Librenms 授权问题漏洞

Librenms is an open source network monitoring system based on PHP and MySQL from the Librenms community. The system features customizable alerts, auto-discovery of network environments, and automatic updates. An authorization issue vulnerability exists in librenms that stems from improper...

Emerson Xweb-500 授权问题漏洞

Emerson Xweb-500 is a data logging and remote monitoring system based on Web server technology from Emerson Electric Company USA. An authorization issue vulnerability exists in Emerson Xweb-500 that arises from the Emerson Dixell XWEB-500 product being affected by /cgi-bin/logoextraupload.cgi,...

Open5GS License Issues Vulnerabilities

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from an authorization issue vulnerability that stems from the default password of 1423 for the admin account. an attacker could exploit this vulnerability to gain access to th...

Qualcomm 多款产品授权问题漏洞

The Qualcomm Qca chip and others are products of Qualcomm Incorporated.The Qualcomm Qca chip is a Bluetooth module chip.The Qualcomm Sd chip is a processor.The Qualcomm Wcd chip is an Aqstic™ audio codec.The Qualcomm Wcd chip is an Aqstic™ audio codec.The Qualcomm Wcd chip is an Aqstic™ audio...

Xmpie Ustore 授权问题漏洞

Xmpie Ustore is a network printing solution from Xmpie USA. An authorization issue vulnerability exists in XMPie uStore that stems from the product allowing access to the application to steal database information via the included default administrative credentials. The following products and...

Linux kernel 授权问题漏洞

Linux kernel is the kernel used by the Linux Foundation's open-source operating system Linux. Linux kernel is vulnerable to a security flaw that stems from a problem with the software's permissions restrictions. The vulnerability can be exploited by an attacker to bypass the restrictions of the...

TotoLink X5000R 授权问题漏洞

The TotoLink X5000R is a router from China's Gion Electronics TotoLink. The TOTOLINK X5000R v9.1.0u.6118B20201102 suffers from an authorization issue vulnerability that allows attackers to intercept user credentials via packet capture software...

CVE-2021-44795

Single Connect does not perform an authorization check when using the "sc-assigned-credential-ui" module. A remote attacker could exploit this vulnerability to modify users permissions. The exploitation of this vulnerability might allow a remote attacker to delete permissions from other users...

Authorization

Single Connect does not perform an authorization check when using the sc-reports-ui" module. A remote attacker could exploit this vulnerability to access the device configuration page and export the data to an external file. The exploitation of this vulnerability might allow a remote attacker to...

Authorization

Single Connect does not perform an authorization check when using the "sc-assigned-credential-ui" module. A remote attacker could exploit this vulnerability to modify users permissions. The exploitation of this vulnerability might allow a remote attacker to delete permissions from other users...

Missing Authorization in Crater Invoice

Crater Invoice prior to version 6.0.2 has a missing authorization vulnerability...

GHSA-XH9G-CP3V-P8Q4 Missing Authorization in Crater Invoice

Crater Invoice prior to version 6.0.2 has a missing authorization vulnerability...

Kron Single Connect 安全漏洞

Kronos Single Connect is a comprehensive privileged access management Pam software suite from Kronos Turkey. Designed to create a flexible, centrally managed and layered defense security architecture against insider threats, Kronos Single Connect has an authorization error vulnerability that coul...

ZOHO ManageEngine Desktop Central 授权问题漏洞

ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO, Inc. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management...

Discourse 授权问题漏洞

Discourse is an open source community discussion platform that includes community, email, and chat room features. A security vulnerability exists in Discourse, which stems from the fact that users invited via email to a forum with "must approve users" enabled will automatically log in, bypassing...

Missing Authorization in DayByDay CRM

In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization. An attacker that has the lowest privileges account employee type user, can view the appointments of all users in the system including administrators. However, this type of user is not authorized to view the...

多款StarWind产品授权问题漏洞

StarWind SAN & NAS and StarWind Command Center are both StarWind products.StarWind SAN & NAS are standalone hypervisor servers or groups of servers.StarWind Command Center is a single management platform to manage and monitor the Ui. designed to simplify and automate the control of routine Hci...

Openwhyd 安全漏洞

Openwhyd is a music management service. openwhyd suffers from an authorization issue vulnerability that stems from the fact that openwhyd is vulnerable to improper authorization. No detailed vulnerability details are currently available...

AuthGuard 授权问题漏洞

AuthGuard is easy to use and easy to customize identity server. It supports multiple authentication and authorization options, and can be extended to support additional options or add new features. It is an API-only solution and currently has no dedicated dashboard. an authorization issue...

Netgear RBR750和NETGEAR 授权问题漏洞

Netgear RBR750 and NETGEAR are both products of Netgear, Inc.RBR750 is a home WiFi system.NETGEAR is a router. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in some NETGEAR devices that affects the CBR750 before 4.6.3....