6077 matches found
Improper Authorization
ethycafides is vulnerable to improper authorization. The vulnerability is due to insufficient scope validation in the OAuth client creation and update endpoints, which allows an attacker or a highly privileged user to escalate privileges to owner-level...
Fortinet Fortigate Improper autorization over static files (FG-IR-25-684)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-25-684 advisory. - An improper authorization vulnerability CWE-285 in Fortinet FortiOS version 7.4.0 through 7.4.1 and before 7.2.8 & Fortinet...
CVE-2025-21059
Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health...
Improper Authorization
org.springframework, spring-core is vulnerable to improper authorization. The vulnerability is due to incorrect annotation resolution on methods within type hierarchies that use unbounded generics, which allows an attacker to bypass security checks when Spring Security’s @EnableMethodSecurity...
CVE-2025-21059
Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health...
CVE-2025-21059
Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health...
CVE-2025-21059
Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health...
EUVD-2025-33674
Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health...
CVE-2025-21059
Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health...
CVE-2025-21059
Samsung Health before version 6.30.5.105 suffers an improper authorization vulnerability that allows local attackers to access data within the app. The CVE-2025-21059 entries from NVD, Red Hat, CVE List, and other sources corroborate that the issue is scoped to Samsung Health and enables local ac...
Ash Framework 安全漏洞
Ash Framework is an Ash Framework open source framework for building Elixir applications. A security vulnerability exists in Ash Framework versions prior to 3.6.2 that stems from improper authorization and could lead to authentication bypass...
SAMSUNG Health 安全漏洞
SAMSUNG Health is a health management app from Samsung South Korea. A security vulnerability exists in SAMSUNG Health versions prior to 6.30.5.105, which stems from improper authorization and could lead to a local attacker accessing data in Samsung Health...
PT-2025-41519
Name of the Vulnerable Software and Affected Versions Samsung Health versions prior to 6.30.5.105 Description An improper authorization issue exists in Samsung Health. This allows local attackers to access data within Samsung Health. Recommendations Update Samsung Health to version 6.30.5.105 or...
Barco ClickShare Devices Improper Authorization (CVE-2019-18827)
On Barco ClickShare Button R9861500D01 devices before firmware version 1.9.0 JTAG access is disabled after ROM code execution. This means that JTAG access is possible when the system is running code from ROM before handing control over to embedded firmware. This plugin only works with Tenable.ot...
GHSA-5M9M-J5P7-M7F9 Casdoor is vulnerable to Improper Authorization
An issue in the permission verification module and organization/application editing interface in Casdoor before 2.63.0 allows remote authenticated administrators of any organization within the system to bypass the system's permission verification mechanism by directly concatenating URLs after log...
Casdoor is vulnerable to Improper Authorization
An issue in the permission verification module and organization/application editing interface in Casdoor before 2.63.0 allows remote authenticated administrators of any organization within the system to bypass the system's permission verification mechanism by directly concatenating URLs after log...
EUVD-2020-1572
Malware in sbrugna...
EUVD-2018-18984
Malware in sbrugna...