CVE-2021-44055

The CVE-2021-44055 entry affects QNAP Video Station. Description confirms a missing authorization vulnerability that could allow remote attackers to access data or perform unauthorized actions on affected devices. Practical impact is limited to Video Station implementations; remediation is to upg...

QNAP Systems Video Station 授权问题漏洞

QNAP Systems Video Station is a video management and playback application from China Weilian QNAP Systems. An authorization issue vulnerability exists in QNAP Systems Video Station versions prior to 5.5.9, 5.3.13, and 5.1.8, which stems from incorrect authorization. A remote attacker could exploi...

QNAP Systems Video Station 授权问题漏洞

QNAP Systems Video Station is a video management and playback application from China Weilian QNAP Systems. An authorization issue vulnerability exists in QNAP Systems Video Station versions prior to 5.5.9, 5.3.13, and 5.1.8, which stems from incorrect authorization. A remote attacker could exploi...

IBM QRadar SIEM 安全漏洞

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. IBM QRadar SIEM ha...

barbican 授权问题漏洞

barbican is an OpenStack key management service, API server. An authorization issue vulnerability exists in barbican that allows remote users to perform unauthorized actions in the application...

Atlassian Jira 授权问题漏洞

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. Atlassian Jira suffers from an authorization issue vulnerability that can be exploited by an attacker to bypass authentication b...

MISP 授权问题漏洞

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP before 2.4.158, which originates in...

Elcomplus SmartPPT 安全漏洞

Elcomplus SmartPPT is an integrated voice and data scheduling software from Elcomplus, U.S.A. An authorization issue vulnerability exists in Elcomplus SmartPPT, which can be exploited by a low-authentication attacker to access higher-level administrative authorizations by sending a request direct...

CVE-2022-26857

Dell OpenManage Enterprise Versions 3.8.3 and prior contain an improper authorization vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to bypass blocked functionalities and perform unauthorized actions...

MinIO 安全漏洞

MinIO is an open source object storage server from MinIO, Inc. The product supports building infrastructure for machine learning, analytics, and application data workloads.MinIO has an authorization issue vulnerability that could be exploited by an attacker to elevate privileges to those of a roo...

Code injection

The Salon booking system Free and Pro WordPress plugins before 7.6.3 do not have proper authorisation in some of its endpoints, which could allow customers to access all bookings and other customer's data...

ATutor 授权问题漏洞

ATutor is a set of open source Web-based Learning Content Management System LCMS from the ATutor Atutor team. The system includes modules for teaching content management, forums, and chat rooms. A security vulnerability exists in ATutor 2.2.4 that stems from an access control vulnerability in...

Vmware Workspace One Access 授权问题漏洞

Vmware Workspace One Access is Vmware USA's combines user identity with factors such as device and network information to make intelligence-driven conditional access decisions for Workspace One delivered applications. An authorization issue vulnerability exists in Vmware Workspace One Access due ...

LifePoint Informatics Patient Portal 授权问题漏洞

Lifepoint Informatics Patient Portal is a patient portal application from Lifepoint Informatics, Inc. A security vulnerability exists in LifePoint Informatics Patient Portal version 3.5.12.P30, which stems from...

CVE-2022-23183

CVE-2022-23183 affects WordPress plugin Advanced Custom Fields (ACF) and Advanced Custom Fields Pro, with versions prior to 5.12.1 vulnerable to missing authorization. A remote authenticated attacker could view database information without proper permissions. Root cause: insufficient access contr...

JVN#42543427: WordPress Plugin "Advanced Custom Fields" vulnerable to missing authorization

WordPress Plugin "Advanced Custom Fields" provided by Delicious Brains contains a missing authorization vulnerability CWE-862. Impact Users of this product Editor, Author, Contributor may view the information on the database without the access permission. Solution Update the plugin Update the...

SourceCodester One Church Management System 授权问题漏洞

SourceCodester One Church Management System is an application of SourceCodester, Inc. An authorization issue vulnerability exists in SourceCodester One Church Management System version 1.0, which originates in /one church/userregister.php does not properly restrict access to resources from...

Jenkins Bitbucket Server Integration Plugin 权限许可和访问控制问题漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application software.Jenkins Bitbucket Server...

OpenVPN 授权问题漏洞

OpenVPN is a software package for creating encrypted tunnels for virtual private networks VPNs from US-based OpenVPN, which uses the OpenSSL library to encrypt data and control information and allows created VPNs to be authenticated using public keys, electronic certificates, or...

Samsung Account 授权问题漏洞

Samsung Account is a mobile account from Samsung, a South Korean company. Samsung Account versions prior to 13.1.0.1 contain an access control error vulnerability that stems from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker...