access...
PT-2023-25645
Name of the Vulnerable Software and Affected Versions FortiMail webmail versions 7.2.0 through 7.2.2 FortiMail webmail versions prior to 7.0.5 Description The issue allows an authenticated attacker to see and modify the title of address book folders of other users via crafted HTTP or HTTPS...
CVE-2023-32662: Improper Authorization
Improper authorization in some Intel Battery Life Diagnostic Tool installation software before version 2.2.1 may allow a privilaged user to potentially enable escalation of privilege via local access...
CVE-2023-36633: Improper Authorization
An improper authorization vulnerability CWE-285 in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authenticated attacker to see and modify the title of address book folders of other users via crafted HTTP or HTTPs requests...
Zoom Client for Meetings < 5.16.0 Vulnerability (ZSB-23055)
The version of Zoom Client for Meetings installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23055 advisory. - Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via...
GitLab 14.7 < 16.3.6 / 16.4.0 < 16.4.2 / 16.5.0 < 16.5.1 (CVE-2023-4700)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An authorization issue affecting GitLab EE affecting all versions from 14.7 prior to 16.3.6, 16.4 prior to 16.4.2, and 16.5 prior to 16.5.1, allowed a user to run jobs in protected environments,...
PT-2023-6914 · Apache · Apache Airflow
Name of the Vulnerable Software and Affected Versions: Apache Airflow versions prior to 2.7.3 Description: The issue allows authenticated and DAG-view authorized users to modify some DAG run detail values when submitting notes, potentially altering details such as configuration parameters and sta...
Improper Authorization in Confluence Data Center and Server (CVE-2023-22518)
In early November, the cybersecurity community witnessed the exploitation of a zero-day vulnerability in Confluence Data Center and Server. This critical vulnerability was related to Improper Authorization and assigned CVE-2023-22518 identifier. In this blog, we delve into the details of these...
PT-2023-18556
Name of the Vulnerable Software and Affected Versions Atlassian Confluence affected versions not specified Description The issue allows a remote attacker to exploit a vulnerable endpoint and gain administrator privileges due to an improper authorization vulnerability. Threat actors have been...
CVE-2023-47109: Improper Authorization
PrestaShop blockreassurance adds an information block aimed at offering helpful information to reassure customers that the store is trustworthy. When adding a block in blockreassurance module, a BO user can modify the http request and give the path of any file in the project instead of an image...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-22518 Atlassian Confluence Data Center and Server Improper Authorization Vulnerability These types of vulnerabilities are frequent attack vectors for malicious...
CVE-2023-42553
Improper authorization verification vulnerability in Samsung Email prior to version 6.1.90.4 allows attackers to read sandbox data of email...
CVE-2023-42541
Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access unique id...
CVE-2023-42553
Improper authorization verification vulnerability in Samsung Email prior to version 6.1.90.4 allows attackers to read sandbox data of email...
CVE-2023-42553
Samsung Email is affected by an improper authorization verification vulnerability in versions before 6.1.90.4 that could allow reading of sandboxed email data. The CVE-2023-42553 entry cites a primary impact (CONF/low) with CVSS v3.1 base score 5.3, and a CNA note of a local vector with CVSS 4.0....