CVE-2022-4804 Improper Authorization in usememos/memos

Improper Authorization in GitHub repository usememos/memos prior to 0.9.1...

PT-2022-28105 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to Improper Authorization in the GitHub repository usememos/memos. Recommendations: For versions prior to 0.9.1, update to version 0.9.1 or later to resolve the issue...

CVE-2022-4804

CVE-2022-4804 affects the open-source project usememos/memos prior to version 0.9.1 . The root cause is described as Improper Authorization in the GitHub repository, with documented implications including the ability to change a victim’s memo visibility (per CNNVD/NVD summaries and OSV/GHSA refer...

Huawei Aslan-AL10 安全漏洞

Huawei Aslan-AL10 is a children's smartwatch from Huawei China. The Huawei Aslan-AL10 suffers from a security vulnerability that stems from the presence of an improper authorization vulnerability that could allow an attacker to access specific files...

PT-2022-27664 · Huawei · Huawei Aslan Children'S Watch

Name of the Vulnerable Software and Affected Versions: Huawei Aslan Children's Watch affected versions not specified Description: The issue is related to an improper authorization vulnerability. If successfully exploited, it could allow an attacker to access certain files. Recommendations: At the...

CVE-2022-4804 Improper Authorization in usememos/memos

Improper Authorization in GitHub repository usememos/memos prior to 0.9.1...

CVE-2022-4804 Improper Authorization in usememos/memos

Improper Authorization in GitHub repository usememos/memos prior to 0.9.1...

usememos/memos vulnerable to improper authorization

usememos/memos is an open-source, self-hosted memo hub with knowledge management and socialization. Memos versions prior to 0.9.0 are vulnerable to improper authorization, which can allow a user to modify the nickname, username and email of other users without permission...

CVE-2022-4688

Improper Authorization in GitHub repository usememos/memos prior to 0.9.0...

Authorization

Improper Authorization in GitHub repository usememos/memos prior to 0.9.0...

PT-2022-27999 · Unknown · Usememos/Memos

Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.0 Description: The issue concerns improper authorization in the usememos/memos GitHub repository. This repository is for an open-source, self-hosted memo hub that includes knowledge management and...

CVE-2022-4688

CVE-2022-4688 affects usememos/memos; versions prior to 0.9.0 are vulnerable to improper authorization. The issue can allow a user to modify other users’ nicknames, usernames, and emails without permission. No exploit details are provided in the sources beyond the general description. Mitigation:...

CVE-2022-4688 Improper Authorization in usememos/memos

Improper Authorization in GitHub repository usememos/memos prior to 0.9.0...

CVE-2022-4613

A vulnerability was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome and classified as critical. This issue affects some unknown processing of the component Browser Extension Provisioning. The manipulation leads to improper authorization. The attack may be initiated...

Authorization

A vulnerability was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome and classified as critical. This issue affects some unknown processing of the component Browser Extension Provisioning. The manipulation leads to improper authorization. The attack may be initiated...

CVE-2022-4613 Click Studios Passwordstate Browser Extension Provisioning improper authorization

A vulnerability was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome and classified as critical. This issue affects some unknown processing of the component Browser Extension Provisioning. The manipulation leads to improper authorization. The attack may be initiated...

PT-2022-27754 · Click Studios · Click Studios Passwordstate +1

Name of the Vulnerable Software and Affected Versions: Click Studios Passwordstate affected versions not specified Click Studios Passwordstate Browser Extension Chrome affected versions not specified Description: A critical issue affects the Browser Extension Provisioning component, leading to...

CVE-2022-4613 Click Studios Passwordstate Browser Extension Provisioning improper authorization

A vulnerability was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome and classified as critical. This issue affects some unknown processing of the component Browser Extension Provisioning. The manipulation leads to improper authorization. The attack may be initiated...

Click Studios Passwordstate 安全漏洞

Click Studios Passwordstate passwordstate is a password management software from the Click Studios team in Australia. The program provides users with the ability to save their passwords, record their accounts and passwords, and keep them safe. This program provides you with the ability to save yo...

CVE-2022-25685

Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...