SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices prior to SMR Sep-2023 Release 1 version, which stems from an improper authorization vulnerability i...

CVE-2023-33020 Improper Authorization in WLAN Host

Transient DOS in WLAN Host when an invalid channel like channel out of range is received in STA during CSA IE...

CVE-2023-33019 Improper Authorization in WLAN Host

Transient DOS in WLAN Host while doing channel switch announcement CSA, when a mobile station receives invalid channel in CSA IE...

CVE-2023-33019 Improper Authorization in WLAN Host

Transient DOS in WLAN Host while doing channel switch announcement CSA, when a mobile station receives invalid channel in CSA IE...

PT-2023-22906 · Samsung · Samsung Keyboard

Name of the Vulnerable Software and Affected Versions: Samsung Keyboard versions prior to SMR Sep-2023 Release 1 Description: The issue is related to improper authorization, allowing an attacker to read arbitrary files with system privilege. Recommendations: For versions prior to SMR Sep-2023...

Mattermost Server < 7.8.5 / 7.9.x < 7.9.4 Improper Authorization (MMSA-2023-00157)

The version of Mattermost Server running on the remote host is prior to 7.8.5 or 7.9.x prior to 7.9.4. It is, therefore, affected by an improper authorization vulnerability. Mattermost fails to invalidate existing authorization codes when deauthorizing an OAuth2 app, allowing an attacker possessi...

CVE-2023-3253

An improper authorization vulnerability exists where an authenticated, low privileged remote attacker could view a list of all the users available in the application...

CVE-2023-3253

An improper authorization vulnerability exists where an authenticated, low privileged remote attacker could view a list of all the users available in the application...

Authorization

An improper authorization vulnerability exists where an authenticated, low privileged remote attacker could view a list of all the users available in the application...

CVE-2023-3253

CVE-2023-3253 describes an improper authorization vulnerability in Tenable Nessus where an authenticated, low-privileged remote attacker could view a list of all users in the application. Affected product: Nessus (pre-10.6.0 releases). The issue is confirmed in multiple feeds (Red Hat, NVD, CVE l...

CVE-2023-3253 Improper authorization in Nessus

An improper authorization vulnerability exists where an authenticated, low privileged remote attacker could view a list of all the users available in the application...

PT-2023-23860 · Tenable · Nessus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An improper authorization issue exists, allowing an authenticated, low-privileged remote attacker to view a list of all users available in the...

Tenable Network Security Nessus 安全漏洞

Tenable Network Security Nessus is an open source system vulnerability scanner from US-based Tenable Network Security. A security vulnerability exists in versions of Tenable Network Security Nessus prior to 10.6.0, which stems from an incorrect authorization vulnerability that allows an...

CVE-2023-4560

The CVE-2023-4560 issue affects Omeka-S (GitHub: omeka/omeka-s) prior to version 4.0.4, caused by improper authorization of an index containing sensitive information. The vulnerability exposes high confidentiality impact with a CVSS base score of 6.5 (NETWORK, LOW attack complexity, LOW privilege...

CVE-2023-4560 Improper Authorization of Index Containing Sensitive Information in omeka/omeka-s

Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4...

PT-2023-29581 · Omeka-S · Omeka-S

Name of the Vulnerable Software and Affected Versions: omeka/omeka-s versions prior to 4.0.4 Description: The issue is related to improper authorization of an index containing sensitive information in the omeka/omeka-s GitHub repository. Recommendations: For versions prior to 4.0.4, update to...

Omeka S 安全漏洞

Omeka S is an open source web content management system CMS from Omeka, Inc. that specializes in creating and managing digital exhibitions and online digital archives. It is a new version of the Omeka project, and unlike the traditional Omeka Classic, Omeka S emphasizes multi-user collaboration a...

CVE-2023-40530

Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device...

CVE-2023-40530

Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device...

Authorization

Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device...