WordPress plugin PixelYourSite–Your smart PIXEL (TAG) & API Manager 授权问题漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2024-26072 · Kperfmon · Kperfmon

Name of the Vulnerable Software and Affected Versions: kperfmon versions prior to SMR Sep-2024 Release 1 Description: The issue is related to incorrect authorization in kperfmon, allowing local attackers to access information related to performance, including app usage. Recommendations: For...

Cisco NX-OS Software License Issue Vulnerability (CNVD-2024-37701)

Cisco NX-OS Software is a set of data center-grade operating system software for switches from the U.S. company Cisco Cisco. Cisco NX-OS Software has an authorization issue vulnerability that stems from insufficient security restrictions when executing commands from the Bash shell. An attacker...

Dell Power Manager Authorization Issues Vulnerability

Dell Power Manager is an application from Dell USA that is used to configure battery maintenance practices to maximize the battery life of your system. An authorization issue vulnerability exists in Dell Power Manager version 3.15.0 and prior versions, which arises from containing incorrect...

SAP Document Builder Authorization Issues Vulnerability

SAP Document Builder is a content-driven cross-application solution from SAP. An authorization issue vulnerability exists in SAP Document Builder that stems from not performing required authorization checks for certain modules. An attacker could exploit the vulnerability to cause unauthorized...

SAP Student Life Cycle Management Authorization Issue Vulnerability

SAP Student Life Cycle Management is a student life cycle management system from SAP. An authorization issue vulnerability exists in SAP Student Life Cycle Management that stems from a failure to perform proper authorization checks on authenticated users, which could be exploited by an attacker t...

PT-2024-7921 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: The issue is related to insufficient capability checks, allowing a remote attacker to delete data, specifically badges that a user does not have permission to access. This is due to a lack o...

Yoga Class Registration System 授权问题漏洞

Yoga Class Registration System is a yoga class registration system by the individual developer Carlo Montero. An authorization issue vulnerability exists in Yoga Class Registration System version 1.0, which stems from unknown code in the file /classes/Users.php?f=save of the component Add User...

Simple Online Bidding System 授权问题漏洞

Simple Online Bidding System is an online bidding system by oretnom23 individual developers. An authorization issue vulnerability exists in Simple Online Bidding System version 1.0, which stems from an error that can lead to improper authorization...

SAP Document Builder 安全漏洞

SAP Document Builder is a content-driven cross-application solution from SAP. An authorization issue vulnerability exists in SAP Document Builder that stems from not performing required authorization checks for certain modules. An attacker could exploit the vulnerability to cause unauthorized...

PT-2024-18272 · WordPress · Woocommerce Customers Manager

Name of the Vulnerable Software and Affected Versions: WooCommerce Customers Manager WordPress plugin versions prior to 30.2 Description: The issue concerns a lack of authorization and CSRF protection in various AJAX actions within the plugin, allowing any authenticated user to update, delete, or...

SolarWinds Access Rights Manager Authorization Issues Vulnerability (CNVD-2024-34982)

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. An authorization issue vulnerability exists in SolarWinds Access Rights Manager, which can be exploited by an attacker to delete arbitrary files and obtain sensitive information...

SAP PDCE Authorization Issues Vulnerability

SAP PDCE is a solution from SAP Germany. It is designed to help companies manage and optimize the process of integrating and enriching personal data. SAP PDCE suffers from an authorization issue vulnerability that stems from not performing the necessary authorization checks on authenticated users...

SAP CRM Authorization Issues Vulnerability

SAP CRM is a customer relationship management system from SAP in Germany. SAP CRM suffers from an authorization issue vulnerability that stems from not performing the necessary authorization checks on authenticated users, which could be exploited by an attacker to cause privilege escalation and...

SolarWinds Access Rights Manager Authorization Issues Vulnerability (CNVD-2024-34985)

SolarWinds Access Rights Manager ARM is a tool for managing and monitoring user access rights. It helps organizations streamline the rights management process and improve security and compliance. An authorization issue vulnerability exists in SolarWinds Access Rights Manager, which can be exploit...

SAP Enable Now Authorization Issues Vulnerability

SAP Enable Now is a collaborative content creation, management and sharing platform from SAP. The platform is primarily used for e-learning and training in SAP and non-SAP systems. SAP Enable Now suffers from an authorization issue vulnerability that stems from a lack of authorization checking,...

SolarWinds Access Rights Manager Authorization Issues Vulnerability

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. An authorization issue vulnerability exists in SolarWinds Access Rights Manager, which can be exploited by an attacker to gain domain administrator access...

CVE-2024-29120 Apache StreamPark: Information leakage vulnerability

In Streampark version 2.1.4, when a user logged in successfully, the Backend service would return "Authorization" as the front-end authentication credential. User can use this credential to request other users' information, including the administrator's username, password, salt value, etc. ...

SolarWinds Access Rights Manager 授权问题漏洞

SolarWinds Access Rights Manager ARM is a tool for managing and monitoring user access rights. It helps organizations streamline the rights management process and improve security and compliance. An authorization issue vulnerability exists in SolarWinds Access Rights Manager, which can be exploit...

SolarWinds Access Rights Manager 授权问题漏洞

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. An authorization issue vulnerability exists in SolarWinds Access Rights Manager, which can be exploited by an attacker to gain domain administrator access...