Microsoft Azure Active Directory Connect 授权问题漏洞

Microsoft Azure Active Directory Connect ADC is a service from the U.S.-based Microsoft that provides identity and access management in the cloud. An authorization issue vulnerability exists in Microsoft Microsoft Azure Active Directory Connect. The following products and versions are...

Magento Commerce 授权问题漏洞

Magento Commerce is to provide a best-in-class shopping experience without the need for developer support. Magento Commerce has an authorization issue vulnerability that exists due to insufficient authorization checks. A remote administrator can bypass implemented security restrictions and gain...

Jetbrains JetBrains TeamCity授权问题漏洞

JetBrains TeamCity is a distributed build management and continuous integration tool from JetBrains Jetbrains, a Czech company. The tool provides continuous unit testing, code quality analysis, and build issue analysis reporting.An authorization issue vulnerability exists in versions prior to...

Mitsubishi Electric MELSEC iQ-R series 授权问题漏洞

The Mitsubishi Electric MELSEC iQ-R series is a programmable logic controller from Mitsubishi Electric, Japan. An authorization issue vulnerability exists in the Mitsubishi Electric MELSEC iQ-R series, which arises from a flaw in the logic of the product login module. An attacker could lock out a...

Corero Network Security Corero SecureWatch Managed Services 授权问题漏洞

Corero Network Security Corero SecureWatch Managed Services is a provider of Corero SecureWatch Managed Services from Corero Network Security, USA. An authorization issue vulnerability exists in Coreo SecureWatch Managed Services 9.7.2.0020, which allows an attacker to perform actions that do not...

JetBrains Hub 授权问题漏洞

JetBrains Hub is a web-based application from JetBrains Czech Republic. The application is able to integrate multiple JetBrains team tools together. An authorization issue vulnerability exists in versions prior to JetBrains Hub 2021.1.13402, which stems from the fact that it is possible for the...

Owncloud ownCloud 授权问题漏洞

Owncloud ownCloud is a personal cloud storage solution from the US-based ownCloud Owncloud. An authorization issue vulnerability exists in ownCloud Server, which stems from a session cookie not being reset after authenticating against a public link. An attacker could exploit this vulnerability to...

Akaunting 授权问题漏洞

Akaunting is an application from Akaunting that provides all the tools you need to manage your money online. An authorization issue vulnerability exists in Akaunting versions 2.1.12 and earlier. An attacker can proxy a password reset request through a running instance of Akaunting if the attacker...

Graylog permission permission and access control issue vulnerability (CNVD-2021-61088)

Graylog is a centralized log management solution from Graylog, Inc. The product supports capturing, storing, and analyzing logs in real-time, among other things. graylog suffers from a permission permission and access control issue vulnerability that stems from a session ID leak in audit logs pri...

Apple iOS和Apple iPadOS 授权问题漏洞

Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple iOS 14.7 and iPadOS 14.7 are vulnerable to an authorization issue in the OS Kernel subsystem logic. Apple iOS 14.7 and iPad...

Aruba AOS-CX 授权问题漏洞

Aruba AOS-CX is a modern programmable network from Aruba, USA. A security vulnerability exists in the Aruba AOS-CX, details of this vulnerability are not available at this time, please follow the vendor's homepage for more information...

Stormshield SES Evolution 授权问题漏洞

Stormshield SES Evolution is a security solution from the French company Stormshield. An authorization issue vulnerability exists in SES Evolution that originates from a vulnerability that allows the deletion of some security policies when accessing a computer on which the management console is...

Stormshield SES Evolution 授权问题漏洞

Stormshield SES Evolution is a security solution from the French company Stormshield. An authorization issue vulnerability exists in SES Evolution that originates from a vulnerability that allows some security policies to be read while accessing a computer with the management console installed, a...

Stormshield SES Evolution 授权问题漏洞

Stormshield SES Evolution is a security solution from the French company Stormshield. An authorization issue vulnerability exists in SES Evolution that originates from allowing some security policies to be updated on computers with access to a management console installed, and affects the followi...

Microsoft Exchange Server 授权问题漏洞

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides email access, storage, forwarding, voice mail, email filtering and screening, and other features. An authorization issue vulnerability exists in Microsoft Exchange Server. The...

QSAN Storage Manager Authorization Issues Vulnerability (CNVD-2021-50945)

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. An authorization issue vulnerability exists in QSAN Storage Manager version 3.3.1 build 202101041800 and earlier versions, which can be exploited by an attacker to log in via an administrator account,...

QSAN Storage Manager Authorization Issues Vulnerability

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. An authorization issue vulnerability exists in QSAN Storage Manager prior to version 3.3.1 build 202101041800, which stems from the product misassigning permissions on critical resource management and can...

ThinkSAAS Authorization Issues Vulnerabilities

ThinkSAAS is an open source community development system based on PHP and MySQL. ThinkSAAS version 2.7 suffers from an authorization issue vulnerability, which can be exploited by remote attackers to modify the description of any user's photo via the "photoid\%5B\%5D" and...

Bluetooth 授权问题漏洞

Bluetooth is a Bluetooth Special Interest Group SIG standards organization standard for short-range wireless technology for exchanging data between fixed and mobile devices over short distances using UHF radio waves in the ISM band from 2.402 GHz to 2.48 GHz and for building personal area network...

IBM Security Guardium License Issue Vulnerability (CNVD-2021-49053)

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. An authorization issue vulnerability exists in IBM Security Guardium...