PT-2023-18223 · Samsung · Exynos

Name of the Vulnerable Software and Affected Versions: Exynos baseband versions prior to SMR Mar-2023 Release 1 Description: The issue is related to improper authorization implementation, which leads to incorrect handling of unencrypted messages. Recommendations: For versions prior to SMR Mar-202...

SAMSUNG Mobile Devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile Devices AutoPowerOnOffConfirmDialog in Settings SMR Mar-2023 Release 1 version, which stems from the...

CVE-2023-21455

Improper authorization implementation in Exynos baseband prior to SMR Mar-2023 Release 1 allows incorrect handling of unencrypted message...

PT-2023-18222 · Samsung · Samsung Keyboard

Name of the Vulnerable Software and Affected Versions: Samsung Keyboard versions prior to SMR Mar-2023 Release 1 Description: The issue is related to improper authorization, allowing a physical attacker to access a user's text history on the lock screen. Recommendations: For versions prior to SMR...

CVE-2023-21461

The CVE-2023-21461 entry concerns Samsung mobile devices with an improper authorization vulnerability in the Settings component AutoPowerOnOffConfirmDialog (before SMR Mar-2023 Release 1). The underlying issue allows a local attacker to turn the device off via an unprotected activity. Documented ...

CVE-2023-21454

Improper authorization in Samsung Keyboard prior to SMR Mar-2023 Release 1 allows physical attacker to access users text history on the lockscreen...

CVE-2023-21454

Improper authorization in Samsung Keyboard prior to SMR Mar-2023 Release 1 allows physical attacker to access users text history on the lockscreen...

Atlassian Crowd < 3.6.0 Improper Authorization Via ATST Plugin

According to its self-reported version number, the Atlassian Crowd application running on the remote host is prior to version 3.6.0. It is, therefore, shipped with a vulnerable version of the Atlassian Troubleshooting and Support plugin ATST, which permitted unprivileged users to initialte log...

Atlassian Jira 7.13 < 8.5.5 Improper Authorization On Createshared Endpoint

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.8.1. It is, therefore, affected by a flaw which permits remote attackers remote attackers to enumerate project names via an improper authorization vulnerability in the...

Atlassian Bitbucket < Improper Authorization Leakage Via ATST Plugin

According to its self-reported version number, the Atlassian Bitbucket application running on the remote host is is prior to version 6.6.0. It is, therefore, shipped with a vulnerable version of the Atlassian Troubleshooting and Support plugin ATST, which permitted unprivileged users to initialte...

Atlassian Jira < 8.3.2 Improper Authorization Via ATST Plugin

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to version 8.3.2 It is, therefore, shipped with a vulnerable version of the Atlassian Troubleshooting and Support plugin ATST, which permitted unprivileged users to initialte log...

Atlassian Jira 8.8.0 < 8.8.1 Improper Authorization On Createshared Endpoint

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.8.1. It is, therefore, affected by a flaw which permits remote attackers remote attackers to enumerate project names via an improper authorization vulnerability in the...

WordPress WPCode - Insert Headers and Footers Plugin < 2.0.7 Improper Authorization Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpcode:wpcode"; ifdescription...

Atlassian Jira < 8.9.0 Improper Authorization In Project Administration

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.9.0. It is, therefore, affected by a vulnerability which permits remote attackers to obtain information about custom project avatars via an improper authorization...

CVE-2022-46752

Dell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service...

CVE-2022-46752

Dell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service...

Authorization

Dell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service...

CVE-2022-46752

Dell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service...

CVE-2022-46752

Dell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service...

CVE-2022-46752

Dell BIOS contains an improper authorization vulnerability. An unauthenticated physical attacker may cause a denial of service. Affected: Dell BIOS (firmware); root cause is improper authorization management. Impact: availability loss (CVSS v3.1: AV=P/AC=L/PR=N/UI=N/S=U/C=N/I=N/A=H; base score 4....