Authorization Bypass

tcpflow is vulnerable to authorization bypass. The vulnerability exists through an integer overflow in the function handleprism during caplen processing, if the caplen is less than 144...

IBM Security Guardium Insights Authorization Issues Vulnerability

IBM Security Guardium Insights is a modern hybrid cloud data security hub designed to provide a reliable view of an organization's data security and compliance posture. IBM Security Guardium Insights 2.0.1 suffers from an authorization issue vulnerability that can be exploited by an attacker to...

Philips SureSigns VS4 License Issue Vulnerability

The Philips SureSigns VS4 is a vital signs monitor used to monitor physiological parameters in patients. An authorization issue vulnerability exists in Philips SureSigns VS4 A.07.107 and earlier versions, which stems from the product's failure to properly validate a user's claimed identity, no...

CVE-2020-3412

A vulnerability in the scheduled meeting template feature of Cisco Webex Meetings could allow an authenticated, remote attacker to create a scheduled meeting template that would belong to another user in their organization. The vulnerability is due to insufficient authorization enforcement for th...

Authorization

Huawei 5G Mobile WiFi E6878-370 with versions of 10.0.3.1H563SP1C00,10.0.3.1H563SP21C233 have an improper authorization vulnerability. The device does not restrict certain data received from WAN port. Successful exploit could allow an attacker at WAN side to manage certain service of the device...

McAfee Data Loss Prevention ePO extension incorrect authorization vulnerability

McAfee Data Loss Prevention DLP ePO extension is a data security protection software. An incorrect authorization vulnerability exists in the McAfee Data Loss Prevention DLP ePO extension. Allows remote attackers can exploit the vulnerability to submit a special request that can change the...

Authorization

Improper Authorization vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated remote attackers to change the configuration when logged in with view only privileges via carefully constructed HTTP post messages...

Red Hat CloudForms Authorization Issues Vulnerability

Red Hat CloudForms is a hybrid infrastructure management platform from Red Hat, Inc. The platform provides deployment, management, and other capabilities across virtual machines, clouds, containers, and physical infrastructure. An authorization issue vulnerability exists in Red Hat CloudForms. Th...

CVE-2020-3386 Cisco Data Center Network Manager Improper Authorization Vulnerability

A vulnerability in the REST API endpoint of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker with a low-privileged account to bypass authorization on the API of an affected device. The vulnerability is due to insufficient authorization of certain API functions...

Huawei FusionCompute License Issue Vulnerability

Huawei FusionCompute is a computer virtualization engine from Huawei China. The product provides Virtual Resource Manager VRM and Compute Node Agent CNA, among others. An authorization issue vulnerability exists in Huawei FusionCompute version 8.0.0, which stems from a module not properly...

Cryptbond Network Authorization Issues Vulnerability

Cryptbond Network CBN is a cryptocurrency. A security vulnerability exists in the 'ToOwner' function in CBN's smart contract implementation, which stems from the fact that the function does not check the identity of the caller. An attacker could use the vulnerability to modify the owner of the...

Huawei Mate 20 Improper Authorization Vulnerability

Huawei Mate 20 is a smartphone launched by Huawei. A security vulnerability exists in versions prior to Huawei Mate 20 10.1.0.160 C00E160R2P11. The vulnerability stems from the software's inability to appropriately restrict certain operations under certain circumstances. An attacker could use the...

Authorization

HUAWEI Mate 20 smartphones with versions earlier than 10.1.0.160C00E160R2P11 have an improper authorization vulnerability. The software does not properly restrict certain operation in certain scenario, the attacker should do certain configuration before the user turns on student mode function...

Atlassian Jira < 8.5.5 / 8.6.x < 8.7.2 / 8.8.x < 8.8.1 Improper authorization

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.5, or version 8.6.x prior to 8.7.2, 8.8.x prior to 8.8.1. It is, therefore, affected by a Improper authorization vulnerability. It allow remote attackers to enumerate...

CVE-2020-9256

CVE-2020-9256 affects Huawei Mate 30 Pro and is caused by improper authorization where apps can misuse system services. Exploitation would require user interaction (malicious app installation) and could result in denial of audio service. Connected documents confirm the vulnerability's presence i...

Dell PowerProtect Data Manager and PowerProtect X400 Licensing Issues Vulnerability

Dell PowerProtect Data Manager PPDM and PowerProtect X400 are both products from Dell, U.S.A. Dell PowerProtect Data Manager is a data protection solution. It supports data backup, virtual machine backup and database protection.PowerProtect X400 is a data management appliance. An authorization...

CVE-2020-5356

Dell PowerProtect Data Manager PPDM versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines...

Authorization

Dell PowerProtect Data Manager PPDM versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines...

CVE-2020-4029

CVE-2020-4029 – Atlassian Jira Server/Data Center suffers an improper authorization flaw in the REST endpoint /rest/project-templates/1.0/createshared that lets remote attackers enumerate project names. Affected versions are Jira Server/Data Center before 8.5.5; Jira 8.6.0 to 8.7.2; and Jira 8.8....

playSMS Authorization Issues Vulnerabilities

playSMS is an open source SMS Short Message Service management software from Anton Raharja Software Developers in India. A security vulnerability exists in playSMS version 1.4.3 and earlier. An attacker can exploit the vulnerability to set up a user's session and can take control of a user's...