Lucene search
+L

6141 matches found

OSV
OSV
added 2023/01/06 10:36 a.m.13 views

CVE-2022-4879 Forged Alliance Forever Vote improper authorization

A vulnerability was found in Forged Alliance Forever up to 3746. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Vote Handler. The manipulation leads to improper authorization. Upgrading to version 3747 is able to address this issue. T...

4.6CVSS5.7AI score
SaveExploits0References7
Cvelist
Cvelist
added 2023/01/06 10:36 a.m.26 views

CVE-2022-4879 Forged Alliance Forever Vote improper authorization

A vulnerability was found in Forged Alliance Forever up to 3746. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Vote Handler. The manipulation leads to improper authorization. Upgrading to version 3747 is able to address this issue. T...

4.6CVSS7.8AI score0.00528EPSS
SaveExploits0References5
CVE
CVE
added 2023/01/06 10:36 a.m.70 views

CVE-2022-4879

CVE-2022-4879 affects Forged Alliance Forever up to version 3746, targeting the Vote Handler component. The issue is due to manipulation of an unknown functionality that leads to improper authorization. Upgrading to version 3747 mitigates the vulnerability; the patch is identified by 6880971bd3d7...

7.5CVSS6.1AI score0.00528EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/06 12:0 a.m.11 views

PT-2023-15893 · Unknown · Forged Alliance Forever

Name of the Vulnerable Software and Affected Versions: Forged Alliance Forever versions up to 3746 Description: A critical issue was found in the Vote Handler component, leading to improper authorization due to manipulation of an unknown functionality. Upgrading to version 3747 addresses this...

7.5CVSS7.2AI score0.00528EPSS
SaveExploits0References10
Veracode
Veracode
added 2023/01/02 2:6 p.m.20 views

Improper Authorization

github.com/usememos/memos is vulnerable to improper authorization. The library uses insecure direct object references which allows an attacker to access all private memos of a user and edit them...

8.3CVSS5.5AI score0.00564EPSS
SaveExploits1References5Affected Software1
Veracode
Veracode
added 2023/01/02 10:53 a.m.21 views

Improper Authorization

github.com/usememos/memos is vulnerable to improper authorization. Access restriction bypass via the shortcut endpoint allows an attacker to view, modify, and delete other users' shortcuts...

5.4CVSS5.6AI score0.00568EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2022/12/31 12:30 p.m.29 views

Froxlor Improper Authorization vulnerability

Improper Authorization in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

6.5CVSS5.1AI score0.00641EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2022/12/31 12:0 a.m.43 views

CVE-2022-4868 Improper Authorization in froxlor/froxlor

Improper Authorization in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

6.5CVSS4.9AI score0.00641EPSS
SaveExploits1References2
OSV
OSV
added 2022/12/31 12:0 a.m.29 views

CVE-2022-4868 Improper Authorization in froxlor/froxlor

Improper Authorization in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

6.5CVSS5.8AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2022/12/31 12:0 a.m.5 views

CVE-2022-4868 Improper Authorization in froxlor/froxlor

Improper Authorization in GitHub repository froxlor/froxlor prior to 2.0.0-beta1...

6.5CVSS6.8AI score0.00641EPSS
SaveExploits1References2
CVE
CVE
added 2022/12/31 12:0 a.m.73 views

CVE-2022-4868

CVE-2022-4868 describes an Improper Authorization vulnerability in froxlor/froxlor prior to 2.0.0-beta1. The issue affects Froxlor versions before 2.0.0-beta1 (GitHub repository froxlor/froxlor) and is widely referenced across CVE records and advisories (Red Hat, GHSA, OSV, NVD, etc.). Root cause...

6.5CVSS4.8AI score0.00641EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2022/12/28 6:15 p.m.8 views

CVE-2022-45874

Huawei Aslan Children's Watch has an improper authorization vulnerability. Successful exploit could allow the attacker to access certain file...

5.5CVSS5.8AI score0.00143EPSS
SaveExploits0References1
Prion
Prion
added 2022/12/28 6:15 p.m.19 views

Authorization

Huawei Aslan Children's Watch has an improper authorization vulnerability. Successful exploit could allow the attacker to access certain file...

1.7CVSS5.4AI score0.00143EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2022/12/28 3:30 p.m.34 views

GHSA-HC5Q-26H8-R9WF usememos/memos Improper Authorization vulnerability

In usememos/memos 0.9.0 and prior, an unauthorized user can access any private memo by URL hacking a memo on the editing screen...

5.4CVSS6.4AI score0.00564EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2022/12/28 3:30 p.m.25 views

usememos/memos Improper Authorization vulnerability

In usememos/memos 0.9.0 and prior, an unauthorized user can access any private memo by URL hacking a memo on the editing screen...

8.3CVSS5.5AI score0.00564EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2022/12/28 3:30 p.m.25 views

usememos/memos vulnerable to Improper Authorization

usememos/memos 0.9.0 and prior is vulnerable to Improper Authorization...

9.1CVSS5.6AI score0.00568EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2022/12/28 3:30 p.m.27 views

usememos/memos Improper Authorization vulnerability

usememos/memos 0.9.0 and prior is vulnerable to Improper Authorization...

8.6CVSS5.5AI score0.00702EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/12/28 3:30 p.m.70 views

GHSA-QCF5-M2C6-89F2 usememos/memos Improper Authorization vulnerability

usememos/memos 0.9.0 and prior is vulnerable to Improper Authorization...

5.3CVSS5.5AI score0.00702EPSS
SaveExploits1References4
NVD
NVD
added 2022/12/28 2:15 p.m.27 views

CVE-2022-4804

Improper Authorization in GitHub repository usememos/memos prior to 0.9.1...

8.2CVSS0.0059EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2022/12/28 12:0 a.m.8 views

CVE-2022-45874

Huawei Aslan Children's Watch has an improper authorization vulnerability. Successful exploit could allow the attacker to access certain file...

5.5AI score0.00143EPSS
SaveExploits0References1
Rows per page
Query Builder