Symantec Advanced Secure Gateway 和 Symantec ProxySG 授权问题漏洞

Symantec Advanced Secure Gateway and Symantec ProxySG are both security gateway appliances from Symantec Corporation. An authorization issue vulnerability exists in Symantec Advanced Secure Gateway ASG and ProxySG web management consoles. An unauthenticated attacker could exploit this vulnerabili...

CVE-2021-28563

Magento versions 2.4.2 and earlier, 2.4.1-p1 and earlier and 2.3.6-p1 and earlier are affected by an Improper Authorization vulnerability via the 'Create Customer' endpoint. Successful exploitation could lead to unauthorized modification of customer data by an unauthenticated attacker. Access to...

Shopware 授权问题漏洞

Shopware is a suite of open source e-commerce software from the German company Shopware. An authorization issue vulnerability exists in Shopware that stems from the lack of proper encryption of sessions in the system, which could allow an attacker to hijack a customer's session. The following...

Authorization

An improper authorization vulnerability in Palo Alto Networks Cortex XSOAR enables a remote unauthenticated attacker with network access to the Cortex XSOAR server to perform unauthorized actions through the REST API. This issue impacts: Cortex XSOAR 6.1.0 builds later than 1016923 and earlier th...

CVE-2021-22361

CVE-2021-22361 relates to an improper authorization vulnerability in Huawei products: eCNS280 V100R005C00/V100R005C10 and eSE620X vESS V100R001C10SPC200/V100R001C20SPC200. The issue is that file access is not authorized correctly, allowing a low-privileged attacker to perform privilege escalation...

Apollos Apps licensing issue vulnerability

Apollos Apps is an open source platform for distributing church-related applications. Apollos Apps suffers from an authorization issue vulnerability that stems from the fact that new user registrations only need to know basic personal information about anyone name, birthday, gender, etc. in order...

GHSA-W5RH-J4G3-JR29 Missing Authorization in Jenkins S3 publisher Plugin

Jenkins S3 publisher Plugin prior to 0.11.7 and 0.11.5.1 does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to obtain the list of configured profiles. S3 publisher Plugin 0.11.7 and 0.11.5.1 performs permission checks when providing a list ...

Apollos Apps 授权问题漏洞

Apollos Apps is an open source platform for distributing church-related applications. Apollos Apps suffers from an authorization issue vulnerability that stems from the fact that new user registrations only need to know basic personal information about anyone name, birthday, gender, etc. in order...

CLICK PLC CPU Modules 授权问题漏洞

CLICK PLC CPU Modules are Automation Direct's network devicesA single CLICK CPU Module can be connected to up to eight I/O modules to expand the number of system I/O and meet the needs of a specific application. An authorization issue vulnerability exists in Automation Direct CLICK PLC CPU Module...

Circutor SGE-PLC1000 Licensing Issue Vulnerability

Circutor SGE-PLC1000 is a smart metering system device. The main function is to manage utility power through CIRWATT meters or other meters with PRIME technology.An authorization issue vulnerability exists in Circutor SGE-PLC1000 firmware version 0.9.2b, which can be exploited by attackers to pas...

SilverStripe License Issues Vulnerability (CNVD-2021-50577)

SilverStripe is New Zealand SilverStripe Silverstripe company's set of open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . SilverStripe has an authorization issue vulnerability that stems from...

NetSetMan Pro 授权问题漏洞

NetSetMan Pro is a commercial version of NetSetMan's Network Setup Manager software. Easily switch between your pre-configured profiles. An authorization issue vulnerability exists in NetSetMan Pro, which originates from an unauthenticated attacker being able to open the Administrator shell and...

Intel Virtualization Technology for Direct I/O 授权问题漏洞

Intel Virtualization Technology for Direct I/O Intel VT-d is a part of Intel Virtualization Technology from Intel Corporation, which mainly targets the I/O subsystem, and is implemented by introducing a redirection unit in hardware, which is used to redirect DMA operations and interrupt passes to...

Cisco ASR 5000授权问题漏洞

The Cisco ASR 5000 is a 5000 Series gateway product from Cisco. An authorization issue vulnerability exists in all versions of the Cisco ASR 5000 Series that allows remote users to gain unauthorized access to the system...

嘉实资讯 CTS Web transaction system 授权问题漏洞

CTS Web transaction system is a CTS Web transaction system from Cascade Information Technology, Taiwan. An authorization issue vulnerability exists in the CTS Web transaction system, which stems from an incorrect implementation of authentication-related functionality in the transaction system. A...

xwiki-platform 授权问题漏洞

Thomas Mortagne xwiki-platform is an open source application by Thomas Mortagne. A general-purpose wiki platform that provides runtime services for applications built on it. xwiki-platform suffers from an authorization issue vulnerability that stems from the fact that a user who registers using...

嘉实资讯 CTS Web transaction system 授权问题漏洞

CTS Web transaction system is a CTS Web transaction system from Cascade Information Technology, Taiwan. The CTS Web transaction system suffers from an authorization issue vulnerability that stems from an incorrect implementation of the CTS Web transaction system related to authentication and...

Versa Networks Versa Director 授权问题漏洞

Versa Networks Versa Director is a virtualization and service creation platform from Versa Networks, USA. It simplifies the creation, automation and delivery of services using Versa FlexVNF. Versa Director suffers from an authorization issue vulnerability that originates from an unauthenticated...

Apple Safari 授权问题漏洞

Apple Safari is a web browser from Apple, Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. An authorization problem vulnerability exists in Apple Safari. The vulnerability is caused due to a lack of security measures such as authentication, access control, a...

Belden HiOS授权问题漏洞

Belden HiOS is an operating system for Ethernet switches from Belden, Inc. A security vulnerability exists in Hirschmann HiOS 07.1.01, 07.1.02, and 08.1.00 through 08.5.xx and HiSecOS 03.3.00 through 03.5.01, which could be exploited by a remote attacker to alter the credentials of an existing us...