CVE-2017-9653

An Improper Authorization issue was discovered in OSIsoft PI Integrator for Business Analytics before 2016 R2, PI Integrator for Microsoft Azure before 2016 R2 SP1, and PI Integrator for SAP HANA before 2017. An attacker is able to gain privileged access to the system while unauthorized...

OSIsoft PI Integrator

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: OSIsoft Equipment: PI Integrator Vulnerabilities: Cross-Site Scripting, Improper Authorization AFFECTED PRODUCTS The following versions of PI Integrator, a data management platform, are affected: PI Integrator for SAP...

PT-2018-02: Improper Authorization in PHOENIX CONTACT FL SWITCH

The specialists of the Positive Research center have detected an Improper Authorization vulnerability in PHOENIX CONTACT FL SWITCH. An Improper Authorization issue in PHOENIX CONTACT FL SWITCH products allows remote unauthenticated attackers to bypass web-service authentication and obtain...

CVE-2017-6044

An Improper Authorization issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Several files and directories can be accessed without authentication, which may allow a remote attacker to perform sensitive...

CVE-2017-6044

An Improper Authorization issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Several files and directories can be accessed without authentication, which may allow a remote attacker to perform sensitive...

CVE-2017-6044

An Improper Authorization issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Several files and directories can be accessed without authentication, which may allow a remote attacker to perform sensitive...

CVE-2017-6044

CVE-2017-6044 affects Sierra Wireless AirLink Raven XE (all versions before 4.0.14) and Raven XT (all versions before 4.0.11). The vulnerability stems from an improper authorization flaw that allows access to several files and directories without authentication, enabling a remote attacker to perf...

The vulnerability of the TrustZone component of the Android operating system allows a hacker to gain access to resources.

The vulnerability of the TrustZone component in the Android operating system is related to improper authorization. Exploiting this vulnerability can allow a remote attacker to gain access to resources...

Vulnerability in the Core Kernel of the Android operating system, allowing a hacker to gain access to resources

The vulnerability in the Core Kernel of the Android operating system is related to improper authorization. Exploiting this vulnerability can allow a remote attacker to gain access to resources...

Authorization

In Core Kernel in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist...

CVE-2014-9950

In Core Kernel in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist...

Authorization

In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist...

CVE-2014-9950

Technical details for CVE-2014-9950 are not publicly available in the provided documents; monitor for updates.

CVE-2014-9945

In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist...

CVE-2014-9950

In Core Kernel in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist...

CVE-2014-9945

CVE-2014-9945 describes an Improper Authorization vulnerability in the TrustZone component on Android releases from CAF that use the Linux kernel. The issue affects TrustZone/CAF Android builds and is described as potentially existing within the TrustZone security boundary. From the CVSS data, th...

CVE-2016-9464

Nextcloud Server before 9.0.54 and 10.0.0 suffers from an improper authorization check on removing shares. The Sharing Backend as implemented in Nextcloud does differentiate between shares to users and groups. In case of a received group share, users should be able to unshare the file to themselv...

CVE-2016-9464

Nextcloud Server before 9.0.54 and 10.0.0 suffers from an improper authorization check on removing shares. The Sharing Backend as implemented in Nextcloud does differentiate between shares to users and groups. In case of a received group share, users should be able to unshare the file to themselv...

Siemens RUGGEDCOM ROX I

CVSS v3 8.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: RUGGEDCOM ROX I Vulnerabilities: Improper Authorization, Cross-Site Scripting, and Cross-Site Request Forgery AFFECTED PRODUCTS Siemens reports that the vulnerability affects the following RUGGEDCOM...

PT-2023-16448 · Phpipam +1 · Phpipam +1

Name of the Vulnerable Software and Affected Versions: phpipam/phpipam versions prior to 1.5.1 Description: The issue concerns improper authorization in the phpipam/phpipam GitHub repository. Recommendations: For versions prior to 1.5.1, update to version 1.5.1 or later to resolve the issue...