CVE-2023-5521

Incorrect Authorization in GitHub repository tiann/kernelsu prior to v0.6.9...

PT-2023-32151 · Tiann · Kernelsu

Name of the Vulnerable Software and Affected Versions: tiann/kernelsu versions prior to 0.6.9 Description: The issue concerns incorrect authorization in the tiann/kernelsu GitHub repository. This allows for root takeover via signature spoofing. Recommendations: For versions prior to 0.6.9, update...

Huawei HarmonyOS and EMUI Licensing Issues Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. Huawei HarmonyOS and EMUI are vulnerable to an...

Yifan YF325 Authorization Issues Vulnerability

Yifan YF325 is a wireless router from Yifan. An authorization issue vulnerability exists in Yifan YF325 v1.020221108. An attacker can exploit this vulnerability to execute arbitrary commands...

Uptime Kuma License Issue Vulnerability

Uptime Kuma is an easy-to-use, self-hosted monitoring tool from the individual developer Louis Lam. An authorization issue vulnerability exists in Uptime Kuma versions prior to 1.23.3, which stems from a lack of session token validation after a password change or after a period of inactivity, and...

Information disclosure

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent Linux, macOS, Windows before build 36119...

PT-2023-29312 · Netis Systems · N3Mv2

Name of the Vulnerable Software and Affected Versions: NETIS SYSTEMS N3Mv2 version 1.0.1.865 Description: An issue in the authorization component of the HTTP request allows a remote attacker to cause a denial of service. Recommendations: For version 1.0.1.865, consider restricting access to the...

CVE-2023-4997

CVE-2023-4997 affects ProIntegra Uptime DC software prior to version 2.0.0.33940. The issue is improper authorization that allows regular users to change passwords of all accounts, including administrators, enabling privilege escalation. The CVE is documented with CVSS v3.1 signals: AV:N/AC:L/PR:...

Misskey Authorization Issues Vulnerabilities

Misskey is a suite of micro-blogging platforms. An authorization issue vulnerability exists in versions of Misskey prior to 2023.9.0 that stems from the ability to bypass authentication in the Bull dashboard...

Field Logic DataCube4 Authorization Issues Vulnerability

Field Logic DataCube4 is a small measurement terminal system from Field Logic. Field Logic DataCube4 suffers from an authorization issue vulnerability that stems from improper authentication in the component web api...

CVE-2023-2233

An improper authorization issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.2.8, all versions starting from 16.3 before 16.3.5 and all versions starting from 16.4 before 16.4.1. It allows a project reporter to leak the owner's Sentry instance projects...

ZZZCMS Authorization Issues Vulnerabilities

ZZZCMS zzzphp is a content management system CMS. An authorization issue vulnerability exists in ZZZCMS version 2.1.7, which stems from improper privilege management...

CVE-2023-41073

An authorization issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access protected user data...

CVE-2023-41073

An authorization issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access protected user data...

CVE-2023-41078

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14. An app may be able to bypass certain Privacy preferences...

CVE-2023-41078

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14. An app may be able to bypass certain Privacy preferences...

Authorization

An authorization issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access protected user data...

Dell NetWorker Authorization Issues Vulnerability

Dell NetWorker is an application from Dell USA Inc. It provides forum discussion capabilities for Dell Inc. An authorization issue vulnerability exists in Dell NetWorker version 19.7, which originated from a vulnerability that allows an unauthenticated attacker to manipulate commands to gain full...

CVE-2023-41073

CVE-2023-41073 describes an authorization issue resolved by improved state management. Affected platforms include macOS Ventura 13.6, macOS Monterey 12.7, macOS Sonoma 14, iOS 16.7 and 17, iPadOS 16.7 and 17, tvOS 17, and watchOS 10. The vulnerability could allow an app to access protected user d...

CVE-2023-41073

An authorization issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access protected user data...