1939 matches found
Authorization Bypass
gitlab is vulnerable to Authorization Bypasses. This vulnerability occurs when a user sends a request to update their email address using an unverified email address. If the request is valid, GitLab could be tricked into updating the user's email address to the unverified email address. This coul...
CVE-2023-36139
In PHPJabbers Cleaning Business Software 1.0, lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts...
CVE-2023-36139
In PHPJabbers Cleaning Business Software 1.0, lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts...
CVE-2023-36134
In PHP Jabbers Class Scheduling System 1.0, lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts...
CVE-2023-33563
In PHP Jabbers Time Slots Booking Calendar 3.3 , lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts...
CVE-2023-33563
In PHP Jabbers Time Slots Booking Calendar 3.3 , lack of verification when changing an email address and/or password on the Profile Page allows remote attackers to take over accounts...
The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to be loaded in GRUB2 breaking the secure boot trust-chain.
...
AZL-27551 CVE-2022-28735 affecting package grub2 for versions less than 2.06-12
The GRUB2's shimlock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to be loaded in GRUB2 breaking the secure boot trust-chain...
CVE-2022-28735
The GRUB2's shimlock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to be loaded in GRUB2 breaking the secure boot trust-chain...
UBUNTU-CVE-2022-28735
The GRUB2's shimlock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to be loaded in GRUB2 breaking the secure boot trust-chain...
CVE-2022-28735
The GRUB2's shimlock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to be loaded in GRUB2 breaking the secure boot trust-chain...
OpenAM 授权问题漏洞
OpenAM is an all-in-one access management solution organized by the OpenAM Consortium. It provides authentication, authorization, delegation and federation capabilities. An authorization issue vulnerability exists in Open Access Management OpenAM versions 14.7.2 and earlier, which stems from an...
CasaOS 访问控制错误漏洞
CasaOS is a simple, easy-to-use and elegant open source home cloud system. An Access Control Error vulnerability exists in CasaOS versions prior to 0.4.4 that stems from a lack of authenticated IP addresses. An attacker can exploit the vulnerability to execute arbitrary commands as root...
PT-2023-25172 · Knowage · Knowage
Name of the Vulnerable Software and Affected Versions: Knowage versions 6.0.0 through 8.1.7 Description: The issue allows an attacker to register and activate their account without having to click on the link included in the email, giving them access to the application as a normal user...
Critical 'nOAuth' Flaw in Microsoft Azure AD Enabled Complete Account Takeover
A security shortcoming in Microsoft Azure Active Directory AD Open Authorization OAuth process could have been exploited to achieve full account takeover, researchers said. California-based identity and access management service Descope, which discovered and reported the issue in April 2023, dubb...
PT-2023-9377 · Duktape +4 · Duktape +4
Name of the Vulnerable Software and Affected Versions: Zabbix versions affected versions not specified Duktape version 2.6 Description: The issue is related to an unverified array indexing in the Duktape component of the Zabbix monitoring system. This can lead to a denial of service when exploite...
TMT Lockcell 安全漏洞
TMT Lockcell is an application from TMT Corporation. A security vulnerability exists in versions prior to TMT Lockcell 15 that stems from a reliance on unverified and integrity-checked cookies in a security decision vulnerability, which can be exploited by an attacker to abuse privileges and bypa...
PT-2023-6793 · Unknown +2 · Openimageio +2
Name of the Vulnerable Software and Affected Versions: OpenImageIO versions 2.4.12.0 and before Description: The issue is related to a buffer overflow vulnerability in the readimg function of the OpenImageIO library, which occurs due to unverified input data. This can allow an attacker to access...