Lucene search
+L

3125 matches found

CNVD
CNVD
added 2020/04/30 12:0 a.m.4 views

Red Hat WildFly Elytron License Issue Vulnerability

Red Hat WildFly Elytron is a security framework for application servers from Red Hat USA. The product supports features such as configuring administrative access to servers. An authorization issue vulnerability exists in Red Hat WildFly Elytron 1.11.3.Final and prior versions. The vulnerability...

7.5CVSS7.1AI score0.01454EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/04/28 3:15 a.m.25 views

CVE-2020-5566

Improper authorization vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to alter the application's data via the applications 'E-mail' and 'Messages'...

5AI score0.01058EPSS
SaveExploits0References2
CVE
CVE
added 2020/04/28 3:15 a.m.221 views

CVE-2020-5566

Cybozu Garoon 4.0.0–4.10.3 contains an improper authorization vulnerability (CWE-285) that allows remote authenticated attackers to alter data via the E-mail and Messages applications. Affected component: Cybozu Garoon core with access to E-mail and Messages; root cause is improper authorization ...

4.3CVSS4.9AI score0.01058EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2020/04/24 11:15 p.m.19 views

Authorization

Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP versions 618, 730, EAPPLGLO 607 and S/4 HANA versions 100, 101, 102, 103, 104 do not perform necessary authorization checks for an authenticated user, allowing reading or modification o...

5.5CVSS5.5AI score0.00654EPSS
SaveExploits0References2Affected Software2
CNVD
CNVD
added 2020/04/23 12:0 a.m.6 views

ABB System 800xA Base License Issue Vulnerability

ABB System 800xA Base is a distributed control system from ABB Switzerland for the industrial control industry. An authorization issue vulnerability exists in ABB System 800xA Base. An attacker could use this vulnerability to read and modify registry settings related to control system...

7.8CVSS6.8AI score0.00297EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/17 12:0 a.m.6 views

McAfee Endpoint Security Authorization Issues Vulnerability

McAfee Endpoint Security ENS is the United States McAfee McAfee company's set of framework for providing intelligent collaboration and advanced threat defense. The framework supports the entire threat defense lifecycle of real-time communications control and actionable threat forensics and so on...

6.7CVSS6.9AI score0.0028EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/04/16 12:0 a.m.2 views

DAViCal Andrew's Web Libraries Authorization Issues Vulnerability

DAViCal Andrew's Web Libraries AWL is an AWL project that focuses on providing some shared PHP libraries for DAViCal, a calendar sharing server. An authorization issue vulnerability exists in DAViCal AWL version 0.60 and earlier. A remote attacker could exploit this vulnerability to impersonate a...

9.8CVSS7AI score0.01879EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/04/09 12:0 a.m.5 views

Argo License Issue Vulnerability (CNVD-2020-27455)

Argo is an open source container native workflow engine. Argo suffers from an authorization problem vulnerability that stems from the use of immutable authentication tokens in the web interface authentication system. An attacker could exploit this vulnerability to gain unauthorized access to...

7.5CVSS7.2AI score0.01712EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2020/04/08 8:16 p.m.35 views

CVE-2018-1000111

An improper authorization vulnerability exists in Jenkins Subversion Plugin version 2.10.2 and earlier in SubversionStatus.java and SubversionRepositoryStatus.java that allows an attacker with network access to obtain a list of nodes and users...

5.3CVSS5.9AI score0.00914EPSS
SaveExploits0References2
NVD
NVD
added 2020/04/07 7:15 p.m.19 views

CVE-2020-9286

An improper authorization vulnerability in FortiADC may allow a remote authenticated user with low privileges to perform certain actions such as rebooting the system...

6.8CVSS6.3AI score0.01154EPSS
SaveExploits0References1
Prion
Prion
added 2020/04/07 7:15 p.m.19 views

Authorization

An improper authorization vulnerability in FortiADC may allow a remote authenticated user with low privileges to perform certain actions such as rebooting the system...

6.8CVSS6.2AI score0.01154EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2020/04/07 6:52 p.m.11 views

CVE-2020-9286

An improper authorization vulnerability in FortiADC may allow a remote authenticated user with low privileges to perform certain actions such as rebooting the system...

6.6AI score0.01154EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/04/07 6:52 p.m.20 views

CVE-2020-9286

An improper authorization vulnerability in FortiADC may allow a remote authenticated user with low privileges to perform certain actions such as rebooting the system...

6.3AI score0.01154EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/03/26 12:0 a.m.1 views

Huawei OxfordP-AN10B Authorization Issues Vulnerability

The Huawei OxfordP-AN10B is a smartphone from the Chinese company Huawei Huawei. An authorization issue vulnerability exists in previous versions of Huawei OxfordP-AN10B 10.0.1.169 C00E166R4P1. An attacker can exploit this vulnerability by tricking a user into installing a malicious plugin to...

7.8CVSS6.9AI score0.00566EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/03/26 12:0 a.m.18 views

TP-Link Archer A7 AC1750 Authorization Issues Vulnerability

The TP-Link Archer A7 AC1750 is a wireless router from China P&L TP-Link. An authorization issue vulnerability exists in the TP-Link Archer A7 using firmware version 190726 AC1750, which stems from a lack of proper authentication before establishing SSH port forwarding rules. An attacker could us...

9.8CVSS7.1AI score0.02457EPSS
SaveExploits0
CNVD
CNVD
added 2020/03/25 12:0 a.m.5 views

Samsung Mobile Device Authorization Issue Vulnerability

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. Samsung mobile devices have an authorization issue vulnerability that can be exploited by an attacker to unbind an application from the screen without authentication...

7.5CVSS6.6AI score0.00333EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/03/25 12:0 a.m.4 views

Samsung Mobile Device Authorization Issue Vulnerability (CNVD-2020-34737)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. Samsung mobile devices have an authorization issue vulnerability that can be exploited by attackers to access developer options...

5.3CVSS6.6AI score0.00354EPSS
SaveExploits0References1
Prion
Prion
added 2020/03/20 3:15 p.m.19 views

Authorization

There is an improper authorization vulnerability in several smartphones. The software incorrectly performs an authorization to certain user, successful exploit could allow a low privilege user to do certain operation which the user are supposed not to do.Affected product versions include:HUAWEI...

4.6CVSS6.4AI score0.00197EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2020/03/20 2:54 p.m.29 views

CVE-2020-1796

There is an improper authorization vulnerability in several smartphones. The software incorrectly performs an authorization to certain user, successful exploit could allow a low privilege user to do certain operation which the user are supposed not to do.Affected product versions include:HUAWEI...

6.4AI score0.00197EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/03/20 12:0 a.m.5 views

ONAP CLI Authorization Issues Vulnerability

The ONAP CLI is a command line interface for controlling ONAP from the ONAP project. An authorization issue vulnerability exists in ONAP CLI Dublin and prior versions. An attacker can exploit this vulnerability on ports 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271 to gain...

10CVSS7.2AI score0.01655EPSS
SaveExploits0
Rows per page
Query Builder