3195 matches found
Authorization
An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 Hybrid Backup Sync. If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.0.0415 on QTS 4.5.2; versions prior to...
CVE-2021-28799 Improper Authorization Vulnerability in HBS 3 (Hybrid Backup Sync)
An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 Hybrid Backup Sync. If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.0.0415 on QTS 4.5.2; versions prior to...
HashiCorp Terraform 授权问题漏洞
Hashicorp Terraform is an open source tool for provisioning and managing cloud infrastructure from HashiCorp Hashicorp, USA. HashiCorp Terraform suffers from an authorization issue vulnerability that can be exploited by an attacker to trigger a fatal error to trigger a denial of service...
F5 BIG-IP 授权问题漏洞
F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing, etc. An authorization issue vulnerability exists in BIG-IP Advanced WAF, which is caused by improper internal authorization. A remote attacker cou...
Apache Ozone 访问控制错误漏洞
Apache Ozone is a scalable, redundant and distributed object store for Hadoop and cloud-native environments. An authorization issue vulnerability exists in Apache Ozone Cluster versions prior to 1.1.0 related to the affected version allowing access to keys and buckets via curl commands or...
CVE-2021-0260 Junos OS: SNMP fails to properly perform authorization checks on incoming received SNMP requests.
An improper authorization vulnerability in the Simple Network Management Protocol daemon snmpd service of Juniper Networks Junos OS leads an unauthenticated attacker being able to perform SNMP read actions, an Exposure of System Data to an Unauthorized Control Sphere, or write actions to OIDs tha...
Helpcom Authorization Issues Vulnerability
Helpcom is an application from the Korean company Helpcom. It provides remote control services. Helpcom suffers from an authorization problem vulnerability that can be exploited by an unauthenticated attacker to execute arbitrary commands...
CVE-2021-28799
An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 Hybrid Backup Sync. If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.0.0415 on QTS 4.5.2; versions prior to...
Mitsubishi Electric GOT2000 授权问题漏洞
Mitsubishi Electric GOT2000 is a GOT2000 series graphical operation terminal from Mitsubishi Electric. An authorization issue vulnerability exists in all versions of the GOT2000 series GT27 model, which allows remote, unauthenticated attackers to gain unauthorized access via specially crafted...
Helpcom 授权问题漏洞
Helpcom is an application from the Korean company Helpcom. It provides remote control services. Helpcom suffers from an authorization problem vulnerability that can be exploited by an unauthenticated attacker to execute arbitrary commands...
SAP Focused RUN Improper Authorization Vulnerability
Designed for organizations that require extensive system and application monitoring, alerting and analysis, SAP Focused Run supports hosting all customers in a scalable, secure and automated environment. An improper authorization vulnerability exists in SAP Focused RUN versions 200 and 300. The...
红帽 Red Hat Ceph 授权问题漏洞
Red Hat Ceph is a Linux petabyte-level distributed file system from Red Hat. The main goal of the system is to be designed as a distributed file system without a single point of failure, based on POSIX Portable Operating System Interface, enabling fault-tolerant and seamless data replication. cep...
CVE-2021-27609
SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allows a user to call the oData service and manipulate the activation for the SAP EarlyWatch Alert service data collection and sending to SAP without the intended authorization...
CVE-2021-25374
An improper authorization vulnerability in Samsung Members "samsungrewards" scheme for deeplink in versions 2.4.83.9 in Android O8.1 and below, and 3.9.00.9 in Android P9.0 and above allows remote attackers to access a user data related with Samsung Account...
Samsung Experience Service 授权问题漏洞
Samsung mobile devices O are products of Samsung Corporation in South Korea.Samsung mobile devices O is a series of cell phones.Samsung mobile devices P is a series of mobile hard drives.Samsung mobile devices Q is a series of TVs.Samsung mobile devices Q is a series of TVs. Samsung mobile device...
WordPress iThemes Security Plugin < 7.7.0 Incorrect Authorization Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113811";...
Cisco Small Business RV Series Routers 授权问题漏洞
Cisco Small Business RV Series Routers is an RV Series router from Cisco. The Cisco Small Business RV Series Routers contain an authorization issue vulnerability that can be exploited by a remote attacker to execute arbitrary commands or bypass authentication and upload files on the affected devi...
CVE-2021-27195
Improper Authorization vulnerability in Netop Vision Pro up to and including to 9.7.1 allows an attacker to replay network traffic...
