2568 matches found
Mattermost Authorization Issues Vulnerability
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an authorization issue vulnerability that stems from a failure to properly authorize a request when the ability to view archived channels is disabled, which could be exploited b...
Mattermost 安全漏洞
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an authorization issue vulnerability that stems from a failure to properly authorize a request when the ability to view archived channels is disabled, which could be exploited b...
Cisco Expressway Edge Authorization Issues Vulnerability
Cisco Expressway Edge Cisco Expressway-E is a secure access application from Cisco USA. Cisco Expressway Edge suffers from an authorization issue vulnerability that stems from insufficient authorization checks for mobile and remote access users, which can be exploited by an authenticated remote...
Online Eyewear Shop 授权问题漏洞
Online Eyewear Shop is an online eyewear store by the individual developer Carlo Montero. An authorization issue vulnerability exists in Online Eyewear Shop version 1.0 that stems from improper authorization...
PT-2025-2092 · Drupal · Drupal Cms +1
Name of the Vulnerable Software and Affected Versions: Drupal Smart IP Ban versions 7.X-1.0 through 7.X-1.0 Description: The issue is related to insufficient authorization mechanisms in the Smart IP Ban module for the Drupal CMS, allowing a remote attacker to view and modify settings. This can le...
Rockwell Automation Pavilion8 License Issue Vulnerability (CNVD-2024-40835)
Rockwell Automation Pavilion8 is a model prediction console from Rockwell Automation. Rockwell Automation Pavilion8 suffers from an authorization issue vulnerability that stems from an incorrect privilege matrix, which can be exploited by an attacker to access unauthorized functionality...
AutomationDirect DirectLogic H2-DM1E 授权问题漏洞
AutomationDirect DirectLogic H2-DM1E is a programmable logic controller from AutomationDirect. An authorization issue vulnerability exists in AutomationDirect DirectLogic H2-DM1E that stems from insecure authentication...
Dell InsightIQ Authorization Issues Vulnerability
Dell InsightIQ is a performance monitoring and reporting tool from Dell USA. Dell InsightIQ suffers from an authorization issue vulnerability that stems from improper privilege management. A highly privileged attacker with local access rights could exploit this vulnerability to cause a denial of...
CVE-2024-7727 HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.32 - Missing Authorization in multiple functions via h5vp_ajax_handler
The HTML5 Video Player – mp4 Video Player Plugin and Block plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple functions called via the 'h5vpajaxhandler' ajax action in all versions up to, and including, 2.5.32. This makes it possible fo...
SAP NetWeaver 安全漏洞
SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform mainly for SAP applications to provide development and runtime environment. SAP NetWeaver suffers from an authorization issue vulnerability that stems from a lack of authorization...
Bareos 授权问题漏洞
Bareos is a suite of open source data backup storage and recovery software from Bareos, Germany. An authorization issue vulnerability exists in Bareos that stems from an ACL check not applying to the full form when executing commands in bconsole...
Microsoft Windows 授权问题漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An Authorization Issues vulnerability exists in Microsoft Windows. An attacker exploiting this vulnerability could cause a denial of service on the system. The following products and...
CVE-2024-8042
CVE-2024-8042 affects Rapid7 Insight Platform versions from November 2019 through August 14, 2024, due to missing authorization that enables an attacker to intercept local requests to set the name and description of a new user group. This could lead to an empty user group being created for the in...
iStyle @cosme 安全漏洞
iStyle @cosme is a comprehensive cosmetics and beauty website from iStyle Japan. A security vulnerability exists in iStyle @cosme that stems from improper authorization in the custom URL scheme issue handler, which allows an attacker to direct users to arbitrary websites via a vulnerable...
PT-2024-31481 · Unknown · @Cosme App For Ios +1
Name of the Vulnerable Software and Affected Versions: @cosme App for Android versions prior to 5.69.0 @cosme App for iOS versions prior to 6.74.0 Description: The issue is related to improper authorization in the handler for the custom URL scheme, which allows an attacker to lead a user to acces...
CVE-2024-7622 Revision Manager TMC <= 2.8.19 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending
The Revision Manager TMC plugin for WordPress is vulnerable to unauthorized arbitrary email sending due to a missing capability check on the aajaxQuickEmailTestCallback function in all versions up to, and including, 2.8.19. This makes it possible for authenticated attackers, with subscriber-level...
QNAP Systems Music Station 授权问题漏洞
QNAP Systems Music Station is a music playback and management application from QNAP Systems. An authorization issue vulnerability exists in QNAP Systems Music Station version 5.4.0 and prior versions, which stems from the inclusion of an incorrect authentication vulnerability. An attacker...
Red Hat Migration Toolkit for Virtualization 授权问题漏洞
Red Hat Migration Toolkit for Virtualization is a toolkit from Red Hat, Inc. An authorization issue vulnerability exists in Red Hat Migration Toolkit for Virtualization, which arises from the component Forklift Controller not validating the authorization header beyond ensuring that credential...
Foreman 授权问题漏洞
Foreman is Foreman's open source set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. Foreman has an authorization issue vulnerability that stems from modproxy not proper...