PT-2024-9758 · Mattermost +1 · Mattermost +1

Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.5.x through 9.5.9 Mattermost versions 9.10.x through 9.10.2 Mattermost versions 9.11.x through 9.11.1 Description: The issue is related to the lack of authorization procedure in the Mattermost application, which allows a...

WordPress plugin Mapster WP Maps 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization...

Autolab 授权问题漏洞

Autolab is a course management service open-sourced by Autolab. It supports automatically graded programming assignments. An authorization issue vulnerability exists in Autolab version 3.0.0 that stems from a misconfiguration of the reset password permission...

WordPress plugin MultiVendorX 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...

Umbraco CMS 授权问题漏洞

Umbraco CMS is a content management system from Umbraco, Denmark. An authorization issue vulnerability exists in Umbraco CMS that stems from a server session not being fully terminated during an explicit logout...

PT-2024-7010 · Oracle · Oracle Common Applications Calendar +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.6 through 12.2.13 Description: The issue is related to a vulnerability in the Oracle Common Applications Calendar product, specifically in the Tasks component. This vulnerability can be easily exploited b...

QileCMS 授权问题漏洞

QileCMS is an open source community e-commerce system from QileCMS Open Source. An authorization issue vulnerability exists in QileCMS 1.1.3 and earlier versions, which stems from the sendEmail function in file /qilecms/user/controller/Forget.php can lead to weak password recovery...

Gradio 授权问题漏洞

Gradio, an open source Python library open-sourced by Hugging Face, is a method for demonstrating machine learning models through a friendly web interface. Gradio suffers from an authorization issue vulnerability that stems from the localhostaliases variable containing "null" as a valid source wh...

Adobe Commerce 授权问题漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. An improper authorization vulnerability exists in Adobe Commerce, which can be exploited by an attacker to cause a security feature bypass...

Microsoft Windows Netlogon 授权问题漏洞

Microsoft Windows Netlogon is an important component of Windows from Microsoft Corporation USA, whose main functions are authentication of users and machines on intra-domain networks and replication of databases for domain-controlled backups, as well as maintenance of relationships between domain...

Mattermost Authorization Issues Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an authorization issue vulnerability that stems from a failure to properly authorize a request when the ability to view archived channels is disabled, which could be exploited b...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an authorization issue vulnerability that stems from a failure to properly authorize a request when the ability to view archived channels is disabled, which could be exploited b...

Cisco Expressway Edge Authorization Issues Vulnerability

Cisco Expressway Edge Cisco Expressway-E is a secure access application from Cisco USA. Cisco Expressway Edge suffers from an authorization issue vulnerability that stems from insufficient authorization checks for mobile and remote access users, which can be exploited by an authenticated remote...

Online Eyewear Shop 授权问题漏洞

Online Eyewear Shop is an online eyewear store by the individual developer Carlo Montero. An authorization issue vulnerability exists in Online Eyewear Shop version 1.0 that stems from improper authorization...

PT-2025-2092 · Drupal · Drupal Cms +1

Name of the Vulnerable Software and Affected Versions: Drupal Smart IP Ban versions 7.X-1.0 through 7.X-1.0 Description: The issue is related to insufficient authorization mechanisms in the Smart IP Ban module for the Drupal CMS, allowing a remote attacker to view and modify settings. This can le...

Rockwell Automation Pavilion8 License Issue Vulnerability (CNVD-2024-40835)

Rockwell Automation Pavilion8 is a model prediction console from Rockwell Automation. Rockwell Automation Pavilion8 suffers from an authorization issue vulnerability that stems from an incorrect privilege matrix, which can be exploited by an attacker to access unauthorized functionality...

AutomationDirect DirectLogic H2-DM1E 授权问题漏洞

AutomationDirect DirectLogic H2-DM1E is a programmable logic controller from AutomationDirect. An authorization issue vulnerability exists in AutomationDirect DirectLogic H2-DM1E that stems from insecure authentication...

Dell InsightIQ Authorization Issues Vulnerability

Dell InsightIQ is a performance monitoring and reporting tool from Dell USA. Dell InsightIQ suffers from an authorization issue vulnerability that stems from improper privilege management. A highly privileged attacker with local access rights could exploit this vulnerability to cause a denial of...

CVE-2024-7727 HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.32 - Missing Authorization in multiple functions via h5vp_ajax_handler

The HTML5 Video Player – mp4 Video Player Plugin and Block plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions called via the 'h5vpajaxhandler' ajax action in all versions up to, and including, 2.5.32. This makes it possible fo...

Bareos 授权问题漏洞

Bareos is a suite of open source data backup storage and recovery software from Bareos, Germany. An authorization issue vulnerability exists in Bareos that stems from an ACL check not applying to the full form when executing commands in bconsole...