CVE-2024-23806 HID Global Reader Configuration Cards Improper Authorization

Sensitive data can be extracted from HID iCLASS SE reader configuration cards. This could include credential and device administrator keys...

CVE-2024-23806: Improper Authorization

Sensitive data can be extracted from HID iCLASS SE reader configuration cards. This could include credential and device administrator keys...

CVE-2024-22021: Improper Authorization

Vulnerability CVE-2024-22021 allows a Veeam Recovery Orchestrator user with a low privileged role Plan Author to retrieve plans from a Scope other than the one they are assigned to...

CVE-2024-22388 Insecure Default Initialization of Resource in HID Global

Certain configuration available in the communication channel for encoders could expose sensitive data when reader configuration cards are programmed. This data could include credential and device administration keys...

CVE-2023-25543

Dell Power Manager, versions prior to 3.14, contain an Improper Authorization vulnerability in DPM service. A low privileged malicious user could potentially exploit this vulnerability in order to elevate privileges on the system...

HID Global Reader Configuration Cards

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION : Low attack complexity Vendor : HID Global Equipment : Reader Configuration Cards Vulnerability : Improper Authorization 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to read the credential and device...

HID Global Encoders

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION : Exploitable locally Vendor : HID Global Equipment : iCLASS SE, OMNIKEY Vulnerability : Improper Authorization 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to read data from reader configuration...

CVE-2023-25543

Dell Power Manager, versions prior to 3.14, contain an Improper Authorization vulnerability in DPM service. A low privileged malicious user could potentially exploit this vulnerability in order to elevate privileges on the system...

CVE-2023-25543

Dell Power Manager, versions prior to 3.14, contain an Improper Authorization vulnerability in DPM service. A low privileged malicious user could potentially exploit this vulnerability in order to elevate privileges on the system...

CVE-2023-25543

Summary: CVE-2023-25543 affects Dell Power Manager. Dell Power Manager versions prior to 3.14 contain an Improper Authorization vulnerability in the DPM service that could allow a low-privileged user to elevate privileges (local access). Proven by multiple sources in the connected documents that ...

CVE-2024-20828

CVE-2024-20828 concerns Samsung Internet prior to version 24.0, where improper authorization verification allows physical attackers to access files downloaded in SecretMode without authentication. Affected component: Samsung Internet; root cause: insufficient authorization checks. Impact: potenti...

CVE-2024-20828

Improper authorization verification vulnerability in Samsung Internet prior to version 24.0 allows physical attackers to access files downloaded in SecretMode without proper authentication...

BuildKit Authorization Privilege Escalation

The vulnerability of the BuildKit container-building software is related to improper authorization. Exploiting this vulnerability allows a remote attacker to execute containers with elevated privileges...

Total Upkeep < 1.15.9 - Improper Authorization to Unauthenticated Arbitrary File Download

Description The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to unauthorized access of data due to an improper authorization check in all versions up to, and including, 1.15.8. This makes it possible for unauthenticated attackers to...

Dell Power Manager Security Vulnerability

Dell Power Manager is an application from Dell Inc. that is used to configure battery maintenance practices to maximize system battery life. A security vulnerability exists in Dell Power Manager versions prior to 3.14 that stems from the inclusion of an improper authorization vulnerability in the...

CVE-2023-25543: Improper Handling of Insufficient Permissions or Privileges

Dell Power Manager, versions prior to 3.14, contain an Improper Authorization vulnerability in DPM service. A low privileged malicious user could potentially exploit this vulnerability in order to elevate privileges on the system...

CVE-2024-20828: Incorrect Authorization

Improper authorization verification vulnerability in Samsung Internet prior to version 24.0 allows physical attackers to access files downloaded in SecretMode without proper authentication...

PT-2024-12066 · Dell · Dell Power Manager

Name of the Vulnerable Software and Affected Versions: Dell Power Manager versions prior to 3.14 Description: The issue is related to an Improper Authorization vulnerability in the DPM service. A low-privileged malicious user could potentially exploit this vulnerability to elevate privileges on t...

CVE-2024-24936: Improper Authorization

In JetBrains TeamCity before 2023.11.2 access control at the S3 Artifact Storage plugin endpoint was missed...

PT-2024-18735

Name of the Vulnerable Software and Affected Versions Samsung Internet versions prior to 24.0 Description The issue is related to an improper authorization verification vulnerability. This vulnerability allows physical attackers to access files downloaded in SecretMode without proper...