2580 matches found
KubeOperator 授权问题漏洞
KubeOperator is an open source, lightweight Kubernetes distribution focused on helping organizations plan, deploy, and operate production-grade K8s clusters. An authorization issue vulnerability exists in KubeOperator versions prior to 3.16.4, which stems from the API interacting with an...
CVE-2023-22489 Flarum is missing authorization in discussion replies
Flarum is a discussion platform for websites. If the first post of a discussion is permanently deleted but the discussion stays visible, any actor who can view the discussion is able to create a new reply via the REST API, no matter the reply permission or lock status. This includes users that...
Apache James licensing issue vulnerability
Apache James is an open source Smtp and Pop3 mail transfer agent and Nntp news server written entirely in Java from the Apache Foundation in the U.S. An authorization issue vulnerability exists in Apache James, which stems from a vulnerability in the MIME4J TempFileStorageProvider using improperl...
KubePi 授权问题漏洞
KubePi is a K8s panel. It allows administrators to import multiple Kubernetes clusters and assign permissions for different clusters, namespaces to specified users through permission control. An authorization issue vulnerability exists in KubePi 1.6.3 and earlier versions, which stems from a...
PT-2023-14888 · Github · Github Enterprise Server
Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions prior to 3.7 GitHub Enterprise Server versions 3.3 through 3.3.15 GitHub Enterprise Server versions 3.4 through 3.4.10 GitHub Enterprise Server versions 3.5 through 3.5.7 GitHub Enterprise Server versions 3.6...
CollabCal 授权问题漏洞
CollabCal is a CSE 461 project by Nick Holden Individual Developer. CollabCal has an authorization issue vulnerability that stems from incorrect authentication...
xingwall 授权问题漏洞
xingwall is an application by Karsten Silkenbäumer, an individual developer, about member login. An authorization issue vulnerability exists in xingwall. An attacker exploited the vulnerability to cause session repair...
Apache James 信息泄露漏洞
Apache James is an open source Smtp and Pop3 mail transfer agent and Nntp news server written entirely in Java from the Apache Foundation in the U.S. An authorization issue vulnerability exists in Apache James, which stems from a vulnerability in the MIME4J TempFileStorageProvider using improperl...
PT-2022-28153 · Froxlor · Froxlor
Name of the Vulnerable Software and Affected Versions: froxlor versions prior to 2.0.0-beta1 Description: The issue is related to improper authorization in the GitHub repository froxlor/froxlor. Recommendations: For versions prior to 2.0.0-beta1, update to version 2.0.0-beta1 or later to resolve...
Alpine 授权问题漏洞
Alpine is an email program. An authorization issue vulnerability exists in versions of Alpine prior to 1.10.4 that stems from allowing authentication filters to be bypassed...
memos 授权问题漏洞
memos is an open source hosted memo center with knowledge management and social features. An authorization issue vulnerability exists in versions of memos prior to 0.9.0 that stems from incorrect authentication...
CodeIgniter 授权问题漏洞
CodeIgniter is an open source web framework written in PHP. An authorization issue vulnerability exists in CodeIgniter versions prior to 4.2.11, which stems from an attacker obtaining a session cookie when the application uses multiple session cookies, and the session handler is set to...
CVE-2022-43872
CVE-2022-43872 affects IBM Financial Transaction Manager for SWIFT Services 3.2.4. Affected component: authorization checks on certain HTTP requests, enabling access to unauthorized technical information (e.g., event log entries) about the FTM SWIFT system. Public references in the IBM bulletin n...
NETGEAR Nighthawk WiFi6 Router Authorization Issues Vulnerability
The NETGEAR Nighthawk WiFi6 Router is a series of routers that support WiFi 6 technology and are designed for users who are looking for a high-speed Internet experience. The NETGEAR Nighthawk WiFi6 Router suffers from an authorization issue vulnerability that stems from having four user default...
CVE-2022-41962
BigBlueButton contains a vulnerability (CVE-2022-41962) described as Incorrect Authorization for setting emoji status. A user with moderator rights can use the clear status feature to set any emoji status for other users, whereas moderators should only be able to set none. Affected versions are p...
NETGEAR Nighthawk 授权问题漏洞
The NETGEAR Nighthawk WiFi6 Router is a series of routers that support WiFi 6 technology and are designed for users who are looking for a high-speed Internet experience. The NETGEAR Nighthawk WiFi6 Router suffers from an authorization issue vulnerability that stems from having four user default...
BigBlueButton 安全漏洞
BigBlueButton is an open source web conferencing system from the BigBlueButton community. A security vulnerability exists in BigBlueButton versions prior to 2.4-rc-6 and 2.5-alpha-1, which stems from an incorrect authorization containing the setting of emoji statuses, and can be exploited by an...
PT-2022-24588 · WordPress · Block Bad Bots/Stop Bad Bots Crawlers/Spiders/Anti Spam Protection
Name of the Vulnerable Software and Affected Versions: The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection WordPress plugin versions prior to 7.24 Description: The issue is related to a lack of proper authorization and CSRF protection in an AJAX action. This allows...
AMI MegaRAC 授权问题漏洞
AMI MegaRAC is a family of service processor products from AMI. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. AMI MegaRAC has an authorization issue...
