JetBrains Ktor framework 授权问题漏洞

JetBrains Ktor is a web application framework from JetBrains Czech Republic. An authorization issue vulnerability exists in JetBrains Ktor prior to 1.6.4, which stems from improper implementation of nonce authentication in the OAuth2 authentication process. No detailed vulnerability details are...

Samsung Pass 授权问题漏洞

Samsung Pass is a secure and easy way to log in to websites and applications on your cell phone using biometrics from Samsung South Korea. An Access Authentication Error vulnerability exists in versions prior to Samsung Pass 3.0.02.4, which stems from a lack of proper authentication logic in...

Jenkins 安全漏洞

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project. an authorization issue vulnerability exists in Jenkins, which stems from the product allowing any agent to read and write ...

Jenkins 授权问题漏洞

Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plug-ins to support building, deploying and automating any project . Jenkins has an authorization issue vulnerability that stems from a lack of authentication measures or insufficient...

Fimer Aurora 授权问题漏洞

Fimer Aurora is a scalable web-based power plant management platform from Fimer Italy. It is used to enable customers to remotely manage solar power plants in a variety of markets. Fimer Aurora suffers from an authorization issue vulnerability that arises from obtaining plant information without...

Huawei Smartphone License Issue Vulnerability (CNVD-2021-84243)

The Huawei Smartphone is a smartphone from the Chinese company Huawei. An authorization issue vulnerability exists in multiple Huawei devices, which stems from the product allowing unauthorized access to certain files. An attacker can exploit the vulnerability to potentially tamper with files...

GitLab 授权问题漏洞

GitLab is a self-hosted, Git version control system project repository application developed using Ruby on Rails by GitLab, Inc. The application can be used to access a project's file content, commit history, bug list, etc. An authorization issue vulnerability exists in GitLab CE/EE, which can be...

CVE-2021-30810

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15, watchOS 8, tvOS 15. An attacker in physical proximity may be able to force a user onto a malicious Wi-Fi network during device setup...

CVE-2021-30810

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15, watchOS 8, tvOS 15. An attacker in physical proximity may be able to force a user onto a malicious Wi-Fi network during device setup...

CVE-2021-30810

CVE-2021-30810: An authorization issue in Apple's Wi-Fi subsystem was fixed via improved state management. A nearby attacker could coerce a user into a malicious Wi-Fi network during device setup. Affected platforms include iOS 15/iPadOS 15, watchOS 8, and tvOS 15; patch available in those updates.

ShinHer StudyOnline System Licensing Issue Vulnerability (CNVD-2021-101182)

ShinHer StudyOnline System is a school system from ShinHer, China. ShinHer StudyOnline System is vulnerable to an authorization issue, which stems from the fact that the teacher editing function of ShinHer StudyOnline System is not controlled by permissions. An attacker could use this vulnerabili...

Tibco Ebx 授权问题漏洞

Tibco Ebx is a software from Tibco India that supports integration to manage enterprise data assets. An authorization issue vulnerability exists in TIBCO EBX Web Server, which arises from a problem with the software's validation of user-submitted passwords, which could be exploited to allow an...

IBM Sterling B2B Integrator Licensing Issue Vulnerability (CNVD-2021-87017)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with different partner communities. IBM Sterling B2B Integrator Standard Edition versions 5.2.0...

IR615 Router authorization issue vulnerability

The IR615 Router is a 4G industrial router from Rimu Technologies of China. The IR615 Router is vulnerable to an authorization issue that could be exploited by an attacker to take full control of the product and execute code on the internal network to which the product is connected...

Zammad 安全漏洞

Zammad is a suite of ticket management software from Zammad, a German company. Zammad is vulnerable to authorization issues in versions prior to 5.0.1, which stem from a lack of authentication measures or insufficient authentication strength in the network system or product. An attacker could use...

Netapp NetApp Cloud Manager 授权问题漏洞

Netapp NetApp Cloud Manager is an application from Netapp, Inc. which provides centralized orchestration of hybrid cloud storage and data management services. An authorization issue vulnerability exists in NetApp Cloud Manager, which arises from the product not validating the identity of a user...

IBM TS7700 License Issue Vulnerability

The Ibm Ts7700 is a mainframe virtual tape solution from Ibm, Inc. for optimizing data security and business continuity. An authorization issue vulnerability exists in the IBM TS7700 Management Interface, which can be exploited by an attacker to gain administrative access to the Management...

Wire licensing issue vulnerability

Wire is a chat software from a personal developer. The software supports Web, WindowsiOS, Android, and OS X platforms, has group functionality, the ability to make voice calls, send photos and its ingenious way of saying hello, PING. Wire suffers from an authorization issue vulnerability that...

IBM Cloud Pak for Security Authorization Issues Vulnerability

IBM Cloud Pak for Security CP4S is an open security platform from IBM that connects to your existing data sources, generates deeper insights, and enables you to act faster with automation. IBM Cloud Pak for Security CP4S suffers from an authorization issue vulnerability in versions 1.7.0.0,...

Tad Web 访问控制错误漏洞

Tad Web is a multiplayer web module by the individual developer of Tad in Taiwan, China. An authorization issue vulnerability exists in Tad Web, which can be exploited by attackers to view announcements and upload files without logging in...