CVE-2021-25382

An improper authorization of using debugging command in Secure Folder prior to SMR Oct-2020 Release 1 allows unauthorized access to contents in Secure Folder via debugging command...

CVE-2021-28799

An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 Hybrid Backup Sync. If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.0.0415 on QTS 4.5.2; versions prior to...

Elastic: Improper authorization on `/api/as/v1/credentials/` allows any App Search user to access all API keys and escalate privileges

Summary Hello team, I hope you're doing well! App Search has a credentials page located at /as/credentials that lists all the API keys a user has access to, if any. That same page will 404 for users with Analyst or Editor role. This is all working as intended, however there is also an API endpoin...

SUSE: Security Advisory (SUSE-SU-2020:1210-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-21096

Adobe Bridge versions 10.1.1 and earlier and 11.0.1 and earlier are affected by an Improper Authorization vulnerability in the Genuine Software Service. A low-privileged attacker could leverage this vulnerability to achieve application denial-of-service in the context of the current user...

CVE-2021-21096

Adobe Bridge versions 10.1.1 and earlier and 11.0.1 and earlier are affected by an Improper Authorization vulnerability in the Genuine Software Service. A low-privileged attacker could leverage this vulnerability to achieve application denial-of-service in the context of the current user...

CVE-2021-21096 Adobe Bridge Genuine Software Service Incorrect Permission Assignment could lead to Denial-of-Service

Adobe Bridge versions 10.1.1 and earlier and 11.0.1 and earlier are affected by an Improper Authorization vulnerability in the Genuine Software Service. A low-privileged attacker could leverage this vulnerability to achieve application denial-of-service in the context of the current user...

CVE-2021-21096

Adobe Bridge CVE-2021-21096 is an Improper Authorization vulnerability in the Genuine Software Service affecting versions 10.1.1 and earlier and 11.0.1 and earlier. A low-privileged attacker could cause an application denial-of-service without user interaction. The issue is referenced in APSB21-2...

CVE-2021-0260

An improper authorization vulnerability in the Simple Network Management Protocol daemon snmpd service of Juniper Networks Junos OS leads an unauthenticated attacker being able to perform SNMP read actions, an Exposure of System Data to an Unauthorized Control Sphere, or write actions to OIDs tha...

Adobe Bridge Improper Authorization Vulnerability

Adobe Bridge is a free digital asset management application from Adobe. Adobe Bridge suffers from an improper authorization vulnerability. An attacker could exploit the vulnerability to elevate privileges...

PT-2021-5102 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 10.1.1 and earlier Adobe Bridge versions 11.0.1 and earlier Description: The issue is related to an Improper Authorization vulnerability in the Genuine Software Service of Adobe Bridge. A low-privileged attacker could...

Adobe Bridge 安全漏洞

Adobe Bridge is a free digital asset management application from Adobe. Adobe Bridge suffers from an improper authorization vulnerability. An attacker could exploit the vulnerability to elevate privileges...

SAP Focused Run 安全漏洞

Designed for organizations that require extensive system and application monitoring, alerting and analysis, SAP Focused Run supports hosting all customers in a scalable, secure and automated environment. An improper authorization vulnerability exists in SAP Focused RUN versions 200 and 300. The...

CVE-2021-25374

An improper authorization vulnerability in Samsung Members "samsungrewards" scheme for deeplink in versions 2.4.83.9 in Android O8.1 and below, and 3.9.00.9 in Android P9.0 and above allows remote attackers to access a user data related with Samsung Account...

CVE-2021-1467

A vulnerability in Cisco Webex Meetings for Android could allow an authenticated, remote attacker to modify the avatar of another user. This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to the Cisco Webex Meetings...

CVE-2021-1467

CVE-2021-1467 affects Cisco Webex Meetings for Android. The issue stems from improper authorization checks, allowing an authenticated remote actor in the same meeting to modify another user’s avatar by sending a crafted request to the targeted Webex client. Impact is limited to avatar modificatio...

CVE-2021-1467 Cisco Webex Meetings for Android Avatar Modification Vulnerability

A vulnerability in Cisco Webex Meetings for Android could allow an authenticated, remote attacker to modify the avatar of another user. This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to the Cisco Webex Meetings...

CloudBees Jenkins Cloud Statistics Plugin Improper Authorization Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An improper authorization...

CloudBees Jenkins Team Foundation Server Plugin Improper Authorization Vulnerability (CNVD-2021-25258)

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An improper authorization...

CloudBees Jenkins OWASP Dependency-Track Plugin Improper Authorization Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An improper authorization...