9420 matches found
WordPress Plugin YaySMTPr 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2022-2371: Improper Neutralization of Input During Web Page Generation
The YaySMTP WordPress plugin before 2.2.1 does not have proper authorisation when saving its settings, allowing users with a role as low as subscriber to change them, and use that to conduct Stored Cross-Site Scripting attack due to the lack of escaping in them as well...
GitLab 14.6.x - 15.0.4, 15.1.x - 15.1.3, 15.2 Improper Authorization Vulnerability
GitLab is prone to an improper authorization vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if...
CVE-2022-31609: Improper Authorization
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it allows the guest VM to allocate resources for which the guest is not authorized. This vulnerability may lead to loss of data integrity and confidentiality, denial of service, or information disclosure...
CVE-2022-2675: Improper Authorization
Using off-the-shelf commodity hardware, the Unitree Go 1 robotics platform version H0.1.7 and H0.1.9 using firmware version 0.1.35 can be powered down by an attacker within normal RF range without authentication. Other versions may be affected, such as the A1...
CVE-2022-36837: Improper Authorization
Intent redirection vulnerability using implicit intent in Samsung email prior to version 6.1.70.20 allows attacker to get sensitive information...
CVE-2022-33722: Improper Authorization
Implicit Intent hijacking vulnerability in Smart View prior to SMR Aug-2022 Release 1 allows attacker to access connected device MAC address...
The vulnerability of the SAP Business Objects Business Intelligence Platform, related to improper authorization, allows a perpetrator to gain access to modify, add, or delete data.
The vulnerability of the SAP Business Objects Business Intelligence Platform is related to improper authorization. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to modify, add, or delete data...
Improper Authorization
Overview Affected versions of this package are vulnerable to Improper Authorization in the UpdateSavedSearch function in savedsearches.go that allows a user to delete but not read another user's saved searches. Remediation Upgrade github.com/sourcegraph/sourcegraph-public-snapshot/cmd/frontend to...
CVE-2022-31178 Improper Authorization in eLabFTW
eLabFTW is an electronic lab notebook manager for research teams. A vulnerability was discovered which allows a logged in user to read a template without being authorized to do so. This vulnerability has been patched in 4.3.4. Users are advised to upgrade. There are no known workarounds for this...
CVE-2022-2595
Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1...
CVE-2022-2595
Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1...
Authorization
Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1...
CVE-2022-2595
Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1...
CVE-2022-2595
CVE-2022-2595 concerns the GitHub repository kromitgmbh/titra, affected in versions prior to 0.79.1. The root cause is improper authorization in the Add Extension functionality, which can allow a low-privilege/unauthenticated user to upload a malicious extension and trigger remote code execution....
Authorization
Pandora FMS v7.0NG.760 and below allows an improper authorization in User Management where any authenticated user with access to the User Management module could create, modify or delete any user with full admin privilege. The impact could lead to a vertical privilege escalation to access the...
UBUNTU-CVE-2022-26310
Pandora FMS v7.0NG.760 and below allows an improper authorization in User Management where any authenticated user with access to the User Management module could create, modify or delete any user with full admin privilege. The impact could lead to a vertical privilege escalation to access the...
CVE-2022-26310
CVE-2022-26310 affects Pandora FMS v7.0NG.760 and earlier, via improper authorization in User Management that lets any authenticated user with access to that module create, modify, or delete users with full admin privileges, enabling vertical privilege escalation to admin level. The connected doc...
PT-2022-17616 · Kromitgmbh · Titra
Name of the Vulnerable Software and Affected Versions: GitHub repository kromitgmbh/titra versions prior to 0.79.1 Description: The issue is related to improper authorization. Recommendations: For versions prior to 0.79.1, update to version 0.79.1 or later to resolve the issue...