Telegram Authorization Issues Vulnerabilities

Telegram is an instant messaging mobile application. An authorization issue vulnerability exists in versions 5.12 and earlier of Telegram, based on the Android platform, which can be exploited by attackers to bypass message read and reply restrictions...

Samsung Mobile Device Authorization Issue Vulnerability (CNVD-2020-34738)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An authorization issue vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to use blocked applications without a password...

Samsung Mobile Device Authorization Issue Vulnerability (CNVD-2020-33781)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An authorization issue vulnerability exists in Samsung mobile devices, which can be exploited by attackers to access quick panels and notifications...

Tellabs Optical Line Terminal Authorization Issue Vulnerability

Tellabs Optical Line Terminal OLI is an optical line terminal product from Tellabs, Inc. An authorization issue vulnerability exists in Tellabs OLT 1150 FP version 29.2015873, which can be exploited by an attacker to execute commands...

Huawei Mate 20 and Mate 30 Pro License Issue Vulnerability

The Huawei Mate 20 and Mate 30 Pro are both smartphones from the Chinese company Huawei Huawei. An authorization issue vulnerability exists in Huawei Mate 20 before 10.0.0.188 C00E74R3P8 and Mate 30 Pro before 10.0.0.203 C00E202R7P2, which stems from the system's failure to properly authorize...

360 P0 and F5C Licensing Issues Vulnerabilities

The Qihoo 360 P0 and 360 F5C are both wireless routers from the Chinese company Qihoo Technologies. An authorization issue vulnerability exists in the interfaces of the 360 P0 and F5C, which can be exploited by an attacker to obtain some of the user's information, cause the user to be unable to u...

Halvotec Information Services RAQuest Authorization Issues Vulnerability

Halvotec Information Services RAQuest is a suite of automated tax withholding software from Halvotec Information Services, Germany. An authorization issue vulnerability exists in Halvotec Information Services RAQuest version 10.23.10801.0. The vulnerability stems from a lack of authentication...

Voo branded NETGEAR CG3700b Authorization Issues Vulnerability

The NETGEAR CG3700b is a cable modem and router from NETGEAR. An authorization issue vulnerability exists in the Voo branded NETGEAR CG3700b that stems from the use of the same default 8-character passphrase for the management console and WPA2 pre-shared key, which can be exploited by an attacker...

wagtail-2fa authorization issue vulnerability

wagtail-2fa is a two-factor authentication software package. An authorization issue vulnerability exists in versions prior to wagtail-2fa 1.4.1, which stems from the program's failure to request specific permissions for the view and delete functions of another user's 2FA device, which can be...

CVE-2018-13063

Technical details about CVE-2018-13063 are not provided in the connected documents; only the basic description is present. Monitor for updates and additional disclosures to assess affected components, impact, and remediation.

CVE-2019-13001

An issue was discovered in GitLab Community and Enterprise Edition 11.9 and later through 12.0.2. GitLab Snippets were vulnerable to an authorization issue that allowed unauthorized users to add comments to a private snippet. It allows authentication bypass...

CVE-2019-13001

An issue was discovered in GitLab Community and Enterprise Edition 11.9 and later through 12.0.2. GitLab Snippets were vulnerable to an authorization issue that allowed unauthorized users to add comments to a private snippet. It allows authentication bypass...

CVE-2019-13005

An issue was discovered in GitLab Enterprise Edition and Community Edition 1.10 through 12.0.2. The GitLab graphql service was vulnerable to multiple authorization issues that disclosed restricted user, group, and repository metadata to unauthorized users. It has Incorrect Access Control...

CVE-2019-13005

An issue was discovered in GitLab Enterprise Edition and Community Edition 1.10 through 12.0.2. The GitLab graphql service was vulnerable to multiple authorization issues that disclosed restricted user, group, and repository metadata to unauthorized users. It has Incorrect Access Control...

CVE-2019-13001

An issue was discovered in GitLab Community and Enterprise Edition 11.9 and later through 12.0.2. GitLab Snippets were vulnerable to an authorization issue that allowed unauthorized users to add comments to a private snippet. It allows authentication bypass...

CVE-2019-13005

The CVE-2019-13005 issue affects GitLab Enterprise Edition and Community Edition 1.10–12.0.2. The GitLab GraphQL service contained Authorization issues (Incorrect Access Control) that disclosed restricted user, group, and repository metadata to unauthorized users. Impact is metadata exposure with...

CVE-2019-13001

An issue was discovered in GitLab Community and Enterprise Edition 11.9 and later through 12.0.2. GitLab Snippets were vulnerable to an authorization issue that allowed unauthorized users to add comments to a private snippet. It allows authentication bypass...

SAP Host Agent Authorization Issues Vulnerability

SAP Host Agent is a Miscellaneous Shareware software developed by ISAP AG. SAP Host Agent suffers from an authorization issue vulnerability that stems from a lack of authorization checks. An attacker could exploit this vulnerability to obtain sensitive information...

CVE-2019-20474

An issue was discovered in Zoho ManageEngine Remote Access Plus 10.0.447. The service to test the mail-server configuration suffers from an authorization issue allowing a user with the Guest role read-only access to use and abuse it. One of the abuses allows performing network and port scan...

Authorization

An issue was discovered in Zoho ManageEngine Remote Access Plus 10.0.447. The service to test the mail-server configuration suffers from an authorization issue allowing a user with the Guest role read-only access to use and abuse it. One of the abuses allows performing network and port scan...