3125 matches found
CVE-2024-50417
CVE-2024-50417 is a Missing Authorization vulnerability affecting the Bold Page Builder WordPress plugin up to version 5.1.3, enabling exploitation through incorrectly configured access control. Multiple sources (NVD entry) specify a high-severity impact with CVSS v3.1 scores of 8.8 (I, A, C) and...
CVE-2024-52416
CVE-2024-52416 affects the WordPress Debug Tool plugin, vulnerable in versions n/a through 2.2 due to missing authorization checks and file type validation, enabling unauthenticated attackers to upload a web shell and potentially achieve remote code execution. The issue is associated with the dbt...
CVE-2024-3379
In lunary-ai/lunary versions 1.2.2 through 1.2.6, an incorrect authorization vulnerability allows unprivileged users to re-generate the private key for projects they do not have access to. Specifically, a user with a 'Member' role can issue a request to regenerate the private key of a project...
CVE-2024-3379
In lunary-ai/lunary versions 1.2.2 through 1.2.6, an incorrect authorization vulnerability allows unprivileged users to re-generate the private key for projects they do not have access to. Specifically, a user with a 'Member' role can issue a request to regenerate the private key of a project...
CVE-2024-3379 Incorrect Authorization in lunary-ai/lunary
In lunary-ai/lunary versions 1.2.2 through 1.2.6, an incorrect authorization vulnerability allows unprivileged users to re-generate the private key for projects they do not have access to. Specifically, a user with a 'Member' role can issue a request to regenerate the private key of a project...
CVE-2024-3379
CVE-2024-3379 affects lunary-ai/lunary prior to version 1.2.7. A authorization flaw allows unprivileged users (e.g., with a Member role) to regenerate the private key for projects they should not access. This is a core access-control issue enabling unintended private-key regeneration within 1.2.2...
Lunary 安全漏洞
lunary is lunary open source a production toolkit for LLM . An illegal authorization vulnerability exists in lunary, which stems from the presence of an incorrect authorization vulnerability that allows an unprivileged user to regenerate a private key for an item to which they do not have access...
Schneider Electric EcoStruxure IT Gateway 安全漏洞
Schneider Electric EcoStruxure IT Gateway is a suite of cloud-based data center management-as-a-service DMaaS offerings from Schneider Electric, a French company. A security vulnerability exists in Schneider Electric EcoStruxure IT Gateway that stems from a lack of authorization vulnerability tha...
Siemens SIMATIC CP Incorrect Authorization (CVE-2024-50310)
A vulnerability has been identified in SIMATIC CP 1543-1 V4.0 6GK7543-1AX10-0XE0 All versions = V4.0.44 = V4.0.44 V4.0.50. Affected devices do not properly handle authorization. This could allow an unauthenticated remote attacker to gain access to the filesystem. This plugin only works with...
CVE-2024-50310
A vulnerability has been identified in SIMATIC CP 1543-1 V4.0 6GK7543-1AX10-0XE0 All versions = V4.0.44 V4.0.50. Affected devices do not properly handle authorization. This could allow an unauthenticated remote attacker to gain access to the filesystem...
python3.12-urllib3 security update
An update is available for python3.12-urllib3. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list urllib3 is a powerful, user-friendly HTTP client for Python. urlli...
Red Hat Enterprise Linux 7 授权问题漏洞
Red Hat Enterprise Linux 7 is a suite of Linux operating systems for business users from Red Hat, USA. An authorization issue vulnerability exists in Red Hat Enterprise Linux 7 that stems from improper handling of tokens interpreted as hostnames in access.conf, allowing an attacker to bypass acce...
WordPress Zotpress plugin <= 7.3.12 - Missing Authorization vulnerability
Missing Authorization vulnerability discovered by Rafshanzani Suhada in WordPress Plugin Zotpress versions = 7.3.12...
Apache Kylin 授权问题漏洞
Apache Kylin is an open source distributed analytical data warehouse from the Apache Foundation USA. The product mainly provides SQL query interface on top of Hadoop/Spark and multidimensional analysis OLAP and other functions. An authorization issue vulnerability exists in Apache Kylin versions...
CVE-2024-44052
Missing Authorization vulnerability in HelloAsso allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HelloAsso: from n/a through 1.1.10...
CVE-2024-43343
Missing Authorization vulnerability in Etoile Web Design Order Tracking allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Order Tracking: from n/a through 3.3.12...
CVE-2024-43314
Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asset CleanUp: Page Speed Booster: from n/a through 1.3.9.3...
CVE-2024-43323
Missing Authorization vulnerability in ReviewX ReviewX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReviewX: from n/a through 1.6.28...
CVE-2024-43293
Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Recipe Card Blocks for Gutenberg & Elementor: from n/a through 3.3.1...