Improper Authorization

ethycafides is vulnerable to improper authorization. The vulnerability is due to insufficient scope validation in the OAuth client creation and update endpoints, which allows an attacker or a highly privileged user to escalate privileges to owner-level...

Improper autorization over static files

...

Fortinet Fortigate Improper autorization over static files (FG-IR-25-684)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-25-684 advisory. - An improper authorization vulnerability CWE-285 in Fortinet FortiOS version 7.4.0 through 7.4.1 and before 7.2.8 & Fortinet...

CVE-2025-54822: Improper Authorization

An improper authorization vulnerability CWE-285 vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.8, FortiOS 7.0.0 through 7.0.11, FortiProxy 7.4.0 through 7.4.8, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiProxy 2.0 all versions allows an...

CVE-2025-21059

Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health...

Improper Authorization

org.springframework, spring-core is vulnerable to improper authorization. The vulnerability is due to incorrect annotation resolution on methods within type hierarchies that use unbounded generics, which allows an attacker to bypass security checks when Spring Security’s @EnableMethodSecurity...

CVE-2025-21059

Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health...

CVE-2025-21059

Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health...

CVE-2025-21059

Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health...

EUVD-2025-33674

Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health...

CVE-2025-21059

Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health...

CVE-2025-21059

Samsung Health before version 6.30.5.105 suffers an improper authorization vulnerability that allows local attackers to access data within the app. The CVE-2025-21059 entries from NVD, Red Hat, CVE List, and other sources corroborate that the issue is scoped to Samsung Health and enables local ac...

SAMSUNG Health security vulnerabilities

SAMSUNG Health is a health management app from Samsung South Korea. A security vulnerability exists in SAMSUNG Health versions prior to 6.30.5.105, which stems from improper authorization and could lead to a local attacker accessing data in Samsung Health...

Ash Framework security vulnerabilities

Ash Framework is an Ash Framework open source framework for building Elixir applications. A security vulnerability exists in Ash Framework versions prior to 3.6.2 that stems from improper authorization and could lead to authentication bypass...

CVE-2025-21059: Undefined Security Weakness

Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health...

PT-2025-41519

Name of the Vulnerable Software and Affected Versions Samsung Health versions prior to 6.30.5.105 Description An improper authorization issue exists in Samsung Health. This allows local attackers to access data within Samsung Health. Recommendations Update Samsung Health to version 6.30.5.105 or...

CVE-2025-59271: Improper Authorization

Redis Enterprise Elevation of Privilege Vulnerability...

CVE-2025-61928: Improper Authorization

Better Auth is an authentication and authorization library for TypeScript. In versions prior to 1.3.26, unauthenticated attackers can create or modify API keys for any user by passing that user's id in the request body to the api/auth/api-key/create route. session?.user ?? authRequired ? null : i...

ABB eSOMS Authorization Bypass

The vulnerability of the ABB eSOMS software for managing production processes is related to improper authorization. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

Barco ClickShare Devices Improper Authorization (CVE-2019-18827)

On Barco ClickShare Button R9861500D01 devices before firmware version 1.9.0 JTAG access is disabled after ROM code execution. This means that JTAG access is possible when the system is running code from ROM before handing control over to embedded firmware. This plugin only works with Tenable.ot...