CVE-2019-5472

An authorization issue was discovered in Gitlab versions 12.1.2, 12.0.4, and 11.11.6 that prevented owners and maintainer to delete epic comments...

CVE-2019-5472

CVE-2019-5472 : In GitLab, an authorization issue in versions older than 12.1.2, 12.0.4, and 11.11.6 prevented owners and maintainers from deleting epic comments. Affected components are the GitLab epics/authorization flow; the root cause is improper access control on epic comment deletion. Impac...

CVE-2019-5472

Removed by vendor...

CVE-2019-5474

CVE-2019-5474 concerns GitLab EE: an authorization flaw in versions earlier than 12.1.2, 12.0.4, and 11.11.6 allows merge request approval rules to be overridden without proper permissions. The connected records consistently describe the issue as an authorization problem affecting the merge reque...

Huawei Honor V30 License Issue Vulnerability

Huawei Honor V30 is a smartphone. An authorization issue vulnerability exists in previous versions of Huawei Honor V30 10.0.1.135 C00E130R4P1, which arises from an application in the system failing to perform proper identity checks on another application calling its interface, and can be exploite...

SonicWall Email Security Appliance Authorization Issues Vulnerability

SonicWall Email Security Appliance is an email security appliance from SonicWall USA. An authorization issue vulnerability exists in SonicWall Email Security Appliance version 10.0.2 and earlier. The vulnerability stems from a lack of authentication measures or insufficient authentication strengt...

McAfee Threat Intelligence Exchange Server Authorization Issues Vulnerability

McAfee TIE Server is a network threat defense server from the U.S. company McAfee McAfee. An authorization issue vulnerability exists in the API in McAfee Threat Intelligence Exchange Server version 3.0.0. The vulnerability stems from a lack of authentication measures or insufficient authenticati...

CloudBees Jenkins RapidDeploy Plugin Authorization Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An authorization issue...

CloudBees Jenkins Team Concert Plugin Authorization Issue Vulnerability (CNVD-2020-11656)

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . An authorization issue vulnerability exists in the methods related to forms in CloudBees Jenkins Team Concert Plugin 1.3.0 and prior versions. The vulnerability...

cPanel Authorization Issues Vulnerability (CNVD-2020-03746)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 70.0.23. No detailed vulnerability details are provided at this ti...

cPanel Authorization Issues Vulnerability (CNVD-2020-04078)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 68.0.27. No detailed vulnerability details are provided at this ti...

cPanel Authorization Issues Vulnerability (CNVD-2020-03739)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An authorization issue vulnerability exists in versions of cPanel prior to 11.54.0.4. The vulnerability stems from a lack of...

GitLab Authorization Issues Vulnerability (CNVD-2020-12719)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An authorization issue vulnerability exists in GitLab...

Huawei E5572-855 Authorization Issues Vulnerability

The Huawei E5572-855 is a portable wireless router device from Huawei China. An authorization issue vulnerability exists in Huawei E5572-855 prior to version 8.0.1.3 H335SP1C233, which can be exploited by an attacker to cause a device reboot by performing a man-in-the-middle attack...

D-Link DAP-1860 Authorization Issues Vulnerability

The D-Link DAP-1860 is a WiFi range extender from AUO D-Link of Taiwan, China. The D-Link DAP-1860 is vulnerable to an authorization issue. An attacker can exploit the vulnerability to gain unauthenticated access to administrator functions with the help of a timestamp value in the HNAPAUTH header...

ProFTPD 'tls_verify_crl' function authorization issue vulnerability

ProFTPD is a secure cloud printing solution from the ProFTPD team. The solution supports printing from laptops, desktops and mobile devices connected to printers. An authorization issue vulnerability exists in the 'tlsverifycrl' function in ProFTPD versions prior to 1.3.6. The vulnerability stems...

CVE-2014-2904

CVE-2014-2904 affects wolfSSL prior to 3.2.0, where a server certificate is not properly authorized for server authentication. This has been documented across multiple sources (OSV, NVD, Debian/Ubuntu advisories, and CVE records). The description consistently notes the issue without detailing exp...

CVE-2014-2902

CVE-2014-2902 affects wolfSSL prior to 3.2.0 and indicates a flaw where the library does not properly authorize a CA certificate for signing other certificates. The connected OSV/NVD entries confirm the same description across multiple ecosystems. The core issue is a lack of proper CA certificate...

CVE-2014-2902

wolfssl before 3.2.0 does not properly authorize CA certificate for signing other certificates...

wolfSSL Authorization Issue Vulnerability

wolfSSL formerly known as CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. An authorization issue vulnerability exists in versions of wolfSSL prior to 3.2.0; no detailed vulnerability details are provided at thi...