Elcomplus SmartPPT 安全漏洞

Elcomplus SmartPPT is an integrated voice and data scheduling software from Elcomplus, U.S.A. An authorization issue vulnerability exists in Elcomplus SmartPPT, which can be exploited by a low-authentication attacker to access higher-level administrative authorizations by sending a request direct...

CVE-2022-26857

Dell OpenManage Enterprise Versions 3.8.3 and prior contain an improper authorization vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to bypass blocked functionalities and perform unauthorized actions...

MinIO 安全漏洞

MinIO is an open source object storage server from MinIO, Inc. The product supports building infrastructure for machine learning, analytics, and application data workloads.MinIO has an authorization issue vulnerability that could be exploited by an attacker to elevate privileges to those of a roo...

Code injection

The Salon booking system Free and Pro WordPress plugins before 7.6.3 do not have proper authorisation in some of its endpoints, which could allow customers to access all bookings and other customer's data...

ATutor 授权问题漏洞

ATutor is a set of open source Web-based Learning Content Management System LCMS from the ATutor Atutor team. The system includes modules for teaching content management, forums, and chat rooms. A security vulnerability exists in ATutor 2.2.4 that stems from an access control vulnerability in...

Vmware Workspace One Access 授权问题漏洞

Vmware Workspace One Access is Vmware USA's combines user identity with factors such as device and network information to make intelligence-driven conditional access decisions for Workspace One delivered applications. An authorization issue vulnerability exists in Vmware Workspace One Access due ...

LifePoint Informatics Patient Portal 授权问题漏洞

Lifepoint Informatics Patient Portal is a patient portal application from Lifepoint Informatics, Inc. A security vulnerability exists in LifePoint Informatics Patient Portal version 3.5.12.P30, which stems from...

CVE-2022-23183

CVE-2022-23183 affects WordPress plugin Advanced Custom Fields (ACF) and Advanced Custom Fields Pro, with versions prior to 5.12.1 vulnerable to missing authorization. A remote authenticated attacker could view database information without proper permissions. Root cause: insufficient access contr...

JVN#42543427: WordPress Plugin "Advanced Custom Fields" vulnerable to missing authorization

WordPress Plugin "Advanced Custom Fields" provided by Delicious Brains contains a missing authorization vulnerability CWE-862. Impact Users of this product Editor, Author, Contributor may view the information on the database without the access permission. Solution Update the plugin Update the...

Jenkins Bitbucket Server Integration Plugin 权限许可和访问控制问题漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application software.Jenkins Bitbucket Server...

SourceCodester One Church Management System 授权问题漏洞

SourceCodester One Church Management System is an application of SourceCodester, Inc. An authorization issue vulnerability exists in SourceCodester One Church Management System version 1.0, which originates in /one church/userregister.php does not properly restrict access to resources from...

OpenVPN 授权问题漏洞

OpenVPN is a software package for creating encrypted tunnels for virtual private networks VPNs from US-based OpenVPN, which uses the OpenSSL library to encrypt data and control information and allows created VPNs to be authenticated using public keys, electronic certificates, or...

TP-LINK Omada Controller Software 安全漏洞

TP-Link Omada Controller Software is a set of software from Tp-link that supports the management of wireless access points.TP-Link Omada Controller Software versions prior to 5.0.15 are vulnerable to authorization issues, which stem from a lack of authentication measures or insufficient...

Samsung Account 授权问题漏洞

Samsung Account is a mobile account from Samsung, a South Korean company. Samsung Account versions prior to 13.1.0.1 contain an access control error vulnerability that stems from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker...

Cacti 授权问题漏洞

Cacti is an open source set of network traffic monitoring and analysis tools from the Cacti team. The tool fetches data via snmpget, uses RRDtool drawing graphs for analysis, and provides data and user management features. cacti suffers from an authorization issue vulnerability that can be...

ZOHO ManageEngine SharePoint Manager Plus 安全漏洞

ZOHO ManageEngine SharePoint Manager Plus is a complete management and auditing solution from ZOHO, Inc. An authorization issue vulnerability exists in versions prior to ZOHO ManageEngine SharePoint Manager Plus 4329, which stems from a network system or The vulnerability is caused by a lack of...

GitLab Enterprise Edition和GitLab Community Edition 授权问题漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. GitLab Enterprise Edition and GitLab Community Edition have an authorization issue vulnerability that arises from an application exporting too much data in the...

CVE-2022-0762 Incorrect Authorization in microweber/microweber

Incorrect Authorization in GitHub repository microweber/microweber prior to 1.3...

Appleple a-blog cms 授权问题漏洞

Appleple a-blog cms is a content management system CMS from appleple Appleple Japan. The a-blog cms suffers from an authorization issue vulnerability that exists due to an error when processing authentication requests. A remote attacker could bypass the authentication process and gain unauthorize...

HP Support Assistant 授权问题漏洞

HP Support Assistant is a solution from Hewlett-Packard HP that provides support and other functions for PCs and printers. HP Support Assistant has an authorization issue vulnerability that stems from the product's failure to effectively authenticate users, which could be exploited by an untruste...