Nextcloud Talk Authorization Issues Vulnerability (CNVD-2021-44989)

Nextcloud Talk is a self-hosted local audio/video and chat communication service from Nextcloud Germany. An authorization issue vulnerability exists in Nextcloud Talk that stems from unchanged cookie session data after changing authentication information in Talk. No details of the vulnerability a...

Cisco Small Business 220 Series Smart Switches 授权问题漏洞

The Cisco Small Business 220 Series Smart Switches is a small smart switch device from Cisco. An authorization issue vulnerability exists in the Cisco Small Business 220 Series Smart Switches that stems from a lack of parameter validation of TFTP configuration parameters. Exploitation of this...

Nextcloud Talk 授权问题漏洞

Nextcloud Talk is a self-hosted local audio/video and chat communication service from Nextcloud Germany. An authorization issue vulnerability exists in Nextcloud Talk that stems from unchanged cookie session data after changing authentication information in Talk. No details of the vulnerability a...

SAP NetWeaver AS ABAP and ABAP Platform Authorization Issues Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An authorization issue vulnerability exists in SAP NetWeaver AS ABAP and ABAP Platform, which arises from the...

sensepost gowitness 授权问题漏洞

gowitness is a website screenshot utility program written in Golang. An authorization issue vulnerability exists in sensepost gowitness that stems from a lack of authentication measures in gowitness. Exploitation of this vulnerability allows an unauthenticated attacker to perform arbitrary file...

SilverStripe 授权问题漏洞

SilverStripe is New Zealand SilverStripe Silverstripe company's set of open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . SilverStripe has an authorization issue vulnerability that stems from...

OpenVPN 授权问题漏洞

Openvpn OpenVPN is a software package for creating virtual private network VPN encrypted channels from the US-based OpenVPN Openvpn, which uses the OpenSSL library to encrypt data and control information and allows the created VPN to be authenticated using a public key, an electronic certificate,...

IBM Engineering Test Management Authorization Issues Vulnerability

IBM Engineering Test Management is a collaborative quality management software from IBM that provides end-to-end test planning and test asset management to improve team efficiency. IBM Engineering Test Management suffers from an authorization issue vulnerability that stems from a lack of security...

Roomer Authorization Issues Vulnerability

Roomer is a discord bot cog extension. It provides automatic voice channel generation as well as private voice and text channels. There is an authorization issue vulnerability in Roomer versions prior to 1.0.1, no detailed vulnerability details are provided at this time...

IBM Cognos Analytics Licensing Issues Vulnerabilities

IBM Cognos Analytics is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. An authorization issue...

Cisco ASR 5000授权问题漏洞

Cisco ASR 5000 is a 5000 Series gateway product from Cisco. An authorization issue vulnerability exists in all versions of the Cisco ASR 5000 Series that allows remote users to gain unauthorized access to the system...

Github authelia authorization issue vulnerability

Github authelia is an application from Github USA. An open source authentication and authorization server that provides 2-factor authentication and single sign-on SSO to applications through a web portal. Authelia versions prior to 4.29.3 have an authorization issue vulnerability that allows a...

多款IBM产品信息泄露漏洞

IBM Engineering Test Management is a collaborative quality management software from IBM that provides end-to-end test planning and test asset management to improve team efficiency. IBM Engineering Test Management suffers from an authorization issue vulnerability that stems from a lack of security...

Kiali 授权问题漏洞

Kiali is an open source, visual management tool for the Istio microservices architecture. Versions of Kiali prior to 1.31.0 suffer from an authorization issue vulnerability that stems from the fact that Kiali assumes that the underlying cluster handles some token validation when RBAC is enabled. ...

Deno 授权问题漏洞

Deno is open source a simple , modern and secure JavaScript and TypeScript runtime environment . It uses V8 and is built with Rust. An authorization issue vulnerability exists in Deno versions 1.5.0 through 1.10.1, which arises from the fact that modules dynamically imported via import or new...

IBM Cognos Analytics 授权问题漏洞

IBM Cognos Analytics is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. An information disclosure...

Vmware vSphere Client Authorization Issues Vulnerability

Vmware vSphere Client is an application from Vmware, Inc. It provides virtualization management. An authorization issue vulnerability exists in Vmware vSphere Client, which can be exploited by an attacker to perform actions allowed by an affected plugin without authentication...

Roomer 授权问题漏洞

Roomer is a discord bot cog extension. It provides automatic voice channel generation as well as private voice and text channels. There is an authorization issue vulnerability in Roomer versions prior to 1.0.1, no detailed vulnerability details are provided at this time...

VMware vSphere Client 访问控制错误漏洞

Vmware vSphere Client is an application from Vmware, Inc. It provides virtualization management. An authorization issue vulnerability exists in Vmware vSphere Client, which can be exploited by an attacker to perform actions allowed by an affected plugin without authentication...

Apple macOS 授权问题漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An authorization issue vulnerability exists in Apple macOS, which can be exploited by a local attacker to bypass the "Logon to Windows" protection screen and gain unauthorized access to the system. The...