CVE-2023-30714: Undefined Security Weakness

Improper authorization vulnerability in FolderContainerDragDelegate in One UI Home prior to SMR Sep-2023 Release 1 allows physical attackers to change some settings of the folder lock...

CVE-2023-30706: Undefined Security Weakness

Improper authorization in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows attacker to read arbitrary file with system privilege...

CVE-2023-33020 Improper Authorization in WLAN Host

Transient DOS in WLAN Host when an invalid channel like channel out of range is received in STA during CSA IE...

CVE-2023-33019 Improper Authorization in WLAN Host

Transient DOS in WLAN Host while doing channel switch announcement CSA, when a mobile station receives invalid channel in CSA IE...

CVE-2023-33019 Improper Authorization in WLAN Host

Transient DOS in WLAN Host while doing channel switch announcement CSA, when a mobile station receives invalid channel in CSA IE...

PT-2023-22906 · Samsung · Samsung Keyboard

Name of the Vulnerable Software and Affected Versions: Samsung Keyboard versions prior to SMR Sep-2023 Release 1 Description: The issue is related to improper authorization, allowing an attacker to read arbitrary files with system privilege. Recommendations: For versions prior to SMR Sep-2023...

Mattermost Server < 7.8.5 / 7.9.x < 7.9.4 Improper Authorization (MMSA-2023-00157)

The version of Mattermost Server running on the remote host is prior to 7.8.5 or 7.9.x prior to 7.9.4. It is, therefore, affected by an improper authorization vulnerability. Mattermost fails to invalidate existing authorization codes when deauthorizing an OAuth2 app, allowing an attacker possessi...

CVE-2023-3253

An improper authorization vulnerability exists where an authenticated, low privileged remote attacker could view a list of all the users available in the application...

CVE-2023-3253

An improper authorization vulnerability exists where an authenticated, low privileged remote attacker could view a list of all the users available in the application...

Authorization

An improper authorization vulnerability exists where an authenticated, low privileged remote attacker could view a list of all the users available in the application...

CVE-2023-3253 Improper authorization in Nessus

An improper authorization vulnerability exists where an authenticated, low privileged remote attacker could view a list of all the users available in the application...

CVE-2023-3253

CVE-2023-3253 describes an improper authorization vulnerability in Tenable Nessus where an authenticated, low-privileged remote attacker could view a list of all users in the application. Affected product: Nessus (pre-10.6.0 releases). The issue is confirmed in multiple feeds (Red Hat, NVD, CVE l...

Tenable Network Security Nessus 安全漏洞

Tenable Network Security Nessus is an open source system vulnerability scanner from US-based Tenable Network Security. A security vulnerability exists in versions of Tenable Network Security Nessus prior to 10.6.0, which stems from an incorrect authorization vulnerability that allows an...

PT-2023-23860 · Tenable · Nessus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An improper authorization issue exists, allowing an authenticated, low-privileged remote attacker to view a list of all users available in the...

CVE-2023-4560 Improper Authorization of Index Containing Sensitive Information in omeka/omeka-s

Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4...

CVE-2023-4560

Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4...

CVE-2023-4560

The CVE-2023-4560 issue affects Omeka-S (GitHub: omeka/omeka-s) prior to version 4.0.4, caused by improper authorization of an index containing sensitive information. The vulnerability exposes high confidentiality impact with a CVSS base score of 6.5 (NETWORK, LOW attack complexity, LOW privilege...

CVE-2023-4560: Improper Authorization of Index Containing Sensitive Information

Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4...

Omeka S 安全漏洞

Omeka S is an open source web content management system CMS from Omeka, Inc. that specializes in creating and managing digital exhibitions and online digital archives. It is a new version of the Omeka project, and unlike the traditional Omeka Classic, Omeka S emphasizes multi-user collaboration a...

PT-2023-29581 · Omeka-S · Omeka-S

Name of the Vulnerable Software and Affected Versions: omeka/omeka-s versions prior to 4.0.4 Description: The issue is related to improper authorization of an index containing sensitive information in the omeka/omeka-s GitHub repository. Recommendations: For versions prior to 4.0.4, update to...