6098 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-3991
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An Improper Authorization vulnerability exists in Dolibarr versions prior to the 'develop' branch. A user with restricted permissions in the 'Reception' section...
Zoom Workplace 安全漏洞
Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace that stems from improper authorization and could lead to a breach of integrity...
CVE-2025-10086
A weakness has been identified in fuyanglipengjun platform 1.0.0. This issue affects the function queryAll of the file /adposition/queryAll of the component AdPositionController. This manipulation causes improper authorization. The attack can be initiated remotely. The exploit has been made...
CVE-2025-10086
A weakness has been identified in fuyanglipengjun platform 1.0.0. This issue affects the function queryAll of the file /adposition/queryAll of the component AdPositionController. This manipulation causes improper authorization. The attack can be initiated remotely. The exploit has been made...
CVE-2025-10086 fuyang_lipengjun platform AdPositionController queryAll improper authorization
A weakness has been identified in fuyanglipengjun platform 1.0.0. This issue affects the function queryAll of the file /adposition/queryAll of the component AdPositionController. This manipulation causes improper authorization. The attack can be initiated remotely. The exploit has been made...
CVE-2025-10086 fuyang_lipengjun platform AdPositionController queryAll improper authorization
A weakness has been identified in fuyanglipengjun platform 1.0.0. This issue affects the function queryAll of the file /adposition/queryAll of the component AdPositionController. This manipulation causes improper authorization. The attack can be initiated remotely. The exploit has been made...
CVE-2025-10086
CVE-2025-10086 affects fuyang_lipengjun platform 1.0.0. The vulnerability is in the AdPositionController's /adposition/queryAll function, causing improper authorization. It can be triggered remotely and exploitable publicly; CVSS data suggests MEDIUM impact with network access and low privileges ...
CVE-2025-10084
A vulnerability was identified in elunez eladmin up to 2.7. This affects the function queryErrorLogDetail of the file /api/logs/error/1 of the component SysLogController. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit is publicly...
CVE-2025-10084
CVE-2025-10084 affects elunez eladmin up to version 2.7, targeting the SysLogController function queryErrorLogDetail in the file /api/logs/error/1. The issue enables improper authorization and can be exploited remotely; the exploit is publicly available. Several sources corroborate the vulnerabil...
CVE-2025-10084 elunez eladmin SysLogController 1 queryErrorLogDetail improper authorization
A vulnerability was identified in elunez eladmin up to 2.7. This affects the function queryErrorLogDetail of the file /api/logs/error/1 of the component SysLogController. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit is publicly...
PT-2025-36439
Name of the Vulnerable Software and Affected Versions: fuyang lipengjun platform version 1.0.0 Description: A weakness exists in the queryAll function of the AdPositionController component, located in the file /adposition/queryAll. This manipulation causes improper authorization and can be...
CVE-2025-10073 Portabilis i-Educar turma improper authorization
A vulnerability was determined in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /module/Api/turma. Executing manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized...
CVE-2025-10073 Portabilis i-Educar turma improper authorization
A vulnerability was determined in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /module/Api/turma. Executing manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized...
CVE-2025-10073
CVE-2025-10073 affects Portabilis i-Educar up to version 2.10. The vulnerability resides in an unknown function in the file /module/Api/turma and can lead to improper authorization when manipulated. Exploitation can be performed remotely, and public disclosures of the exploit are noted. Several c...
Ash Framework 安全漏洞
Ash Framework is an Ash Framework open source framework for building Elixir applications. A security vulnerability exists in Ash Framework versions prior to 3.5.39 that stems from improper authorization and could lead to an access control bypass...
CVE-2025-9936
A vulnerability was identified in fuyanglipengjun platform 1.0.0. This issue affects the function AdController of the file /ad/queryAll. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit is publicly available and might be used...
CVE-2025-10014
CVE-2025-10014 affects elunez eladmin up to 2.7, specifically the updateUserEmail function in the Email Address Handler at /api/users/updateEmail/. Manipulating the id/email argument can cause improper authorization, potentially allowing a remote attacker to access or modify user data. Exploitati...
CVE-2025-10014 elunez eladmin Email Address updateEmail updateUserEmail improper authorization
A flaw has been found in elunez eladmin up to 2.7. This impacts the function updateUserEmail of the file /api/users/updateEmail/ of the component Email Address Handler. Executing manipulation of the argument id/email can lead to improper authorization. The attack may be performed from remote...
CVE-2025-41408
Improper authorization in handler for custom URL scheme issue in "Yahoo! Shopping" App for Android versions prior to 14.15.0 allows a remote unauthenticated attacker may lead a user to access an arbitrary website on the vulnerable App. As a result, the user may become a victim of a phishing attac...