Cybozu Garoon License Issue Vulnerability

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An authorization issue vulnerability exists in Cybozu Garoon versions 4.0.0 to 4.10.3. A remote attacker can...

Red Hat Satellite Job Invocation Authorization Issue Vulnerability

Red Hat Satellite is a system management platform from Red Hat, Inc. that extends the Linux infrastructure and provides system management capabilities such as administration, configuration, and monitoring. Red Hat Satellite is a system management platform from Red Hat, Inc. that extends the Linux...

MinIO Authorization Issues Vulnerability

MinIO is an open source object storage server from US-based MinIO. The product supports building infrastructures for machine learning, analytics and application data workloads. An authorization issue vulnerability exists in the MinIO admin API in versions prior to MinIO...

NETGEAR R6300, PLW1000 and PLW1010 Authorization Issues Vulnerability

NETGEAR R6300 and others are products of NETGEAR Corporation.NETGEAR R6300 is a wireless router.NETGEAR PLW1000 is a power line communication modem.NETGEAR PLW1010 is a power line communication modem.NETGEAR R6300 is a wireless router.NETGEAR R6300 is a wireless router.NETGEAR PLW1010 is a wirele...

Pion DTLS Authorization Issues Vulnerability

Pion DTLS is a Go-based implementation of DTLS Packet Transport Layer Security Protocol. An authorization issue vulnerability exists in Pion DTLS versions prior to 1.5.2. A remote attacker can exploit this vulnerability to inject arbitrary unencrypted data after the handshake completes...

DAViCal Andrew's Web Libraries Authorization Issues Vulnerability (CNVD-2020-25813)

DAViCal Andrew's Web Libraries AWL is an AWL project that focuses on providing some shared PHP libraries for DAViCal, a calendar sharing server. An authorization issue vulnerability exists in DAViCal AWL version 0.60 and earlier, which stems from a failure of the session management mechanism to u...

WordPress Responsive Poll Authorization Issues Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Responsive Poll is a responsive poll plugin used in it. An authorization issue vulnerability exists in Wordpress Responsive Poll 1.3.4...

Samsung Mobile Device Authorization Issue Vulnerability (CNVD-2020-31814)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have an authorization issue vulnerability that can be exploited by an attacker to bypass the SIM lock function...

Plat'Home EasyBlocks IPv6 Authorization Issues Vulnerability

Plat'Home EasyBlocks IPv6 is an IPv6 address set allocation unit product from Plat'Home Japan. An authorization issue vulnerability exists in Plat'Home EasyBlocks IPv6 version 2.0.1 and earlier Enterprise Edition and version 2.0.1 and earlier. The vulnerability can be exploited by an attacker to...

Samsung Mobile Device Authorization Issue Vulnerability (CNVD-2020-30764)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have an authorization issue vulnerability that can be exploited by attackers to allow authentication bypass...

Argo Authorization Issue Vulnerability (CNVD-2020-27456)

Argo is an open source container native workflow engine. Argo suffers from an authorization issue vulnerability that stems from the program not implementing anti-automation protections. An attacker could use this vulnerability to brute-force break the administrator password...

Elide Authorization Issues Vulnerability

Elide is a self-contained API for web and mobile applications written in Java. An authorization issue vulnerability exists in versions of Elide prior to 4.5.14. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in a networked system or product...

python-apt authorization issue vulnerability

Python is an open source, object-oriented programming language from the Python Software Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. An authorization issue vulnerability exists in python-apt. An attacker can exploit this vulnerability to...

Tribal SITS: Vision Authorization Issue Vulnerability

Tribal SITS: Vision is a higher education student information management system from Tribal UK. An authorization issue vulnerability exists in Tribal SITS: Vision version 9.7.0 that stems from the Uniface TLS Driver not being enabled by default. An attacker can exploit this vulnerability to acces...

Telegram Authorization Issues Vulnerabilities

Telegram is an instant messaging mobile application. An authorization issue vulnerability exists in versions 5.12 and earlier of Telegram, based on the Android platform, which can be exploited by attackers to bypass message read and reply restrictions...

Samsung Mobile Device Authorization Issue Vulnerability (CNVD-2020-34738)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An authorization issue vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to use blocked applications without a password...

Samsung Mobile Device Authorization Issue Vulnerability (CNVD-2020-33781)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An authorization issue vulnerability exists in Samsung mobile devices, which can be exploited by attackers to access quick panels and notifications...

Tellabs Optical Line Terminal Authorization Issue Vulnerability

Tellabs Optical Line Terminal OLI is an optical line terminal product from Tellabs, Inc. An authorization issue vulnerability exists in Tellabs OLT 1150 FP version 29.2015873, which can be exploited by an attacker to execute commands...

Huawei Mate 20 and Mate 30 Pro License Issue Vulnerability

The Huawei Mate 20 and Mate 30 Pro are both smartphones from the Chinese company Huawei Huawei. An authorization issue vulnerability exists in Huawei Mate 20 before 10.0.0.188 C00E74R3P8 and Mate 30 Pro before 10.0.0.203 C00E202R7P2, which stems from the system's failure to properly authorize...

360 P0 and F5C Licensing Issues Vulnerabilities

The Qihoo 360 P0 and 360 F5C are both wireless routers from the Chinese company Qihoo Technologies. An authorization issue vulnerability exists in the interfaces of the 360 P0 and F5C, which can be exploited by an attacker to obtain some of the user's information, cause the user to be unable to u...