NEC Calsos CSDJ Authorization Issues Vulnerability

NEC Calsos CSDJ is a monitoring device from NEC Corporation of Japan. It provides IoT-enabled remote monitoring systems in various industries such as water and wastewater, manufacturing and agriculture. An authorization issue vulnerability exists in Calsos CSDJ that stems from a lack of...

IBM Spectrum Protect Operations Center 授权问题漏洞

IBM Spectrum Protect Operations Center is a software from IBM USA that provides visual control for IBM Spectrum Protect environments. An authorization issue vulnerability exists in IBM Spectrum Protect Operations Center that arises from a lack of authentication measures or insufficient...

CVE-2021-21026

Magento versions 2.4.1 and earlier, 2.4.0-p1 and earlier and 2.3.6 and earlier are affected by an improper authorization vulnerability in the integrations module. Successful exploitation could lead to unauthorized access to restricted resources by an unauthenticated attacker. Access to the admin...

Multiple Netgear Products Licensing Issues Vulnerabilities

Netgear NETGEAR WNR2020 and others are products of Netgear, Inc.NETGEAR WNR2020 is a wireless router.NETGEAR R6220 is a wireless router.NETGEAR R6700v2 is a wireless router. An authorization issue vulnerability exists in multiple NETGEAR routers that stems from a lack of authentication measures o...

FiberHome HG6245D devices 安全漏洞

FiberHome HG6245D devices is a router from FiberHome, China. It provides network connectivity. An authorization issue vulnerability exists in the FiberHome HG6245D devices, which can be exploited by an attacker to access a telnet server...

Dell EMC Avamar Server 安全漏洞

DELL Dell EMC Avamar Server is a suite of fully virtualized backup and recovery software for servers from Dell USA. An authorization issue vulnerability exists in Dell EMC Avamar Server, which arises from a lack of authentication measures or insufficient authentication strength in a networked...

Adobe Magento 安全漏洞

Adobe Magento is Adobe's one with PHP written in open source e-commerce platform.Magento Community Edition is the community edition, later renamed Magento Open Source, Magento Enterprise Edition is the enterprise edition, later renamed Magento Magento Enterprise Edition is the enterprise edition,...

JetBrains Kotlin 授权问题漏洞

JetBrains Kotlin is a statically typed programming language from the Czech company JetBrains that runs on the Java Virtual Machine. An authorization issue vulnerability exists in JetBrains Kotlin before 1.4.2, which stems from insecure permissions and can be exploited by an attacker to read data...

Siemens Simatic Hmi License Issue Vulnerability

Siemens Simatic Hmi is a device from Siemens Germany that provides human-computer interaction for industrial automation equipment. Siemens Simatic Hmi has an authorization issue vulnerability that can be exploited by an attacker to run code via an unauthenticated Telnet exploit use...

Siemens Simatic Hmi 访问控制错误漏洞

Siemens Simatic Hmi is a device from Siemens Germany that provides human-computer interaction for industrial automation equipment. Siemens Simatic Hmi has an authorization issue vulnerability that can be exploited by an attacker to run code via an unauthenticated Telnet exploit use...

Open5GS 授权问题漏洞

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from an authorization issue vulnerability that stems from the default password of 1423 for the admin account. an attacker could exploit this vulnerability to gain access to th...

McAfee Agent 5.6.x prior to 5.7.1 Missing Authorization (SB10343)

The version of McAfee Agent, formerly McAfee ePolicy Orchestrator ePO Agent, installed on the remote host is 5.6.x prior to 5.7.1. It is, therefore, affected by a missing authorization vulnerability that allows local users to block McAfee product updates by manipulating a directory used by MA for...

Multiple Cisco Products Licensing Issues Vulnerabilities

Cisco Content Security Management Appliance SMA and so on are products of the American Cisco Cisco company.Cisco Content Security Management Appliance is a set of content security management appliance.Cisco Email Security Appliance ESA is an email security appliance.Cisco Web Security Appliance W...

Oracle E-Business Suite 授权问题漏洞

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. An authorization issue vulnerability exists in the...

Oracle Health Sciences Applications和Safety 授权问题漏洞

Oracle Argus Safety is a complete pharmacovigilance software system designed to address the pharmaceutical industry's toughest regulatory challenges. An authorization issue vulnerability exists in the Case Form, Local Affiliate Form component of Oracle Argus Safety 8.2.2. An attacker could exploi...

MISP 授权问题漏洞

MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A default configuration error vulnerability exists in MISP version 2.4.136, which stems fr...

Oracle Fusion Middleware WebLogic Server Authorization Issues Vulnerability

Oracle WebLogic Server is an Oracle application services middleware for cloud and traditional environments that provides a modern, lightweight development platform that supports the full lifecycle management of applications from development to production and simplifies application deployment and...

Oracle E-Business Suite 授权问题漏洞

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iStore is one of the business can effectively build,...

Oracle E-Business Suite 授权问题漏洞

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in the Oracle iStore...

GitLab Authorization Issues Vulnerability (CNVD-2021-26107)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An authorization issue vulnerability exists in GitLab...