IBM UrbanCode Deploy Authorization Issues Vulnerability

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from International Business Machines IBM. The tool is based on an application deployment automation management information model and uses remote agent technology to automate the deployment of complex applications in...

Nexkey Authorization Issues Vulnerability

Nexkey is an open source, decentralized social media platform for nexryai individual developers. An authorization issue vulnerability exists in Nexkey versions prior to 12.121.9 that stems from allowing an attacker to bypass authentication to access the job queue dashboard...

Qualcomm Chip Licensing Issues Vulnerabilities

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc. and is often manufactured on the surface of semiconductor wafers. The Qualcomm chip has an authorization issue vulnerability that stems from an...

SATO America CL4NX License Issue Vulnerability

The SATO America CL4NX is a printer from SATO America. An authorization issue vulnerability exists in the SATO America CL4NX version 1.13.2-u455r2, which stems from an improper authentication issue with the component Cookie...

inure Security Vulnerabilities

inure is an elegant application manager for Android by the individual developer Hamza Rizwan. A security vulnerability exists in versions prior to inure build94, which stems from a lack of authorization...

Mattermost Incorrect Authorization vulnerability

Mattermost fails to properly verify the permissions when managing/updating a bot allowing a User Manager role with user edit permissions to manage/update bots...

RockOA Authorization Issues Vulnerability

RockOA Xinhu is an open source office OA system. An authorization issue vulnerability exists in Xinhu RockOA version 1.1, version 2.3.2, and version 15.X3amdi. An attacker could exploit this vulnerability to cause weak password recovery...

GitHub: [PATs] Ability to leak comments from issues without ANY "Issues" repo permissions by utilizing "Pull Request" permissions

An incorrect authorization vulnerability in GitHub Enterprise Server allowed issue comments to be read without proper permissions through improperly scoped tokens...

CVE-2023-28055

Dell NetWorker, Version 19.7 has an improper authorization vulnerability in the NetWorker client. An unauthenticated attacker within the same network could potentially exploit this by manipulating a command leading to gain of complete access to the server file further resulting in information...

Jumpserver Authorization Issues Vulnerability

Jumpserver is an open source bastion machine from Hangzhou Feizhiyun Information Technology Co. in China. JumpServer suffers from an authorization issue vulnerability that stems from the fact that when a user enables MFA and authenticates with a public key, the Koko SSH server does not validate t...

iCMS Authorization Issues Vulnerabilities

iCMS is a software application. An efficient and simple content management system built with PHP and MySQL. A security vulnerability exists in iCMS version v.7.0.16. A remote attacker can exploit this vulnerability to obtain sensitive information...

Jumpserver Authorization Issues Vulnerability

Jumpserver is an open source bastion machine from Hangzhou Feizhiyun Information Technology Co. in China. JumpServer suffers from an authorization issue vulnerability that stems from downloading session replays without authentication...

PaperCut NG Authorization Issues Vulnerability

PaperCut NG is a suite of next-generation printer control software from PaperCut Australia. An authorization issue vulnerability exists in PaperCut NG versions 22.0.12 and earlier, which stems from a default that allows unauthenticated XMLRPC commands to be run...

Soar Cloud HR Portal Authorization Issues Vulnerability

Soar Cloud HR Portal is a human resources application from Soar Cloud, Inc. Soar Cloud HR Portal suffers from an authorization issue vulnerability that stems from a weak password recovery mechanism for forgotten passwords, where an attacker with access to the browser history or with the line coul...

Tenda N300 Authorization Issues Vulnerability

Tenda N300 is a router from Tenda, a Chinese company. A security vulnerability exists in the Tenda N300 that originates from allowing unauthenticated page access...

CVE-2023-4346

KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable to reset them to gain access to the device. The BCU key feature on the devices can be used to create a password for the device, but this...

Moderate: Red Hat Security Advisory: subscription-manager security update

An update for subscription-manager is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

ASUSTOR Data Master 安全漏洞

ASUSTOR Data Master is a specialized operating system on ASUSTOR NAS from ASUS, China. An authorization issue vulnerability exists in ASUSTOR Data Master, which arises from improper privilege management and can be exploited by an unprivileged local attacker to modify the storage device...

Walchem Intuition 授权问题漏洞

Walchem Intuition is a controller from Walchem. An authorization issue vulnerability exists in Walchem Intuition 9 that stems from a lack of authentication for certain API routes that manage the web server...

Dell PowerScale OneFS 安全漏洞

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. Dell PowerScale OneFS suffers from an authorization issue vulnerability that stems from incorrect default permissions. An attacker could exploit this vulnerabilit...