Owncloud Authorization Issues Vulnerabilities

OwnCloud OwnCloud is a personal cloud storage solution from OwnCloud Owncloud, an American company. An authorization issue vulnerability exists in OwnCloud, which can be exploited by an attacker to bypass authentication of password-protected images by displaying a preview...

MinIO 授权问题漏洞

MinIO is an open source object storage server from US-based MinIO. The product supports building infrastructures for machine learning, analytics and application data workloads. An authorization issue vulnerability previously existed in the MinIO RELEASE.2021-03-04T00-53-13Z version that allowed...

RATCF 授权问题漏洞

RATCF is an open source framework for hosting Cyber-Security Capture the Flag events. RATCF suffers from an authorization issue vulnerability that originates from the fact that a user with multi-factor authentication enabled can log in without a valid token...

Micro Focus Solutions Business Manager Authorization Issues Vulnerability

Micro Focus Solutions Business Manager SBM, Serena Business Manager is a suite of business process automation management solutions from Micro Focus UK. The product is mainly used for process automation, including software development lifecycle and IT business process management. An authorization...

Rockwell Automation 1734-AENTR 授权问题漏洞

The Rockwell Automation 1734-AENTR is an industrial device from Rockwell Automation, Inc. It provides an industrial control system. The Rockwell Automation 1734-AENTR suffers from an authorization issue vulnerability that arises from an unauthenticated attacker being able to send a crafted reques...

Samsung mobile devices 授权问题漏洞

Samsung mobile devices O and others are products of Samsung, South Korea.Samsung mobile devices O is a series of cell phones.Samsung mobile devices P is a series of mobile hard disk products.Samsung mobile devices is a cell phone Samsung mobile devices is a mobile phone application. A security...

SUSE Linux Enterprise Server 授权问题漏洞

SUSE Linux Enterprise Server is a suite of enterprise server edition Linux operating systems from SUSE Germany. An authorization issue vulnerability exists in SUSE Linux Enterprise Server, which can be exploited by an attacker to execute arbitrary code via salt without specifying valid credential...

Google Chrome 授权问题漏洞

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome Autofill. An attacker can exploit this vulnerability to bypass security restrictions...

SaltStack Salt Authorization Issues Vulnerability

SaltStack Salt is a set of open source tools for managing infrastructure from SaltStack Saltstack. The tool provides configuration management, remote execution, and other features. An authorization issue vulnerability exists in SaltStack Salt versions prior to Salt 3002.5, which stems from the fa...

IBM Spectrum Protect Operations Center Authorization Issues Vulnerability

IBM Spectrum Protect Operations Center is a software from IBM USA that provides visual control for IBM Spectrum Protect environments. An authorization issue vulnerability exists in IBM Spectrum Protect Operations Center that arises from a lack of authentication measures or insufficient...

Dell EMC Avamar Server Authorization Issues Vulnerability

DELL Dell EMC Avamar Server is a suite of fully virtualized backup and recovery software for servers from Dell USA. An authorization issue vulnerability exists in Dell EMC Avamar Server, which arises from a lack of authentication measures or insufficient authentication strength in a networked...

Dell PowerScale OneFS License Issue Vulnerability

Dell Technologies Dell PowerScale OneFS is an operating system from Dell Technologies, USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. An authorization issue vulnerability exists in Dell PowerScale OneFS that stems from ISI PRIV AUTH SSH RBAC privileges for a past...

FiberHome HG6245D devices authorization issue vulnerability

FiberHome HG6245D devices is a router from FiberHome, China. It provides network connectivity. An authorization issue vulnerability exists in the FiberHome HG6245D devices, which can be exploited by an attacker to access a telnet server...

4sight ModernFlow Authorization Issues Vulnerability

4sight ModernFlow is a mobile app from 4sight, Inc. that provides an app to easily manage business processes within an organization. An authorization issue vulnerability exists in ModernFlow. The vulnerability stems from the system not restricting web access to members of the security group as...

Lucee Server Authorization Issues Vulnerability

An authorization issue vulnerability exists in Lucee Server that arises from a lack of authentication measures or insufficient authentication strength in a network system or product...

Dell PowerScale OneFS 授权问题漏洞

Dell Technologies Dell PowerScale OneFS is an operating system from Dell Technologies, USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. An authorization issue vulnerability exists in Dell PowerScale OneFS that stems from ISI PRIV AUTH SSH RBAC privileges for a past...

HPE Web ViewPoint Suite Authorization Issues Vulnerability

An authorization issue vulnerability exists in HPE Web ViewPoint Suite that stems from the product allowing remote unauthorized access...

Zulip Desktop License Issue Vulnerability

Zulip Desktop is a desktop version of the team chat application from Zulip USA. An authorization issue vulnerability exists in versions prior to Zulip Desktop 5.0.0, which stems from allowing an attacker to record from a webcam and microphone because of an unprivileged request processor...

Connor Hicks 1Password SCIM Bridge Authorization Issues Vulnerability

Connor Hicks 1Password SCIM Bridge is a password management system from the Connor Hicks organization in the United States. Provides a cross-domain identity management system SCIM protocol to connect 1Password to your existing identity provider e.g. Azure Active Directory, Okta, OneLogin or...

Epikur License Issues Vulnerability

Epikur is a healthcare mobile application from German company Epikur that provides users with psychotherapy, patient management and other features. An authorization issue vulnerability exists in Epikur versions prior to 20.1.1 that stems from an administrator account accessing the default...