AdRem NetCrunch Authorization Issues Vulnerability

Adrem Netcrunch is a device monitoring software from the American company Adrem. The software monitors Windows, Linux, Mac OS X, BSD, NetWare, and SNMP devices based on SNMP sources, Windows event logs, and Syslog servers. AdRem NetCrunch 10.6.0.4587 suffers from an authorization issue...

SolarWinds N-Central 授权问题漏洞

SolarWinds N-Central is an IT device management platform from SolarWinds Singapore. The platform provides proactive monitoring of everything on a customer's network, not just servers and workstations, and rapid troubleshooting using features such as MFA, antivirus, integrated endpoint detection a...

About the security content of watchOS 6.2.8 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

Western Digital My Cloud OS 5 Licensing Issue Vulnerability

Western Digital My Cloud is a personal cloud storage device from Western Digital, Inc. An authorization issue vulnerability exists in versions prior to Western Digital My Cloud OS 5.07.118, which could be exploited by attackers to gain access to the device...

Western Digital My Cloud 授权问题漏洞

Western Digital My Cloud is a personal cloud storage device from Western Digital, Inc. An authorization issue vulnerability exists in versions prior to Western Digital My Cloud OS 5.07.118, which could be exploited by attackers to gain access to the device...

Salvoravida React-adal Authorization Issues Vulnerability

Salvoravida React-adal is a JS language based codebase for interacting with Azure Active Directory by Salvoravida Individual Developer. react-adal suffers from an authorization issue vulnerability that stems from the fact that for specially designed JWT tokens and request URLs, it is possible to...

Microsoft Excel 授权问题漏洞

Microsoft Excel is one of the components of Microsoft office, a spreadsheet program from Microsoft. A security feature bypass vulnerability exists in Microsoft Excel, no details of the vulnerability are provided at this time...

Microsoft Windows Licensing Issues Vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An authorization issue vulnerability exists in Microsoft Windows Network Connections Service. The following products and models are affected: Windows Server version 20H2 Server Core...

National Instruments Compactrio License Issue Vulnerability

National Instruments Compactrio is an embedded controller for industrial control from National Instruments. An authorization issue vulnerability exists in versions prior to CompactRIO Driver 20.5, which stems from an incorrect privilege setting service for a specific API entry point by default,...

Fujitsu Eternus Storage DX200 S4 Authorization Issues Vulnerability

The Fujitsu Fujitsu Eternus Storage DX200 S4 is a storage appliance for enterprise environments that provides storage support for server virtualization, email, databases, business applications, and centralized file services from Fujitsu Japan. The storage device features thin provisioning,...

Intel High Definition Audio drivers license issue vulnerability

Intel High Definition Audio drivers is an audio codec driver from Intel. An authorization issue vulnerability exists in Intel High Definition Audio drivers that arises from a lack of authentication measures or insufficient authentication strength in a networked system or product. No details of th...

Vmware VMWare SD-WAN Orchestrator Authorization Issues Vulnerability

Vmware VMWare SD-WAN Orchestrator is a software from Vmware that orchestrates network data flows in a software-defined network architecture. The software provides Web pages to visually manage users, gateways, and authentication. An authorization issue vulnerability exists in VMware SD-WAN...

Broadcom Symantec Endpoint Detection And Response 授权问题漏洞

Symantec Endpoint Detection And Response uses AI, IR automation and threat intelligence to detect, find, isolate and eliminate intrusions across all endpoints. symantec Endpoint Detection...

Oracle Utilities Framework Licensing Issues Vulnerability

Oracle Utilities Framework is an application framework cumulative features tool from Oracle USA. The tool makes it easy to find features that have been added to an application between releases. An authorization issue vulnerability exists in the System Wide component of Oracle Utilities Framework...

CVE-2020-6316

SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, leading to Missing Authorization check...

CloudBees Jenkins Azure Key Vault Authorization Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An authorization issue...

CloudBees Jenkins Active Directory Plugin Authorization Issue Vulnerability (CNVD-2020-62249)

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Active Directory Plugin is used in one of th...

Cisco Edge Fog Fabric Authorization Issues Vulnerability

Cisco Edge Fog Fabric EFF is an open architecture IoT platform for industrial customers. An authorization issue vulnerability exists in the REST API for Cisco Edge Fog Fabric versions prior to 1.7.4. The vulnerability stems from a failure of authorization enforcement to be correct. An attacker ca...

Check Point ZoneAlarm Authorization Issue Vulnerability

Check Point ZoneAlarm is a network firewall program from Check Point Israel. Check Point ZoneAlarm version 15.8.139.18543 suffers from an authorization issue vulnerability that stems from allowing a local actor to delete arbitrary files while restoring files in anti-ransomware. No detailed...

CVE-2020-9933

An authorization issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8. A malicious application may be able to read sensitive location information...