Improper Authorization

gitlab is vulnerable to Improper Authorization. The vulnerability exists due to improper access to some particular fields through the GraphQL API which allows an attacker to perform unauthorized actions...

Improper Authorization

gitlab is vulnerable to Improper Authorization. An attacker could exploit this vulnerability to update the status of an external status check to "success", even if the check has failed. This could cause GitLab to deploy code or release a package that is not ready, which could lead to security...

Improper Authorization

gitlab is vulnerable to Improper Authorization. An attacker could exploit this vulnerability to add malicious comments to vulnerabilities, which could then be seen by other users. These malicious comments could contain misinformation or phishing links, which could be used to deceive users and...

Improper Authorization

gitlab is vulnerable to Improper Authorization. The vulnerability occurs due to a lack of access control allowing authenticated users to retrieve configurations of any external status checks...

Improper Authorization

gitlab is vulnerable to Improper Authorization. An attacker can view and delete impersonation tokens that administrators create...

Improper Authorization

gitlab is vulnerable to Improper Authorization. This vulnerability allows an authenticated user to delete incident metric images of public projects due to improper authorization mechanisms...

Improper Authorization

gitlab is vulnerable to Improper Authorization. This allows a malicious user in a private project to view tag data on release pages due to improper authorization checks within gitlab...

Dell Wyse Management Suite < 4.1 Multiple Vulnerabilities (DSA-2023-240)

The version of Dell Wyse Management Suite installed on the remote host is prior to 4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the DSA-2023-240 advisory. - Wyse Management Suite versions prior to 4.1 contain a denial-of-service vulnerability. An authenticated...

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow, related to improper authorization, allows a perpetrator to disclose protected information.

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to improper authorization. Exploiting this vulnerability allows a malicious actor, operating remotely, to expose sensitive information through a specially created URL...

Improper authorization on debug and artifact file downloads

Impact An authenticated user can download a debug or artifact bundle from arbitrary organizations and projects with a known bundle ID. The user does not need to be a member of the organization or have permissions on the project. Patches A patch was issued to ensure authorization checks are proper...

The vulnerability of the SSPanel-Uim software interface allows a perpetrator to access confidential information.

The vulnerability of the SSPanel-Uim software interface is related to improper authorization. Exploiting this vulnerability can allow attackers to access confidential information...

Information Disclosure

org.jenkins-ci.plugins:dimensionsscm is vulnerable to Information Disclosure. A remote authenticated attacker with Item/Configure permission is able to gain access to confidential user credentials due to improper authorization checks, resulting in the disclosure of sensitive information...

CVE-2023-3805

A vulnerability, which was classified as critical, has been found in Xiamen Four Letter Video Surveillance Management System up to 20230712. This issue affects some unknown processing in the library UserInfoAction.class of the component Login. The manipulation leads to improper authorization. The...

CVE-2023-3805

CVE-2023-3805 affects Xiamen Four Letter Video Surveillance Management System (up to 20230712). The vulnerability is in the Login component, specifically the UserInfoAction.class library, causing improper authorization. It allows remote exploitation and has been disclosed publicly. Several source...

CVE-2023-3805 Xiamen Four Letter Video Surveillance Management System Login UserInfoAction.class improper authorization

A vulnerability, which was classified as critical, has been found in Xiamen Four Letter Video Surveillance Management System up to 20230712. This issue affects some unknown processing in the library UserInfoAction.class of the component Login. The manipulation leads to improper authorization. The...

PT-2023-26266 · Unknown · Xiamen Four Letter Video Surveillance Management System

Name of the Vulnerable Software and Affected Versions: Xiamen Four Letter Video Surveillance Management System versions up to 20230712 Description: A critical issue has been found in the library UserInfoAction.class of the component Login, affecting some unknown processing. This leads to improper...

CVE-2023-32482

Wyse Management Suite versions prior to 4.0 contain an improper authorization vulnerability. An authenticated malicious user with privileged access can push policies to unauthorized tenant group...

CVE-2023-32482

Wyse Management Suite versions prior to 4.0 contain an improper authorization vulnerability. An authenticated malicious user with privileged access can push policies to unauthorized tenant group...

CVE-2023-32482

Wyse Management Suite versions prior to 4.0 contain an improper authorization vulnerability. An authenticated malicious user with privileged access can push policies to unauthorized tenant group...

CVE-2023-32482

Wyse Management Suite versions prior to 4.0 contain an improper authorization vulnerability. An authenticated malicious user with privileged access can push policies to unauthorized tenant group...