10156 matches found
CVE-2025-8261 Vaelsys VaelsysV4 User Creation vgrid_server.php improper authorization
A weakness has been identified in Vaelsys VaelsysV4 4.1.0. This vulnerability affects unknown code of the file /grid/vgridserver.php of the component User Creation Handler. Executing a manipulation can lead to improper authorization. The attack may be performed from remote. The exploit has been...
Vaelsys V4 security vulnerabilities
Vaelsys V4 is an artificial intelligence video analytics platform from Vaelsys, Spain. A security vulnerability exists in Vaelsys V4 version 4.1.0, which originates from improper authorization of the user creation handler in the file /grid/vgridserver.php...
CVE-2025-8261: Improper Authorization
A weakness has been identified in Vaelsys VaelsysV4 4.1.0. This vulnerability affects unknown code of the file /grid/vgridserver.php of the component User Creation Handler. Executing a manipulation can lead to improper authorization. The attack may be performed from remote. The exploit has been...
PT-2025-31052 · Vaelsys · Vaelsys
Name of the Vulnerable Software and Affected Versions: Vaelsys version 4.1.0 Description: A critical vulnerability exists in the User Creation Handler component of the software, affecting unknown processing of the file /grid/vgrid server.php. This manipulation results in improper authorization,...
Improper Authorization
Overview @haxtheweb/haxcms-nodejs is a HAXcms nodejs backend Affected versions of this package are vulnerable to Improper Authorization in the API endpoints, which do not verify user permissions before performing operations. An attacker can gain unauthorized access to resources or perform actions...
CVE-2025-54378: Improper Authorization
HAX CMS allows you to manage your microsite universe with PHP or NodeJs backends. In versions 11.0.13 and below of haxcms-nodejs and versions 11.0.8 and below of haxcms-php, API endpoints do not perform authorization checks when interacting with a resource. Both the JS and PHP versions of the CMS...
Improper Authorization
github.com/mattermost/mattermost-server is vulnerable to Improper Authorization. The vulnerability is due to a failure to verify authorization when retrieving cached posts by PendingPostID, which allows an attacker to read posts from private channels they do not have access to by guessing the...
NewStart CGSL MAIN 7.02 : sssd Vulnerability (NS-SA-2025-0194)
The remote NewStart CGSL host, running version MAIN 7.02, has sssd packages installed that are affected by a vulnerability: - A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This may lead to improper authorization issues, granting ...
CVE-2025-7947
A vulnerability classified as critical has been found in jshERP up to 3.5. Affected is an unknown function of the file /user/delete of the component Account Handler. The manipulation of the argument ID leads to improper authorization. It is possible to launch the attack remotely. The exploit has...
CVE-2025-7947
A vulnerability classified as critical has been found in jshERP up to 3.5. Affected is an unknown function of the file /user/delete of the component Account Handler. The manipulation of the argument ID leads to improper authorization. It is possible to launch the attack remotely. The exploit has...
CVE-2025-7947 jshERP Account delete improper authorization
A vulnerability classified as critical has been found in jshERP up to 3.5. Affected is an unknown function of the file /user/delete of the component Account Handler. The manipulation of the argument ID leads to improper authorization. It is possible to launch the attack remotely. The exploit has...
CVE-2025-7947
CVE-2025-7947 affects jshERP (up to version 3.5). The vulnerability targets an unknown function in the file /user/delete of the Account Handler, where argument ID manipulation leads to improper authorization. It is exploitable remotely and the exploit has been disclosed publicly. Multiple connect...
CVE-2025-7947 jshERP Account delete improper authorization
A vulnerability classified as critical has been found in jshERP up to 3.5. Affected is an unknown function of the file /user/delete of the component Account Handler. The manipulation of the argument ID leads to improper authorization. It is possible to launch the attack remotely. The exploit has...
CVE-2025-7947: Improper Authorization
A vulnerability classified as critical has been found in jshERP up to 3.5. Affected is an unknown function of the file /user/delete of the component Account Handler. The manipulation of the argument ID leads to improper authorization. It is possible to launch the attack remotely. The exploit has...
PT-2025-30364 · Jsherp · Jsherp
Name of the Vulnerable Software and Affected Versions: jshERP versions prior to 3.5 Description: A critical issue exists in jshERP. The issue involves improper authorization due to the manipulation of the ID argument within an unknown function of the /user/delete file in the Account Handler...
jshERP security vulnerabilities
jshERP Huaxia ERP is a homegrown ERP system by the individual developer of Ji Shenghua in China. A security vulnerability exists in jshERP 3.5 and earlier versions, which stems from improper authorization due to incorrect manipulation of the parameter ID in the file /user/delete...
CVE-2025-49746
Improper authorization in Azure Machine Learning allows an authorized attacker to elevate privileges over a network...
Growatt Cloud Service security vulnerabilities
Growatt cloud service is an OSS management system from Growatt, a Chinese company. A security vulnerability exists in Growatt cloud service, which stems from improper authorization checking and could lead to elevation of privilege...
