CVE-2023-41073

An authorization issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access protected user data...

CVE-2023-41073

An authorization issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access protected user data...

CVE-2023-41078

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14. An app may be able to bypass certain Privacy preferences...

CVE-2023-41078

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14. An app may be able to bypass certain Privacy preferences...

CVE-2023-41078

CVE-2023-41078 is an authorization/privacy issue addressed in macOS Sonoma 14. The vulnerability involves an app potentially bypassing certain Privacy preferences due to flawed state management, and Apple’s fix is included with Sonoma 14. Connected documents consistently describe the root cause a...

Apache Airflow Authorization Problem Vulnerability (CNVD-2023-72233)

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. Apache Airflow versions prior to 2.7.1 have an authorization issue vulnerability th...

Apache Druid < 0.22.0 Incorrect Authorization

In the Druid ingestion system, the InputSource is used for reading data from a certain data source. However, the HTTP InputSource allows authenticated users to read data from other sources than intended, such as the local file system, with the privileges of the Druid server process. This is not a...

Supcon InPlant SCADA Authorization Issues Vulnerability

Supcon InPlant SCADA is a SCADA program from Supcon. An authorization issue vulnerability exists in Supcon InPlant SCADA that stems from the presence of an unknown function in Project.xml, which results in improper authentication...

Zoom Client Authorization Issues Vulnerability

Zoom Client is a video conferencing client application from Zoom Inc. that supports multiple platforms. Zoom Client suffers from an authorization issue vulnerability that stems from the presence of incorrect authentication, which could allow an authenticated user to perform a denial of service vi...

Apache Superset REST API Authorization Issues Vulnerability

Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. Apache Superset version 2.1.0 and prior versions suffer from an authorization issue vulnerability that stems from incorrect REST API permissions. An attacker can exploit this vulnerability to cau...

PT-2023-22915 · Samsung · One Ui Home

Name of the Vulnerable Software and Affected Versions: One UI Home versions prior to SMR Sep-2023 Release 1 Description: The issue is related to an improper authorization vulnerability in the FolderContainerDragDelegate component. This vulnerability allows physical attackers to change some settin...

PT-2023-28509 · WordPress · User Activity Log

Name of the Vulnerable Software and Affected Versions: User Activity Log WordPress plugin versions prior to 1.6.6 Description: The issue is related to a lack of proper authorization in the User Activity Log WordPress plugin, allowing any authenticated users to export activity logs and retrieve...

PT-2023-19188 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions prior to 3.10.0 Description: An authorization/sensitive information disclosure issue was identified in GitHub Enterprise Server, allowing a fork to retain read access to an upstream repository after its...

iCMS 授权问题漏洞

iCMS is a software application. An efficient and simple content management system built with PHP and MySQL. An authorization issue vulnerability exists in iCMS versions prior to 2.16.1, which originates from an authentication cookie not being updated after a successful login...

ZOHO ManageEngine ADManager Plus 授权问题漏洞

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks, such as batch management of user...

Zulip 授权问题漏洞

Zulip is a powerful open source group chat application from Zulip, Inc. for combining the immediacy of real-time chat with the productivity benefits of threaded conversations. An authorization issue vulnerability exists in Zulip 6.0 and prior versions, which stems from insufficient authorization...

OpenRapid RapidCMS 授权问题漏洞

OpenRapid RapidCMS is OpenRapid open source a fast and simple to use CMS system. An authorization issue vulnerability exists in OpenRapid RapidCMS version 1.3.1, which stems from the fact that incorrect manipulation of the parameters password/password2 can lead to weak password recovery...

Ruijie Networks RG-EW1200G 授权问题漏洞

The Ruijie Networks RG-EW1200G is a wireless router from Ruijie Networks China. An authorization issue vulnerability exists in the Ruijie Networks RG-EW1200G, which stems from improper authentication in file/api/sys/login...

Dell PowerScale OneFS License Issue Vulnerability (CNVD-2023-64215)

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. Dell PowerScale OneFS suffers from an authorization issue vulnerability that stems from incorrect default permissions. An attacker could exploit this vulnerabilit...

Google Android onCreate module authorization issue vulnerability

Google Android is a Linux-based open source operating system from Google. Google Android onCreate module has an authorization issue vulnerability that stems from a lack of permission checking in the onCreate module of ManagePermissionsActivity.java, with one possible way to bypass the Restore...