CVE-2023-38220 Full page cache enumeration via cookie X-Magento-Vary

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by an Improper Authorization vulnerability that could lead in a security feature bypass in a way that an attacker could access unauthorised data. Exploitation of this...

CVE-2023-44689

e-Gov Client Application Windows version versions prior to 2.1.1.0 and e-Gov Client Application macOS version versions prior to 1.1.1.0 are vulnerable to improper authorization in handler for custom URL scheme. A crafted URL may direct the product to access an arbitrary website. As a result, the...

CVE-2023-44689

CVE-2023-44689 affects e-Gov Client Application: Windows prior to 2.1.1.0 and macOS prior to 1.1.1.0 are vulnerable to improper authorization in the handler for the custom URL scheme. A crafted URL can direct the application to access an arbitrary website, enabling phishing scenarios. Publicly do...

CVE-2023-41841

An improper authorization vulnerability in Fortinet FortiOS 7.0.0 - 7.0.11 and 7.2.0 - 7.2.4 allows an attacker belonging to the prof-admin profile to perform elevated actions...

CVE-2023-41841

An improper authorization vulnerability in Fortinet FortiOS 7.0.0 - 7.0.11 and 7.2.0 - 7.2.4 allows an attacker belonging to the prof-admin profile to perform elevated actions...

CVE-2023-41841

An improper authorization vulnerability in Fortinet FortiOS 7.0.0 - 7.0.11 and 7.2.0 - 7.2.4 allows an attacker belonging to the prof-admin profile to perform elevated actions...

Fortinet FortiOS Security Vulnerabilities

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with a variety of security features such as firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam. A security vulnerabili...

Improper Authorization

chromium is vulnerable to Improper Authorization. The vulnerability allows a remote attacker to bypass security mechanisms with the use of a crafted HTML page due to inappropriate implementation in interstitials, and perform unauthorized actions...

Improper Authorization

chromium is vulnerable to Improper Authorization. The vulnerability allows a remote attacker to bypass security mechanisms with the use of a crafted HTML page due to inappropriate implementation in picture in picture, and perform unauthorized actions...

Improper Authorization

gitlab is vulnerable to Improper Authorization. An attacker can create repositories with malicious code by exploiting a vulnerability in the main branch of a repository with a specially designed name...

Improper Authorization allows opening of arbitrary files

Description Tested on Build94 of the Inure application. It was discovered that the application had an exported activity .activities.association.TextViewerActivity which accepted intent data via the file scheme + text/ mime type and opened the associated files from provided URI data string. The...

CVE-2021-3784 Garuda Linux Improper Authorization

Garuda Linux performs an insecure user creation and authentication that allows any user to impersonate the created account. By creating users from the 'Garuda settings manager', an insecure procedure is performed that keeps the created user without an assigned password during some seconds. This...

CVE-2021-3784 Garuda Linux Improper Authorization

Garuda Linux performs an insecure user creation and authentication that allows any user to impersonate the created account. By creating users from the 'Garuda settings manager', an insecure procedure is performed that keeps the created user without an assigned password during some seconds. This...

CVE-2023-4997

Improper authorisation of regular users in ProIntegra Uptime DC software versions below 2.0.0.33940 allows them to change passwords of all other users including administrators leading to a privilege escalation...

CVE-2023-3037

CVE-2023-3037 refers to an improper authorization vulnerability in HelpDezk Community (v1.1.10). The connected sources describe that a remote attacker could access the platform without authentication and retrieve personal data via the jsonGrid parameter. The CVSS 3.1 metrics indicate a HIGH base ...

CVE-2023-3037 HelpDezk Community improper authorization

Improper authorization vulnerability in HelpDezk Community affecting version 1.1.10. This vulnerability could allow a remote attacker to access the platform without authentication and retrieve personal data via the jsonGrid parameter...

CVE-2023-30736

Improper authorization in PushMsgReceiver of Samsung Assistant prior to version 8.7.00.1 allows attacker to execute javascript interface. To trigger this vulnerability, user interaction is required...

CVE-2023-30736

Improper authorization in PushMsgReceiver of Samsung Assistant prior to version 8.7.00.1 allows attacker to execute javascript interface. To trigger this vulnerability, user interaction is required...

Authorization

Improper authorization in PushMsgReceiver of Samsung Assistant prior to version 8.7.00.1 allows attacker to execute javascript interface. To trigger this vulnerability, user interaction is required...

CVE-2023-30736

The CVE-2023-30736 entry concerns Samsung Assistant’s PushMsgReceiver, where improper authorization prior to version 8.7.00.1 allows an attacker to trigger a javascript interface. Affected software is Samsung Assistant on devices supporting versions before 8.7.00.1. The vulnerability requires use...