CVE-2019-5308: Undefined Security Weakness

Mate 20 RS smartphones with versions earlier than 9.1.0.135C786E133R3P1 have an improper authorization vulnerability. The software does not properly restrict certain operation in ADB mode, successful exploit could allow the attacker to switch to third desktop after a series of operation...

PT-2019-17571 · Huawei · Huawei Mate 20

Name of the Vulnerable Software and Affected Versions: Huawei Mate 20 RS versions prior to 9.1.0.135C786E133R3P1 Description: The issue is related to improper authorization in ADB mode, where the software does not properly restrict certain operations. A successful exploit could allow an attacker ...

CVE-2019-5269: Undefined Security Weakness

Some Huawei home routers have an improper authorization vulnerability. Due to improper authorization of certain programs, an attacker can exploit this vulnerability to execute uploaded malicious files and escalate privilege...

Huawei Mate 20 RS Improper Authorization Vulnerability

Huawei Mate 20 RS is a smartphone from Chinese company Huawei Huawei. An improper authorization vulnerability exists in previous versions of Huawei Mate 20 RS 9.1.0.135 C786E133R3P1, which stems from the system's failure to appropriately restrict some of the user's actions in ADB mode. An attacke...

CVE-2019-15990

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an unauthenticated, remote attacker to view information displayed in the web-based management interface. The vulnerability is due to improper authorization of HTTP requests. An...

CVE-2019-15990: Improper Authorization

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an unauthenticated, remote attacker to view information displayed in the web-based management interface. The vulnerability is due to improper authorization of HTTP requests. An...

Cisco Small Business RV Series Routers Information Disclosure Vulnerability

Cisco Small Business RV Series Routers is an RV series router from Cisco USA. An information disclosure vulnerability exists in the Web management interface of Cisco Small Business RV Series Routers, which arises from a failure of the program to properly authorize HTTP requests, which can be...

Multiple Huawei Products Improperly Licensed Vulnerability

The Huawei HiRouter-CD15-10, among others, is a wireless router from the Chinese company Huawei Huawei. An improper authorization vulnerability exists in multiple Huawei products, which can be exploited by attackers to execute uploaded malicious files and elevate privileges...

Huawei P30 ELLE-AL00B Improper Authorization Vulnerability

Huawei P30 is a smartphone from Chinese company Huawei Huawei. An improper authorization vulnerability exists in versions prior to Huawei P30 ELLE-AL00B 9.1.0.186 C00E180R2P1, which stems from the system failing to properly authorize a user action. An attacker could use this vulnerability to flas...

CVE-2019-15358

The Dexp Z250 Android device with a build fingerprint of DEXP/Z250/Z250:8.1.0/O11019/1531130719:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify a system propert...

CVE-2019-15379: Undefined Security Weakness

The Walton Primo G3 Android device with a build fingerprint of WALTON/PrimoGM3/PrimoGM3:8.1.0/O11019/1522737198:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app versionCode=27, versionName=8.1.0 that allows any app co-located on the device to modify ...

CVE-2019-5231

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.186C00E180R2P1 have an improper authorization vulnerability. The software incorrectly performs an authorization check when a user attempts to perform certain action. Successful exploit could allow the attacker to update a crafted package...

CVE-2019-3641: Improper Authorization

Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server TIE Server 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages...

PT-2019-4288 · Huawei · Huawei Home Routers

Name of the Vulnerable Software and Affected Versions: Huawei home routers affected versions not specified Description: The issue is related to improper authorization in certain programs, allowing an attacker to execute malicious files and escalate privileges. This can lead to the execution of...

Security Advisory - Two Vulnerabilities in Some Huawei Home Routers

Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories. Vulnerability ID:...

CVE-2019-5231: Incorrect Authorization

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.186C00E180R2P1 have an improper authorization vulnerability. The software incorrectly performs an authorization check when a user attempts to perform certain action. Successful exploit could allow the attacker to update a crafted package...

CVE-2019-3764

Dell EMC iDRAC7 versions prior to 2.65.65.65, iDRAC8 versions prior to 2.70.70.70 and iDRAC9 versions prior to 3.36.36.36 contain an improper authorization vulnerability. A remote authenticated malicious iDRAC user with low privileges may potentially exploit this vulnerability to obtain sensitive...

CVE-2019-3764

Dell EMC iDRAC7 versions prior to 2.65.65.65, iDRAC8 versions prior to 2.70.70.70 and iDRAC9 versions prior to 3.36.36.36 contain an improper authorization vulnerability. A remote authenticated malicious iDRAC user with low privileges may potentially exploit this vulnerability to obtain sensitive...

CVE-2019-3764: Improper Authorization

Dell EMC iDRAC7 versions prior to 2.65.65.65, iDRAC8 versions prior to 2.70.70.70 and iDRAC9 versions prior to 3.36.36.36 contain an improper authorization vulnerability. A remote authenticated malicious iDRAC user with low privileges may potentially exploit this vulnerability to obtain sensitive...

Low: GNOME security, bug fix, and enhancement update

GNOME is the default desktop environment of AlmaLinux. Security Fixes: evince: uninitialized memory use in function tiffdocumentrender and tiffdocumentgetthumbnail CVE-2019-11459 gvfs: improper authorization in daemon/gvfsdaemon.c in gvfsd CVE-2019-12795 For more details about the security issues...