Authorization

The listed versions of AVEVA Plant SCADA and AVEVA Telemetry Server are vulnerable to an improper authorization exploit which could allow an unauthenticated user to remotely read data, cause denial of service, and tamper with alarm states...

CVE-2023-1256 CVE-2023-1256

The listed versions of AVEVA Plant SCADA and AVEVA Telemetry Server are vulnerable to an improper authorization exploit which could allow an unauthenticated user to remotely read data, cause denial of service, and tamper with alarm states...

CVE-2023-1256 CVE-2023-1256

The listed versions of AVEVA Plant SCADA and AVEVA Telemetry Server are vulnerable to an improper authorization exploit which could allow an unauthenticated user to remotely read data, cause denial of service, and tamper with alarm states...

SAMSUNG Mobile Devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile Devices Samsung Keyboard SMR Mar-2023 Release 1 version, which stems from an improper authorization...

SAMSUNG Mobile Devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile Devices AutoPowerOnOffConfirmDialog in Settings SMR Mar-2023 Release 1 version, which stems from the...

CVE-2023-21454

Improper authorization in Samsung Keyboard prior to SMR Mar-2023 Release 1 allows physical attacker to access users text history on the lockscreen...

CVE-2023-21455

Improper authorization implementation in Exynos baseband prior to SMR Mar-2023 Release 1 allows incorrect handling of unencrypted message...

CVE-2023-21461

Improper authorization vulnerability in AutoPowerOnOffConfirmDialog in Settings prior to SMR Mar-2023 Release 1 allows local attacker to turn device off via unprotected activity...

CVE-2023-21454

Improper authorization in Samsung Keyboard prior to SMR Mar-2023 Release 1 allows physical attacker to access users text history on the lockscreen...

PT-2023-18223 · Samsung · Exynos

Name of the Vulnerable Software and Affected Versions: Exynos baseband versions prior to SMR Mar-2023 Release 1 Description: The issue is related to improper authorization implementation, which leads to incorrect handling of unencrypted messages. Recommendations: For versions prior to SMR Mar-202...

PT-2023-18222 · Samsung · Samsung Keyboard

Name of the Vulnerable Software and Affected Versions: Samsung Keyboard versions prior to SMR Mar-2023 Release 1 Description: The issue is related to improper authorization, allowing a physical attacker to access a user's text history on the lock screen. Recommendations: For versions prior to SMR...

CVE-2023-21455

CVE-2023-21455 affects Exynos baseband prior to SMR Mar-2023 Release 1. The root cause is improper authorization implementation, causing incorrect handling of unencrypted messages. CVSS metrics indicate high impact on confidentiality and integrity (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) with the ex...

CVE-2023-21461

The CVE-2023-21461 entry concerns Samsung mobile devices with an improper authorization vulnerability in the Settings component AutoPowerOnOffConfirmDialog (before SMR Mar-2023 Release 1). The underlying issue allows a local attacker to turn the device off via an unprotected activity. Documented ...

PT-2023-18230

Name of the Vulnerable Software and Affected Versions Settings versions prior to SMR Mar-2023 Release 1 Description The issue is related to an improper authorization vulnerability in the AutoPowerOnOffConfirmDialog component of the Settings application. This vulnerability allows a local attacker ...

CVE-2023-21454: Improper Authorization

Improper authorization in Samsung Keyboard prior to SMR Mar-2023 Release 1 allows physical attacker to access users text history on the lockscreen...

CVE-2023-21461: Improper Authorization

Improper authorization vulnerability in AutoPowerOnOffConfirmDialog in Settings prior to SMR Mar-2023 Release 1 allows local attacker to turn device off via unprotected activity...

CVE-2023-21452: Improper Authorization

Improper usage of implicit intent in Bluetooth prior to SMR Mar-2023 Release 1 allows attacker to get MAC address of connected device...

CVE-2023-1256: Undefined Security Weakness

The listed versions of AVEVA Plant SCADA and AVEVA Telemetry Server are vulnerable to an improper authorization exploit which could allow an unauthenticated user to remotely read data, cause denial of service, and tamper with alarm states...

Atlassian Bitbucket < Improper Authorization Leakage Via ATST Plugin

According to its self-reported version number, the Atlassian Bitbucket application running on the remote host is is prior to version 6.6.0. It is, therefore, shipped with a vulnerable version of the Atlassian Troubleshooting and Support plugin ATST, which permitted unprivileged users to initialte...

Atlassian Jira 7.13 < 8.5.5 Improper Authorization On Createshared Endpoint

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.8.1. It is, therefore, affected by a flaw which permits remote attackers remote attackers to enumerate project names via an improper authorization vulnerability in the...