Inventory Management System Authorization Issues Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. An authorization issue vulnerability exists in Bdtask Wholesale Inventory Management System 20240311 and prior versions, which stems from a session fixation issue...

Ruijie Networks RG-NBS2009G-P Authorization Issues Vulnerability

Ruijie Networks RG-NBS2009G-P is a network security product from China's Ruijie Networks that is commonly used as an enterprise-class network border firewall. The Ruijie Networks RG-NBS2009G-P suffers from an authorization issue vulnerability that stems from the inclusion of an unknown function i...

Food Waste Management System Authorization Issues Vulnerability

Food waste management system is a food waste management system by Kishor L Individual Developer. An authorization issue vulnerability exists in Food Waste Management System version 1.0, which arises from an incorrect operation resulting in improper authorization...

Fortinet FortiPortal Authorization Issues Vulnerability

Fortinet FortiPortal is an advanced, feature-rich hosted security analysis and management support tool for Fortinet's FortiGate, FortiWiFi and FortiAP product lines, available as a virtual machine for MSPs. An authorization issue vulnerability exists in Fortinet FortiPortal that stems from the...

Fortinet FortiOS Authorization Issues Vulnerability

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with a variety of security features such as firewall, antivirus, IPSec/SSLVPN, Web content filtering, and antispam. An authorization issue...

Fortinet FortiPortal 授权问题漏洞

Fortinet FortiPortal is an advanced, feature-rich hosted security analysis and management support tool for Fortinet's FortiGate, FortiWiFi and FortiAP product lines, available as a virtual machine for MSPs. An authorization issue vulnerability exists in Fortinet FortiPortal that stems from the...

IBM DS8900F HMC License Issue Vulnerability

The IBM DS8900F HMC is an enterprise-class disk storage system from International Business Machines IBM for storing and managing large-scale enterprise data. The IBM DS8900F HMC suffers from an authorization issue vulnerability that can be exploited by an attacker to bypass authentication...

SAP ABAP Platform 安全漏洞

SAP ABAP Platform is an ABAP-based SAP solution from SAP. SAP ABAP Platform has an authorization issue vulnerability that stems from a lack of authorization checks. An attacker with a business user account in SAP ABAP Platform could exploit the vulnerability to change the privacy settings of a jo...

JetBrains TeamCity Authorization Issues Vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity has an authorization issue...

JFrog Artifactory Authorization Issues Vulnerability

JFrog Artifactory is an open source general-purpose Artifact repository manager from Israel's JFrog that supports clustering and high-availability Docker registries and provides an end-to-end automation solution for tracking artifacts from development to production. An authorization issue...

BIT-GITLAB-2020-13263

An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthorized users to impersonate as a maintainer to perform limited actions...

BIT-GITLAB-2021-22186

An authorization issue in GitLab CE/EE version 9.4 and up allowed a group maintainer to modify group CI/CD variables which should be restricted to group owners...

BIT-GITLAB-2022-1124

An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0, allowing Guest project members to access trace log of jobs when it is enabled...

BIT-GITLAB-2022-4143

An issue has been discovered in GitLab affecting all versions starting from 15.7 before 15.8.5, from 15.9 before 15.9.4, and from 15.10 before 15.10.1 that allows for crafted, unapproved MRs to be introduced and merged without authorization...

BIT-GITLAB-2023-4700 Missing Authorization in GitLab

An authorization issue affecting GitLab EE affecting all versions from 14.7 prior to 16.3.6, 16.4 prior to 16.4.2, and 16.5 prior to 16.5.1, allowed a user to run jobs in protected environments, bypassing any required approvals...

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity has an authorization issue...

Mattermost Authorization Issue Vulnerability (CNVD-2024-13545)

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an authorization issue vulnerability that stems from an inability to check the "inviteguest" permission when inviting people from other teams to join the team. A privileged...

Dell Secure Connect Gateway Authorization Issues Vulnerability

Dell Secure Connect Gateway is a secure connectivity gateway from Dell USA. Dell Secure Connect Gateway has an authorization issue vulnerability that stems from the Policy Manager containing an incorrect authorization vulnerability. No detailed vulnerability details are provided at this time...

Dell Secure Connect Gateway 授权问题漏洞

Dell Secure Connect Gateway is a secure connectivity gateway from Dell USA. Dell Secure Connect Gateway has an authorization issue vulnerability that stems from the Policy Manager containing an incorrect authorization vulnerability. No detailed vulnerability details are provided at this time...

PT-2024-22157 · Sirv · Sirv Image Optimizer

Name of the Vulnerable Software and Affected Versions: Sirv Image Optimizer, Resizer and CDN versions through 7.2.0 Description: A Missing Authorization issue affects the Image Optimizer, Resizer and CDN – Sirv. Recommendations: For versions through 7.2.0, update to a version that contains a fix...