Access Control Bypass

Overview magento/project-community-edition is an eCommerce Platform for Growth Community Edition Affected versions of this package are vulnerable to Access Control Bypass due to a flaw in the security feature implementation. A low-privileged attacker could exploit this vulnerability to bypass...

Incorrect Authorization

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Incorrect Authorization due to improper authorization checks. A low-privileged attacker can bypass certain security features by exploiting these checks. Remediation Upgrade...

CVE-2023-29307

Adobe Experience Manager versions 6.5.16.0 and earlier is affected by a URL Redirection to Untrusted Site 'Open Redirect' vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user...

CVE-2023-29322

Adobe Experience Manager versions 6.5.16.0 and earlier is affected by a reflected Cross-Site Scripting XSS vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the...

Open redirect

Adobe Experience Manager versions 6.5.16.0 and earlier is affected by a URL Redirection to Untrusted Site 'Open Redirect' vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user...

PT-2023-3371 · Siemens · Simatic Pcs 7 +2

Name of the Vulnerable Software and Affected Versions: SIMATIC PCS 7 versions prior to V9.1 SP2 UC04 SIMATIC S7-PM versions prior to V5.7 SP1 HF1 SIMATIC S7-PM versions prior to V5.7 SP2 HF1 SIMATIC STEP 7 V5 versions prior to V5.7 Description: A vulnerability has been identified in the affected...

GHSA-HH54-53M7-7FFJ alist Incorrect Access Control vulnerability

alist =3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file...

alist Incorrect Access Control vulnerability

alist =3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file...

CVE-2023-33498

alist =3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file...

CVE-2023-33498

alist =3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file...

Design/Logic Flaw

alist =3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file...

CVE-2020-36699

The Quick Page/Post Redirect Plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the qpprsavequickredirectajax and qpprdeletequickredirect functions in versions up to, and including, 5.1.9. This makes it possible for low-privileged attackers to interact...

PT-2023-11841 · WordPress · Quick Page/Post Redirect Plugin

Name of the Vulnerable Software and Affected Versions: The Quick Page/Post Redirect Plugin for WordPress versions up to, and including, 5.1.9 Description: The issue is related to authorization bypass due to missing capability checks on the qppr save quick redirect ajax and qppr delete quick...

AList 代码问题漏洞

AList is a file listing program with multi-storage support by the individual developer Xhofe in China. A security vulnerability exists in AList 3.16.3 and earlier versions, which stems from an access control error that allows users with low privileges to upload arbitrary files...

CVE-2023-33498

alist =3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file...

CVE-2023-33498

alist =3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file...

PT-2023-24366 · Alist · Alist

Name of the Vulnerable Software and Affected Versions: alist versions =3.16.3 Description: The issue concerns incorrect access control, allowing accounts with low privilege levels to upload any file. This can potentially lead to unauthorized access and data breaches. There is no information...

CVE-2023-33498

alist =3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file...

MB connect line mbCONNECT24和mymbCONNECT24 信息泄露漏洞

MB connect line mbCONNECT24 and MB connect line mymbCONNECT24 are both products of the German company MB connect line. mb connect line mbCONNECT24 is a set of remote service portals. The product supports remote access, data logging and alarms. MB connect line mymbCONNECT24 is an in-house remote...

DEBIAN-CVE-2023-33968

Kanboard is open source project management software that focuses on the Kanban methodology. Versions prior to 1.2.30 are subject to a missing access control vulnerability that allows a user with low privileges to create or transfer tasks to any project within the software, even if they have not...