Authorization

There is an missing authorization issue in the system service. Since the component does not have permission check , resulting in Local Elevation of privilege.Product: AndroidVersions: Android SoCAndroid ID: A-242244028...

Default credentials

Affected devices do not properly authorize the change password function of the web interface. This could allow low privileged users to escalate their privileges...

IBM Robotic Process Automation Licensing Issue Vulnerability (CNVD-2022-77518)

IBM Robotic Process Automation is a robotic process automation product from International Business Machines IBM, Inc. It helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. IBM Robotic Process Automation is vulnerable to an authorization issue th...

CVE-2022-20434

CVE-2022-20434 is a local Elevation of Privilege in Android related to a missing authorization check in a system service. The vulnerability is associated with UNISOC components listed in the Android 2022-10-01/10-05 patch cycles (as shown in the Android bulletin mappings), affecting Android Telep...

ASB-A-242244028

There is an missing authorization issue in the system service. Since the component does not have permission check , resulting in Local Elevation of privilege...

ASB-A-242221899

There is an missing authorization issue in the system service. Since the component does not have permission check and permission protection,, resulting in Local Elevation of privilege...

NextAuth.js 授权问题漏洞

NextAuth.js is an authentication for Next.js. NextAuth.js version v3.0.2 is vulnerable to authorization issues, which can be exploited by attackers to perform unauthorized actions...

ZTE ZXvSTB License Issue Vulnerability

ZTE ZXvSTB is a cloud-enabled set-top box from China's ZTE. The ZTE ZXvSTB suffers from an authorization issue vulnerability that stems from improper privilege control, which can be exploited by an attacker to remove the default application type and affect the normal use of the system...

PT-2022-20598 · WordPress · Oauth Client Single Sign On

Name of the Vulnerable Software and Affected Versions: OAuth client Single Sign On WordPress plugin versions prior to 3.0.4 Description: The issue concerns a lack of authorization and CSRF protection when updating settings in the OAuth client Single Sign On WordPress plugin. This could allow...

CVE-2022-32826

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to gain root privileges...

CVE-2022-32826

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to gain root privileges...

CVE-2022-32826

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to gain root privileges...

CVE-2022-32826

CVE-2022-32826 is a local authorization issue in Apple OS components. The description: an app may gain root privileges due to improved state management. Affected products/versions include iOS 15.6, iPadOS 15.6, macOS Big Sur 11.6.8, macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, and Security Update...

CVE-2022-32826

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to gain root privileges...

Arvados 授权问题漏洞

Arvados is an open source platform for managing and analyzing biomedical big data. An authorization issue vulnerability exists in Arvados version 2.4.2 and prior versions, which stems from the fact that when a user is authenticated using the Portable Authentication Module PAM, Arvados can still b...

Rocket.Chat 信息泄露漏洞

Rocket.Chat is an open source team chat software. A vulnerability exists in Rocket.Chat prior to version 5.0 due to an authorization issue, which stems from a leak in the getUserMentionsByChannel meteor server method that can be exploited by an attacker to obtain sensitive information...

Snipe-IT 授权问题漏洞

Snipe-IT is an open source IT asset/license management system. An authorization issue vulnerability exists in Snipe-IT versions prior to 6.0.10 that stems from incorrect authentication...

HotelDruid 授权问题漏洞

HotelDruid is a hotel management system by the Digitaldruid.net team. The system includes features such as room management, financial management and inventory management. HotelDruid Hotel Management Software version v3.0.3 suffers from an authorization issue vulnerability that stems from the...

Theonedev Onedev 授权问题漏洞

Theonedev Onedev is a JAVA-based all-in-one DevOps platform from the Theonedev team. The platform supports container build, orchestration, CI, Git management, team collaboration and other features to help developers build a simple, powerful development platform. Theonedev An authorization issue...

PT-2022-23621 · Pal Electronics Systems · Palgate

Name of the Vulnerable Software and Affected Versions: Pal Electronics Systems affected versions not specified Description: The issue is an authorization problem in the PalGate device management Android client app, affecting gates of buildings and parking lots controlled by a simple button in any...