2984 matches found
CVE-2024-2317
A vulnerability was found in Bdtask Hospital AutoManager up to 20240227 and classified as problematic. This issue affects some unknown processing of the file /prescription/prescription/delete/ of the component Prescription Page. The manipulation leads to improper authorization. The attack may be...
BDTASK Hospital AutoManager Authorization Issues Vulnerability
BDTASK Hospital AutoManager is a powerful hospital management software from BDTASK Bangladesh. An authorization issue vulnerability exists in BDTASK Hospital AutoManager 20240227 and prior versions, which stems from the file /prescription/prescription/delete/ can lead to improper authorization...
CVE-2024-27139
UNSUPPORTED WHEN ASSIGNED Incorrect Authorization vulnerability in Apache Archiva: a vulnerability in Apache Archiva allows an unauthenticated attacker to modify account data, potentially leading to account takeover. This issue affects Apache Archiva: from 2.0.0. As this project is retired, we do...
Mattermost 安全漏洞
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an authorization issue vulnerability that stems from an inability to check the "inviteguest" permission when inviting people from other teams to join the team. A privileged...
PT-2024-2725 · F5 · F5Os
Name of the Vulnerable Software and Affected Versions: F5OS affected versions not specified Description: The issue is related to the implementation of the LDAP protocol in F5OS, which is associated with deficiencies in the authorization mechanism. When LDAP remote authentication is configured, a...
Design/Logic Flaw
Pixelfed is an open source photo sharing platform. When processing requests authorization was improperly and insufficiently checked, allowing attackers to access far more functionality than users intended, including to the administrative and moderator functionality of the Pixelfed server. This...
The vulnerability of the SAP S/4HANA Finance financial management software, related to incorrect authorization, allows a perpetrator to create internal bank accounts.
The vulnerability of the SAP S/4HANA Finance financial management software is related to incorrect authorization processes. Exploiting this vulnerability allows a malicious actor to create internal bank accounts remotely...
Daily Habit Tracker Authorization Issues Vulnerability
Daily Habit Tracker is a daily habit tracker by rems personal developer. Daily Habit Tracker version v.1.0 suffers from an authorization issue vulnerability that stems from allowing an attacker to manipulate the Tracker via components such as delete-tracker.php...
HID iCLASS SE reader Authorization Issues Vulnerability
The HID Global HID iCLASS SE reader is an authentication reader from HID Global, USA. An authorization issue vulnerability exists in the HID iCLASS SE reader that stems from the inclusion of credentials and a device administrator key in the reader's configuration card...
PT-2024-15228 · WordPress · Smart Forms
Name of the Vulnerable Software and Affected Versions: Smart Forms WordPress plugin versions prior to 2.6.87 Description: The issue concerns a lack of authorization in various AJAX actions within the plugin, allowing users with a low role, such as a subscriber, to perform unauthorized actions lik...
Shanxi Diankeyun Technology NODERP Authorization Issue Vulnerability
Shanxi Diankeyun Technology NODERP is an ERP system from Shanxi Diankeyun Technology. An authorization issue vulnerability exists in Shanxi Diankeyun Technology NODERP version 6.0.2, which stems from the possibility that the parameter NodUserId/NodUserToken in the file application/index/common.ph...
CVE-2024-0456
An authorization vulnerability exists in GitLab versions 14.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. An unauthorized attacker is able to assign arbitrary users to MRs that they created within the project...
UBUNTU-CVE-2024-0456
An authorization vulnerability exists in GitLab versions 14.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. An unauthorized attacker is able to assign arbitrary users to MRs that they created within the project...
Important: Red Hat Security Advisory: Red Hat build of Quarkus 3.2.9.SP1 release and security update
An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more informatio...
Important: Red Hat Security Advisory: Red Hat build of Quarkus 2.13.9.SP1 release and security update
An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more informatio...
PT-2024-1305 · Apache · Apache Airflow
Name of the Vulnerable Software and Affected Versions: Apache Airflow versions prior to 2.8.1 Description: The issue is related to a lack of authorization in Apache Airflow, allowing an authenticated user to access the source code of a DAG they do not have access to. This issue is considered low...
PT-2024-1870 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab EE versions 16.4 through 16.7.5 GitLab EE versions 16.8 through 16.8.2 GitLab EE versions 16.9 through 16.9.0 Description: An issue has been discovered in GitLab EE, where users with the Guest role can change Custom dashboard projects...
Lemmy Authorization Issues Vulnerability
Lemmy is Lemmy open source free software for building social news aggregators and web forums. An authorization issue vulnerability exists in Lemmy version 0.17.0 through versions prior to 0.19.1, which stems from the fact that any authenticated user can gain access to arbitrary private message...
