2579 matches found
GitLab 10.6 < 12.9.10 / 12.10 < 12.10.11 / 13.0 < 13.0.6 (CVE-2020-13277)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An authorization issue in the mirroring logic allowed read access to private repositories in GitLab CE/EE 10.6 and later through 13.0.5 CVE-2020-13277 Note that Nessus has not tested for this issue bu...
PT-2024-3855 · Cisco · Cisco Crosswork Network Services Orchestrator
Name of the Vulnerable Software and Affected Versions: ConfD versions affected versions not specified Cisco Crosswork Network Services Orchestrator versions affected versions not specified Description: A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI coul...
CVE-2024-4562
CVE-2024-4562 affects Progress WhatsUp Gold versions prior to 2023.1.2. A Server-Side Request Forgery exists in the HTTP Monitoring functionality due to insufficient authorization, allowing an authenticated user to trigger SSRF. Related advisories/XDR reports (ZDI-24-516, Nessus plugin 198215) co...
CVE-2024-27798
An authorization issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An attacker may be able to elevate privileges...
CVE-2024-27798
An authorization issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.5. An attacker may be able to elevate privileges...
CVE-2024-33000 Missing Authorization check in SAP Bank Account Management
SAP Bank Account Management does not perform necessary authorization check for an authorized user, resulting in escalation of privileges. As a result, it has a low impact to confidentiality to the system...
SAP Bank Account Management 安全漏洞
SAP Bank Account Management is a bank account management system from SAP. An authorization issue vulnerability exists in SAP Bank Account Management, which stems from a failure to perform required authorization checks on authorized users and can be exploited by an attacker to cause privilege...
WordPress plugin Sliding Widgets 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
Laundry Management System 授权问题漏洞
Laundry Management System is a laundry management system. An authorization issue vulnerability exists in Online Laundry Management System version 1.0, which stems from an improper authorization vulnerability in the adminclass.php file...
CVE-2024-27798
An authorization issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An attacker may be able to elevate privileges...
CVE-2024-27798
An authorization issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An attacker may be able to elevate privileges...
CVE-2024-27798
CVE-2024-27798 is a local-privilege-escalation vulnerability in macOS caused by an authorization issue in state management. Apple fixes it in macOS Sonoma 14.5 with an updated state-management approach. The NVD and Red Hat advisories validate the fix and targeted platform (macOS Sonoma 14.5). Exp...
PT-2024-22040 · Apple · Macos Sonoma +1
Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.5 Description: An authorization issue was addressed with improved state management, which may allow an attacker to elevate privileges. Recommendations: For macOS Sonoma versions prior to 14.5, update to versi...
PT-2024-24848 · Unknown · Apppresser
Name of the Vulnerable Software and Affected Versions: AppPresser versions through 4.3.0 Description: The issue is related to missing authorization, which poses a high risk. It is recommended to check for signs of exploitation. Recommendations: For versions through 4.3.0, patch immediately to...
CVE-2024-33937
CVE-2024-33937 describes a Missing Authorization vulnerability in the Progressive WordPress (PWA) plugin. Connected Red Hat advisory confirms this issue affects Progressive WordPress (PWA) versions up to 2.1.13 and does not provide explicit patch details in the documents. The available informatio...
WordPress plugin BookingPress 授权问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL.WordPress plugin is an application plugin. The WordPress...
WordPress plugin BuddyBoss 授权问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization...
Lunary Authorization Issues Vulnerability
Lunary is lunary open source a production toolkit for LLM . An authorization issue vulnerability exists in lunary version 1.0.1 that stems from allowing deleted members to read, create, modify, and delete prompt templates using an old authorization token. An attacker can exploit this vulnerabilit...
SSSD Authorization Issues Vulnerability
SSSD is a daemon that provides access to local or remote identity and authentication resources. SSSD suffers from an authorization issue vulnerability that stems from the presence of a contention condition in sssd that results in incorrect authorization when a GPO policy is not applied to an...