Jenkins 信息泄露漏洞

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An authorization issue...

Istio 授权问题漏洞

Istio is a set of open platforms for connecting, managing, and securing microservices. Istio is vulnerable to an authorization issue. An attacker could use this vulnerability to bypass the program's authorization service...

CVE-2021-20538

IBM Cloud Pak for Security CP4S 1.5.0.0 and 1.5.0.1 could allow a user to obtain sensitive information or perform actions they should not have access to due to incorrect authorization mechanisms. IBM X-Force ID: 198919...

Atlassian Connect Spring Boot 授权问题漏洞

Atlassian Connect Spring Boot is an application component from Atlassian Australia. A Spring Boot starter program is provided for building Atlassian Connect add-ons for JIRA Software, Service Desk and Core and Confluence. An authorization issue vulnerability exists in Atlassian Connect Spring Boo...

Dell dbutil Driver License Issue Vulnerability

DELL Dell dbutil Driver is an application from Dell DELL USA. A driver for Dell devices is provided. An authorization issue vulnerability exists in DBUtil that stems from an incorrect access restriction in the Dell dbutil Driver dbutil 2 .sys. No detailed vulnerability details are provided at thi...

HPE Edgeline Infrastructure Manager Authorization Issues Vulnerability

HPE Edgeline Infrastructure Management is a software from Hewlett-Packard HPE for data center environments to manage Edge devices. An authorization issue vulnerability exists in Edgeline Infrastructure Manager versions prior to 1.22 that stems from a failure to perform adequate authorization...

Cisco SD-WAN vManage Authorization Issues Vulnerability

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. An authorization issue vulnerability exists in the messaging service of Cisco SD-WAN vManage, which can be exploited by an attacker to invoke elevated privilege operations,...

Hongdian H8922 授权问题漏洞

The Hongdian H8922 is a router from China's Hongdian Corporation Hongdian. An authorization issue vulnerability exists in the Hongdian H8922 3.0.5 devices that allows superuser access to the shell...

GitLab Authorization Issues Vulnerability (CNVD-2021-34554)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An authorization issue vulnerability exists in GitLab CE/...

Dell dbutil Driver 安全漏洞

DELL Dell dbutil Driver is an application from Dell DELL USA. A driver for Dell devices is provided. An authorization issue vulnerability exists in DBUtil that stems from an incorrect access restriction in the Dell dbutil Driver dbutil 2 .sys. No detailed vulnerability details are provided at thi...

F5 BIG-IP APM 授权问题漏洞

F5 BIG-IP APM is a suite of access and security solutions from F5 USA. The product provides unified access to business-critical applications and networks. An authorization issue vulnerability exists in BIG-IP APM that stems from an error when processing authentication requests. The following...

GitLab 授权问题漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An authorization issue vulnerability exists in GitLab CE/...

Fortinet FortiWAN 授权问题漏洞

Fortinet FortiWAN is a network appliance from Fortinet, Inc. It is used to perform load balancing and fault tolerance between different networks. An authorization issue vulnerability exists in Fortinet FortiWAN that stems from an error in the authentication process. The following products and...

Apache Ozone Authorization Problem Vulnerability

Apache Ozone is a scalable, redundant and distributed object store for Hadoop and cloud-native environments. An authorization issue vulnerability exists in Apache Ozone Cluster versions prior to 1.1.0 related to the affected version allowing access to keys and buckets via curl commands or...

Google Android Authorization Issues Vulnerability (CNVD-2021-31238)

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android suffers from an authorization issue vulnerability that stems from misauthorization of the debugging command, which can be exploited by an attacker to gain unauthorized acces...

Qnap Systems QNAP HBS 3 Authorization Issues Vulnerability

Qnap Systems QNAP HBS 3 is an application from China Weilian Qnap Systems. A comprehensive data backup and disaster recovery solution. An authorization issue vulnerability exists in HBS 3 Hybrid Backup Sync that stems from a failure to perform adequate authorization checks. An attacker could use...

CloudBees Jenkins CloudBees CD Plugin Authorization Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . LTS is a long-term support for...

MediaWiki License Issues Vulnerability

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. It can be used to deploy in-house knowledge management and content management systems. An authorization issue vulnerability exists in MediaWiki versions prior to 1.31.12 and versions prior to...

Devolutions Server Authorization Issues Vulnerability

Devolutions Server is an application from Devolutions Canada. It provides a full-featured shared account and password management solution. An authorization issue vulnerability exists in Devolutions Server versions prior to 2020.3 that stems from an authentication outage for Windows domain users. ...

Appspace 授权问题漏洞

Appspace is an application from the US-based Appspace Inc. Provides built-in content strategies to easily implement and execute team communication programs. Appspace version 6.2.4 suffers from an authorization issue vulnerability that stems from being susceptible to authentication mechanism...