SolarWinds Platform 授权问题漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. SolarWinds Platform suffers from an authorization issue vulnerability that stems from an access control bypass issue. A low-privilege attacker could exploit this...

PYSEC-2023-130

Sentry is an error tracking and performance monitoring platform. Starting in version 8.21.0 and prior to version 23.5.2, an authenticated user can download a debug or artifact bundle from arbitrary organizations and projects with a known bundle ID. The user does not need to be a member of the...

Information Disclosure

gitlab is vulnerable to Information Disclosure. An improper authorization issue allows Guest project members to access trace log of jobs when it is enabled, resulting in disclosure of sensitive information...

PT-2023-23816 · Dell · Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Wyse Management Suite versions prior to 4.0 Description: The issue is related to improper authorization, allowing an authenticated malicious user with privileged access to push policies to unauthorized tenant groups. Recommendations: For Wyse...

GeoVision GV-ADR2701 授权问题漏洞

Geovision GeoVision GV-ADR2701 is an outdoor fixed network camera from Geovision, a Chinese company. An authorization issue vulnerability exists in GeoVision GV-ADR2701 version V1.0020171215, which stems from the presence of improper authentication issues that allow an attacker to log in to the...

Intergard SGS 授权问题漏洞

Intergard SGS is a security appliance from Brazilian company Intergard. An authorization issue vulnerability exists in Intergard SGS version 8.7.0, which stems from the presence of unknown functionality in the application, resulting in a privilege issue...

OpenSSL 授权问题漏洞

OpenSSL is an open source capable general-purpose cryptographic library from the OpenSSL team that implements the Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. It supports a variety of cryptographic algorithms, including symmetric ciphers, hashing algorithms, secure...

PT-2023-22686 · Apache · Apache Pulsar

Name of the Vulnerable Software and Affected Versions: Apache Pulsar versions prior to 2.10.4 Apache Pulsar version 2.11.0 Description: The issue affects Apache Pulsar when a client connects to the Pulsar Function Worker via the Pulsar Proxy, which uses mTLS authentication. The Pulsar Function...

Ovarro TBox RTUs 授权问题漏洞

Ovarro TBox RTUs is a modular remote monitoring and automation solution from Ovarro Germany. An authorization issue vulnerability exists in Ovarro TBox RTUs that stems from allowing a low-privileged user to access higher-privileged software security tokens, potentially allowing an attacker to...

Sealos 授权问题漏洞

Sealos is a cloud operating system designed for managing cloud-native applications. An authorization issue vulnerability exists in Sealos versions prior to 4.2.0, which stems from a misconfiguration of Role-Based Access Control RBAC permissions, allowing an attacker to gain access to cluster...

CVE-2023-32357

An authorization issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to retain access to system configuration files even after its permissio...

CVE-2023-32357

An authorization issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to retain access to system configuration files even after its permissio...

CVE-2023-32357

An authorization issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to retain access to system configuration files even after its permissio...

Authorization

An authorization issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to retain access to system configuration files even after its permissio...

CVE-2023-32357

An authorization issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to retain access to system configuration files even after its permissio...

fossbilling 授权问题漏洞

fossbilling is a free open source solution for efficient billing and customer management. An authorization issue vulnerability exists in versions prior to fossbilling 0.5.1 that stems from the presence of session fixing...

Dell BIOS 授权问题漏洞

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA. Dell BIOS has an authorization issue vulnerability that stems from incorrect authentication. An attacker could exploit the vulnerability to elevate system privileges...

Knowage 授权问题漏洞

Knowage is an open source suite for modern business analytics on legacy resources and big data systems from Knowage Italy. An authorization issue vulnerability exists in Knowage versions prior to 6.0.0 to 8.1.8, which stems from an account authentication bypass issue...

CVE-2023-32357

CVE-2023-32357 is an authorization issue affecting Apple platforms. The root cause is improved state management that prevents proper revocation of access, allowing an app to retain access to system configuration files after permissions are revoked. Affected products include watchOS, tvOS, and var...

Tauri 授权问题漏洞

Tauri is a Tauri open source for building smaller, faster, and more secure desktop applications using a web front end. Tauri version 1.4.0 has an authorization issue vulnerability that stems from a regression that includes a file system range check on Unix uppoint files...