2964 matches found
CVE-2022-2063
Improper Privilege Management in GitHub repository nocodb/nocodb prior to 0.91.7+...
CVE-2022-2063: Improper Privilege Management
Improper Privilege Management in GitHub repository nocodb/nocodb prior to 0.91.7+...
CVE-2022-30610: Improper Privilege Management
IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to reverse tabnabbing where it could allow a page linked to from within IBM Spectrum Copy Data Management to rewrite it. An administrator could enter a link to a malicious URL that another administrator could then click. Onc...
CVE-2022-32272: Improper Privilege Management
OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5.6.1 have incorrect access control, resulting in privilege escalation...
CVE-2022-30739
CVE-2022-30739 concerns an improper privilege management vulnerability in Samsung Account prior to version 13.2.00.6. The vulnerability allows attackers with normal permissions to obtain a user’s email or phone number. The connected documents consistently describe the affected product as Samsung ...
CVE-2022-30743: Exposure of Sensitive Information to an Unauthorized Actor
Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery without permission...
CVE-2022-30736: Exposure of Sensitive Information to an Unauthorized Actor
Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery without permission...
PT-2022-20274
Name of the Vulnerable Software and Affected Versions Samsung Account versions prior to 13.2.00.6 Description The issue is related to improper privilege management, allowing attackers to access contact and gallery data without permission. Recommendations For versions prior to 13.2.00.6, update to...
PT-2022-20277
Name of the Vulnerable Software and Affected Versions Samsung Account versions prior to 13.2.00.6 Description The issue is related to improper privilege management, allowing attackers to obtain a user's email or phone number with normal level permission. Recommendations For versions prior to...
CVE-2022-30739: Improper Privilege Management
Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get an user email or phone number with a normal level permission...
CVE-2022-30735: Exposure of Sensitive Information to an Unauthorized Actor
Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the accesstoken without permission...
CVE-2022-21827: Improper Privilege Management
An improper privilege vulnerability has been discovered in Citrix Gateway Plug-in for Windows Citrix Secure Access for Windows 21.9.1.2 what could allow an attacker who has gained local access to a computer with Citrix Gateway Plug-in installed, to corrupt or delete files as SYSTEM...
GHSA-2W4H-F44W-968F Improper Privilege Management in Neo4j Graph Database
A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 could allow authenticated users to execute commands with elevated privileges...
CVE-2014-125001: Improper Privilege Management
A vulnerability classified as critical has been found in Cardo Systems Scala Rider Q3. Affected is the file /cardo/api of the Cardo-Updater. Unauthenticated remote code execution with root permissions is possible. Firewalling or disabling the service is recommended...
Improper privilege management - Anyone can view room settings.
Description Hi bigbluebutton maintainers, I would like to report an improper privilege management, this allows anyone to view any room settings. Proof of Concept 1. To demonstrate the vulnerability, I've created a room https://demo.bigbluebutton.org/gl/hoa-j4s-sxx-5gn 2. Run this curl command to...
CVE-2022-1770
Improper Privilege Management in GitHub repository polonel/trudesk prior to 1.2.2...
CVE-2022-1770
CVE-2022-1770 describes an issue of improper privilege management in the GitHub repository polonel/trudesk, affecting versions prior to 1.2.2. The provided description does not specify the exact component, module, or surface affected, nor the concrete exploit path, impact scope, or root cause det...
CVE-2022-1770: Improper Privilege Management
Improper Privilege Management in GitHub repository polonel/trudesk prior to 1.2.2...
Cybozu Garoon 安全漏洞
Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. Cybozu Garoon suffers from an authorization issue vulnerability that originates from improper privilege managemen...