FiberHome HG6245D devices authorization issue vulnerability

FiberHome HG6245D devices is a router from FiberHome, China. It provides network connectivity. An authorization issue vulnerability exists in the FiberHome HG6245D devices, which can be exploited by an attacker to access a telnet server...

Dell PowerScale OneFS License Issue Vulnerability

Dell Technologies Dell PowerScale OneFS is an operating system from Dell Technologies, USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. An authorization issue vulnerability exists in Dell PowerScale OneFS that stems from ISI PRIV AUTH SSH RBAC privileges for a past...

4sight ModernFlow Authorization Issues Vulnerability

4sight ModernFlow is a mobile app from 4sight, Inc. that provides an app to easily manage business processes within an organization. An authorization issue vulnerability exists in ModernFlow. The vulnerability stems from the system not restricting web access to members of the security group as...

Lucee Server Authorization Issues Vulnerability

An authorization issue vulnerability exists in Lucee Server that arises from a lack of authentication measures or insufficient authentication strength in a network system or product...

HPE Web ViewPoint Suite Authorization Issues Vulnerability

An authorization issue vulnerability exists in HPE Web ViewPoint Suite that stems from the product allowing remote unauthorized access...

Dell PowerScale OneFS 授权问题漏洞

Dell Technologies Dell PowerScale OneFS is an operating system from Dell Technologies, USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. An authorization issue vulnerability exists in Dell PowerScale OneFS that stems from ISI PRIV AUTH SSH RBAC privileges for a past...

Epikur License Issues Vulnerability

Epikur is a healthcare mobile application from German company Epikur that provides users with psychotherapy, patient management and other features. An authorization issue vulnerability exists in Epikur versions prior to 20.1.1 that stems from an administrator account accessing the default...

Zulip Desktop License Issue Vulnerability

Zulip Desktop is a desktop version of the team chat application from Zulip USA. An authorization issue vulnerability exists in versions prior to Zulip Desktop 5.0.0, which stems from allowing an attacker to record from a webcam and microphone because of an unprivileged request processor...

Connor Hicks 1Password SCIM Bridge Authorization Issues Vulnerability

Connor Hicks 1Password SCIM Bridge is a password management system from the Connor Hicks organization in the United States. Provides a cross-domain identity management system SCIM protocol to connect 1Password to your existing identity provider e.g. Azure Active Directory, Okta, OneLogin or...

HCL OneTest License Issue Vulnerability

HCL OneTest is a software testing tool from HCL India that provides multiple testing options. The software supports API testing, functional testing, UI testing, performance testing and service virtualization to support software automation testing. An authorization issue vulnerability exists in HC...

Zulip Desktop 安全漏洞

Zulip Desktop is a desktop version of the team chat application from Zulip USA. An authorization issue vulnerability exists in versions prior to Zulip Desktop 5.0.0, which stems from allowing an attacker to record from a webcam and microphone because of an unprivileged request processor...

JetBrains Kotlin Authorization Issues Vulnerability

JetBrains Kotlin is a statically typed programming language from the Czech company JetBrains that runs on the Java Virtual Machine. An authorization issue vulnerability exists in JetBrains Kotlin before 1.4.2, which stems from insecure permissions and can be exploited by an attacker to read data...

Apache Shiro 授权问题漏洞

Apache Shiro is the United States Apache Apache Foundation set of Java security framework for performing authentication, authorization, encryption and session management . An Access Control Error vulnerability exists in Apache Shiro before 1.7.1, which stems from a specially crafted HTTP request...

Harbor Authorization Issues Vulnerability

Harbor is an open source trusted cloud native registry from the Cloud Native Computing Foundation. The product is primarily used to store, sign, and scan container images for vulnerabilities. An authorization issue vulnerability exists in Harbor 2.0 before 2.0.5 and 2.1.x before 2.1.2, which stem...

Apple CrashReporter Authorization Issues Vulnerability

Apple CrashReporter is a core component of Apple Inc. that is used in mobile devices for monitoring system crash events. An authorization issue vulnerability exists in Apple CrashReporter that stems from the application not properly imposing security restrictions within the Crash Reporter compone...

Apache ActiveMQ Authorization Issues Vulnerability

Apache ActiveMQ is the United States Apache Apache Foundation of a set of open source messaging middleware , which supports Java messaging services , clustering , Spring Framework and so on. An authorization issue vulnerability exists in the Apache ActiveMQ LDAP login module, which stems from an...

Dignajar Nibbleblog Authorization Issues Vulnerability

Dignajar Nibbleblog is a Php-based blogging system by the individual developer Dignajar. A security vulnerability exists in nibbleblog v3.7.1c, which stems from the use of == instead of === for password hashes...

Oracle Fusion Middleware Coherence Authorization Issue Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collection and other functions. An authorization issue vulnerability exists in the Oracle Coherence product...

Oracle PeopleSoft Enterprise PeopleTools Authorization Issues Vulnerability (CNVD-2021-08154)

Oracle PeopleSoft Enterprise PeopleTools is a component of Oracle's tools and technology platform that supports the transformation of the way organizations manage, use, and maintain their PeopleSoft software. An authorization issue vulnerability exists in the Elastic Search component of Oracle...

Oracle Argus Safety Authorization Issue Vulnerability

Oracle Argus Safety is a complete pharmacovigilance software system designed to address the pharmaceutical industry's toughest regulatory challenges. An authorization issue vulnerability exists in the Case Form, Local Affiliate Form component of Oracle Argus Safety 8.2.2. An attacker could exploi...