CVE-2017-6044

An Improper Authorization issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Several files and directories can be accessed without authentication, which may allow a remote attacker to perform sensitive...

CVE-2017-6044: Improper Authorization

An Improper Authorization issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Several files and directories can be accessed without authentication, which may allow a remote attacker to perform sensitive...

PT-2017-16858

Name of the Vulnerable Software and Affected Versions Sierra Wireless AirLink Raven XE versions prior to 4.0.14 Sierra Wireless AirLink Raven XT versions prior to 4.0.11 Description An issue with improper authorization was found, allowing several files and directories to be accessed without...

CVE-2016-1000219: Improper Authorization

Kibana before 4.5.4 and 4.1.11 when a custom output is configured for logging in, cookies and authorization headers could be written to the log files. This information could be used to hijack sessions of other users when using Kibana behind some form of authentication such as Shield...

TrustZone Component Access

The vulnerability of the TrustZone component in the Android operating system is related to improper authorization. Exploiting this vulnerability can allow a remote attacker to gain access to resources...

Android Core Kernel Access

The vulnerability in the Core Kernel of the Android operating system is related to improper authorization. Exploiting this vulnerability can allow a remote attacker to gain access to resources...

Authorization

In Core Kernel in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist...

CVE-2014-9950

In Core Kernel in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist...

Authorization

In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist...

CVE-2014-9950

In Core Kernel in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist...

CVE-2014-9945

CVE-2014-9945 describes an Improper Authorization vulnerability in the TrustZone component on Android releases from CAF that use the Linux kernel. The issue affects TrustZone/CAF Android builds and is described as potentially existing within the TrustZone security boundary. From the CVSS data, th...

CVE-2014-9950

Technical details for CVE-2014-9950 are not publicly available in the provided documents; monitor for updates.

CVE-2014-9945

In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist...

PT-2017-2200

Name of the Vulnerable Software and Affected Versions Android versions affected versions not specified Description The issue is related to an improper authorization vulnerability in the TrustZone component of the Android operating system. This vulnerability could potentially allow a remote attack...

CVE-2014-9950: Improper Authorization

In Core Kernel in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist...

CVE-2014-9945: Improper Authorization

In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist...

PT-2017-2213

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is related to an improper authorization vulnerability in the Core Kernel of the Android operating system. This could potentially allow a remote attacker to gain access to a...

CVE-2017-0896: Improper Authorization

Zulip Server 1.5.1 and below suffer from an error in the implementation of the invitebyadminsonly setting in the Zulip group chat application server that allowed an authenticated user to invite other users to join a Zulip organization even if the organization was configured to prevent this...

CVE-2017-7484: Improper Authorization

It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 did not check user privileges before providing information from pgstatistic, possibly leaking information. An unprivileged...

CVE-2017-0894: Improper Authorization

Nextcloud Server before 11.0.3 is vulnerable to disclosure of valid share tokens for public calendars due to a logical error. Thus granting an attacker potentially access to publicly shared calendars without knowing the share token...