Huawei AIS-BW50-00 安全漏洞

The Huawei AIS-BW50-00 is a portable Bluetooth speaker from Huawei, a Chinese company. The Huawei AIS-BW50-00 suffers from an authorization issue vulnerability that stems from improper authorization management and can be exploited by an attacker with physical access to the device and malicious...

ZOHO ManageEngine ADSelfService Plus Authorization Issues Vulnerability

ZOHO ManageEngine ADSelfService Plus is ZOHO's integrated self-service password management and single sign-on solution for Active Directory and cloud applications. An authorization issue vulnerability exists in Zoho ManageEngine ADSelfService Plus version 6113 and earlier versions, which can be...

Google Android 授权问题漏洞

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA. a security vulnerability exists in the Framework component of Google Android. A remote attacker can exploit this vulnerability to cause a denial of service...

ZOHO ManageEngine ADSelfService Plus 授权问题漏洞

ZOHO ManageEngine ADSelfService Plus is ZOHO's integrated self-service password management and single sign-on solution for Active Directory and cloud applications. An authorization issue vulnerability exists in Zoho ManageEngine ADSelfService Plus version 6113 and earlier versions, which can be...

ZOHO ManageEngine ServiceDesk Plus Licensing Issue Vulnerability

ZOHO ManageEngine ServiceDesk Plus SDP is a set of ITIL-based IT service management software from ZOHO. The software integrates incident management, issue management, asset management IT project management, procurement and contract management, etc. An authorization issue vulnerability exists in...

PT-2021-6805 · Xen +1 · Xen +1

Name of the Vulnerable Software and Affected Versions: Xen affected versions not specified Description: The issue is related to improper authorization in the Xen hypervisor. Exploitation of this issue allows an attacker to access sensitive data, compromise its integrity, and cause a denial of...

VMware vRealize Operations 授权问题漏洞

vmware VMware vRealize Operations is an application from vmware, Inc. A unified, AI-based platform for private, hybrid and multi-cloud environments that delivers IT operations management on autopilot. An authorization issue vulnerability exists in VMware vRealize Operations that stems from the...

ForgeRock Access Management 授权问题漏洞

ForgeRock Access Management is a comprehensive, unified solution from ForgeRock USA designed to quickly enable a superior experience tailored to the unique needs of users and employees. versions, an authorization issue vulnerability exists that stems from an authentication bypass issue when...

CVE-2021-30874

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. A VPN configuration may be installed by an app without user permission...

Authorization

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. A VPN configuration may be installed by an app without user permission...

CVE-2021-30874

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. A VPN configuration may be installed by an app without user permission...

CVE-2021-30874

CVE-2021-30874 affects Apple iOS/iPadOS 15 where an authorization issue in NetworkExtension could allow a VPN configuration to be installed by an app without user permission. Root cause cited as improved state management; fix implemented in iOS 15 / iPadOS 15. Implication: local apps may cause VP...

CVE-2021-30874

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. A VPN configuration may be installed by an app without user permission...

PT-2021-18932 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15 iPadOS versions prior to 15 Description: An authorization issue was addressed with improved state management, allowing a VPN configuration to be installed by an app without user permission. Recommendations: For iOS...

JetBrains Hub Licensing Issue Vulnerability (CNVD-2022-09225)

JetBrains Hub is a web-based application from JetBrains Czech Republic. The application is able to integrate multiple JetBrains team tools together. An authorization issue vulnerability exists in versions prior to JetBrains Hub 2021.1.13402, which stems from the fact that it is possible for the...

PT-2021-6484 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 13.12 and later Description: The issue is related to improper authorization on the pipelines page, allowing unauthorized users to view some pipeline information for public projects that have access to pipelines restricte...

Parse Server 授权问题漏洞

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. An authorization issue vulnerability exists in versions of Parse Server prior to 4.5.1 that stems from the server incorrectly creating a session when an anonymous user registers with REST for t...

Cisco Secure Email 授权问题漏洞

Cisco Secure Email is Cisco's Cisco Secure Email formerly Email Security provides optimal protection for your email from cyber threats. An authorization issue vulnerability exists in Cisco Secure Email and Web Manager, which can be exploited by an attacker who can send malicious requests to an...

Advantech WebAccess/NMS Authorization Issue Vulnerability

Advantech WebAccess/NMS is a Web browser-based network management system NMS software package from Advantech, Taiwan, China.Advantech WebAccess/NMS is vulnerable to an authorization issue in versions prior to v3.0.3Build6299, which stems from the fact that the affected product has incorrect...

Mitel Networks MiCollab Licensing Issue Vulnerability

An authorization issue vulnerability exists in Mitel Networks MiCollab, a mobile application from Mitel Networks Canada that provides voice, video, messaging, audio conferencing, and team collaboration for employees, and stems from the product's MiCollab Client Service component does not validate...