Inproper Authorization

Ant Media Server Community Edition is vulnerable to Improper Authorization. The vulnerability is due to improper HTTP header based authorization which allows unauthorized users to potentially access non-administrative API calls reserved for authorized users...

Mageia: Security Advisory (MGASA-2024-0176)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-4819

A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file adminclass.php. The manipulation of the argument type with the input 1 leads to improper authorization. It is possible to launch the atta...

Laundry Management System 授权问题漏洞

Laundry Management System is a laundry management system. An authorization issue vulnerability exists in Online Laundry Management System version 1.0, which stems from an improper authorization vulnerability in the adminclass.php file...

CVE-2024-23576: Improper Authorization

Security vulnerability in HCL Commerce 9.1.12 and 9.1.13 could allow denial of service, disclosure of user personal data, and performing of unauthorized administrative operations...

CVE-2024-4819: Improper Authorization

A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file adminclass.php. The manipulation of the argument type with the input 1 leads to improper authorization. It is possible to launch the atta...

CVE-2024-2441: Improper Authorization

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8 allows direct access to menus, allowing an authenticated user with subscriber privileges or above, to bypass authorization and access settings of the VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8's they...

CVE-2024-0870: Improper Authorization

The YITH WooCommerce Gift Cards plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'savemailstatus' and 'saveemailsettings' functions in all versions up to, and including, 4.12.0. This makes it possible for unauthenticated attackers to...

CVE-2024-4819 Campcodes Online Laundry Management System admin_class.php improper authorization

A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file adminclass.php. The manipulation of the argument type with the input 1 leads to improper authorization. It is possible to launch the atta...

CVE-2024-4819

Campcodes Online Laundry Management System 1.0 contains an improper authorization vulnerability in an unknown function of admin_class.php. The issue arises from manipulating the argument type with the input 1, enabling a remote attack. Public disclosure of the exploit is noted in the sources. The...

CVE-2024-4819 Campcodes Online Laundry Management System admin_class.php improper authorization

A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file adminclass.php. The manipulation of the argument type with the input 1 leads to improper authorization. It is possible to launch the atta...

CVE-2024-3462

Ant Media Server Community Edition in a default configuration is vulnerable to an improper HTTP header based authorization, leading to a possible use of non-administrative API calls reserved only for authorized users. All versions up to 2.9.0 tested and possibly newer ones are believed to be...

PT-2024-33015

Name of the Vulnerable Software and Affected Versions Campcodes Online Laundry Management System version 1.0 Description A problematic issue was found in the system, affecting an unknown function of the file admin class.php. The manipulation of the type argument with the input 1 leads to improper...

RHEL 7 : sssd (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - sssd: Information leak in infopipe due to an improper uid restriction CVE-2018-16883 - A race condition...

SUSE SLED15: libipa_hbac-devel / libipa_hbac0 / libnfsidmap-sss / etc (SUSE-SU-2024:1579-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1579-1 advisory. - CVE-2023-3758: Fixed race condition during authorization that lead to GPO policies functioning...

SUSE SLES15: libipa_hbac-devel / libipa_hbac0 / libsss_certmap-devel / etc (SUSE-SU-2024:1578-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1578-1 advisory. - CVE-2023-3758: Fixed race condition during authorization that lead to GPO policies functioning inconsistently bsc1223100 Tenable has...

Fedora 39 : sssd (2024-78240de990)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-78240de990 advisory. Fix CVE-2023-3758 https://bugzilla.redhat.com/showbug.cgi?id=2275905 Tenable has extracted the preceding description block directly from the Fedora security...

CVE-2024-34257: Improper Authorization

TOTOLINK EX1800T V9.1.0cu.2112B20220316 has a vulnerability in the apcliEncrypType parameter that allows unauthorized execution of arbitrary commands, allowing an attacker to obtain device administrator privileges...

Fedora 38 : sssd (2024-44602bead8)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-44602bead8 advisory. Fix CVE-2023-3758 https://bugzilla.redhat.com/showbug.cgi?id=2275905 Tenable has extracted the preceding description block directly from the Fedora security...

CVE-2023-7240

An improper authorization level has been detected in the login panel. It may lead to unauthenticated Server Side Request Forgery and allows to perform open services enumeration. Server makes query to provided server Server IP/DNS field and is triggering connection to arbitrary address...