6063 matches found
CVE-2023-40530
Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device...
CVE-2023-40530
Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device...
Authorization
Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device...
CVE-2023-40530
Summary: The vulnerability CVE-2023-40530 affects the Skylark App (Android and iOS) from Skylark Holdings. The issue is due to improper authorization in the handler for the app’s Custom URL Scheme, allowing an attacker to direct a user to an arbitrary website via another application. Affected ver...
CVE-2023-40530
Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device...
CVE-2023-40530
Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2.13 and earlier allows an attacker to lead a user to access an arbitrary website via another application installed on the user's device...
PT-2023-27498 · Unknown · Skylark App For Android +1
Name of the Vulnerable Software and Affected Versions: Skylark App for Android versions 6.2.13 and earlier Skylark App for iOS versions 6.2.13 and earlier Description: The issue is related to improper authorization in the handler for a custom URL scheme, allowing an attacker to lead a user to...
MongoDB Improper Authorization Vulnerability (SERVER-73662) - Windows
MongoDB is prone to an improper authorization vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mongodb:mongodb"; if...
Improper Authorization in Import Question function
Description The Import Question function does not check user permissions, allowing users to import questions into any survey without requiring authorization Proof of Concept Step 1: We have user1 who has no permissions Step 2: User1 performs importing questions into the survey by creating a reque...
Authorization
Improper authorization in the custom URL scheme handler in "Rikunabi NEXT" App for Android prior to ver. 11.5.0 allows a malicious intent to lead the vulnerable App to access an arbitrary website...
CVE-2023-39507
Improper authorization in the custom URL scheme handler in "Rikunabi NEXT" App for Android prior to ver. 11.5.0 allows a malicious intent to lead the vulnerable App to access an arbitrary website...
CVE-2023-39507
The CVE-2023-39507 entry concerns the Android app “Rikunabi NEXT” by Recruit. The vulnerability is in the app’s Custom URL Scheme handler, enabling improper authorization that can cause the app to navigate a user to an arbitrary website. Affected versions are Android prior to ver. 11.5.0. The roo...
CVE-2023-39507
Improper authorization in the custom URL scheme handler in "Rikunabi NEXT" App for Android prior to ver. 11.5.0 allows a malicious intent to lead the vulnerable App to access an arbitrary website...
PT-2023-26988 · Unknown · Rikunabi Next App
Name of the Vulnerable Software and Affected Versions: Rikunabi NEXT App for Android versions prior to 11.5.0 Description: The issue is related to improper authorization in the custom URL scheme handler, allowing a malicious intent to lead the vulnerable App to access an arbitrary website...
Advisory ROSA-SA-2023-2216
software: subversion 1.14.2 OS: ROSA-CHROME packageevrstring: subversion-1.14.2-1.src.rpm CVE-ID: CVE-2020-17525 BDU-ID: 2022-00306 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the modauthzsvn module of the Subversion centralized version control system is related to incorrect handling of reques...
CVE-2023-28385
Improper authorization in the IntelR NUC Pro Software Suite for Windows before version 2.0.0.9 may allow a privileged user to potentially enable escalation of privilage via local access...
CVE-2023-28385
Improper authorization in the IntelR NUC Pro Software Suite for Windows before version 2.0.0.9 may allow a privileged user to potentially enable escalation of privilage via local access...
Intel NUC Security Vulnerability
Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in IntelR NUC Pro Software Suite for Windows prior to version 2.0.0.9 that originates from improper authorization management. An attacker can exploit the vulnerability to elevate privileges...
Authorization
Improper Authorization vulnerability in Samsung Internet prior to version 22.0.0.35 allows physical attacker access downloaded files in Secret Mode without user authentication...