Atlassian Confluence Unauth JSON setup-restore Improper Authorization leading to RCE (CVE-2023-22518)

This Improper Authorization vulnerability allows an unauthenticated attacker to reset Confluence and create a Confluence instance administrator account. Using this account, an attacker can then perform all administrative actions that are available to Confluence instance administrator. This module...

CVE-2023-42491

EisBaer Scada - CWE-285: Improper Authorization...

Authorization

EisBaer Scada - CWE-285: Improper Authorization...

CVE-2023-42491 EisBaer Scada - CWE-285: Improper Authorization

EisBaer Scada - CWE-285: Improper Authorization...

CVE-2023-42491 EisBaer Scada - CWE-285: Improper Authorization

EisBaer Scada - CWE-285: Improper Authorization...

CVE-2023-42491

CVE-2023-42491 concerns EisBaer Scada with an issue described as CWE-285: Improper Authorization. The NVD entry lists a network-based, high-impact vulnerability (CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H; base score 9.8, critical). The CNA score also indicates a network vector with low attack...

CVE-2023-42491: Improper Authorization

EisBaer Scada - CWE-285: Improper Authorization...

Alexander Maier EisBaer Scada Authorization Issue Vulnerability

Alexander Maier EisBaer Scada is a visual reality display and control program created on Windows operating systems by Alexander Maier of Germany. Alexander Maier EisBaer Scada suffers from an authorization issue vulnerability that arises from improper authorization...

CVE-2021-4334: Improper Authorization

The Fancy Product Designer plugin for WordPress is vulnerable to unauthorized modification of site options due to a missing capability check on the fpdupdateoptions function in versions up to, and including, 4.6.9. This makes it possible for authenticated attackers with subscriber-level permissio...

CVE-2021-4335: Improper Authorization

The Fancy Product Designer plugin for WordPress is vulnerable to unauthorized access to data and modification of plugin settings due to a missing capability check on multiple AJAX functions in versions up to, and including, 4.6.9. This makes it possible for authenticated attackers with...

React Developer Tools extension Improper Authorization vulnerability

The React Developer Tools extension registers a message listener with window.addEventListener'message', in a content script that is accessible to any webpage that is active in the browser. Within the listener is code that requests a URL derived from the received message via fetch. The URL is not...

GHSA-RXRC-RGV4-JPVX React Developer Tools extension Improper Authorization vulnerability

The React Developer Tools extension registers a message listener with window.addEventListener'message', in a content script that is accessible to any webpage that is active in the browser. Within the listener is code that requests a URL derived from the received message via fetch. The URL is not...

Improper Authorization

samba is vulnerable to Improper Authorization. This vulnerability allows an attacker to truncate files, even with read-only permissions, when the Samba VFS module aclxattr is configured with aclxattr:ignore system acls = yes...

Improper Authorization

chromium is vulnerable to Improper Authorization. An attacker could exploit this vulnerability by tricking a user into visiting a malicious website. The website would contain a specially crafted HTML page that would exploit the inappropriate implementation in Autofill and allow the attacker to...

Improper Authorization

chromium is vulnerable to Improper Authorization. An attacker could exploit this vulnerability by tricking a user into running a specially crafted command. The command would cause the Chrome installer to overwrite arbitrary files on the system, which could allow the attacker to gain elevated...

CVE-2023-5654: Improper Authorization

The React Developer Tools extension registers a message listener with window.addEventListener'message', in a content script that is accessible to any webpage that is active in the browser. Within the listener is code that requests a URL derived from the received message via fetch. The URL is not...

PT-2023-9690 · Mediacms · Mediacms

Name of the Vulnerable Software and Affected Versions: MediaCMS affected versions not specified Description: The issue is related to improper authorization in the MediaCMS content management system. It allows a remote attacker to delete directories in the file system and replace user file content...

PT-2023-6566 · Unknown · Eisbaer Scada

Name of the Vulnerable Software and Affected Versions: EisBaer Scada affected versions not specified Description: The issue is caused by improper authorization in the EisBaer Scada system. This can allow a remote attacker to execute arbitrary code due to weaknesses in the authorization procedure...

Improper Authorization

Overview magento/project-community-edition is an eCommerce Platform for Growth Community Edition Affected versions of this package are vulnerable to Improper Authorization due to improper handling of authorization checks. An attacker can bypass security features and access unauthorized data witho...

Magento Open Source allows Improper Authorization

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by an Improper Authorization vulnerability that could lead in a security feature bypass in a way that an attacker could access unauthorised data. Exploitation of this...