Lucene search
+L

9490 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/08 12:00 a.m.•6 views

CVE-2022-46752: Improper Authorization

Dell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service...

4.6CVSS5.9AI score0.00287EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/03/08 12:00 a.m.•19 views

PT-2023-15013 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to an Improper Authorization vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service...

4.6CVSS4.4AI score0.00287EPSS
SaveExploits0References5
Fortinet
Fortinet
•added 2023/03/07 12:00 a.m.•56 views

FortiSOAR - Improper Authorization in request headers

An improper access control vulnerability CWE-284 in FortiSOAR's playbook component may allow an attacker authenticated on the administrative interface to perform unauthorized actions via crafted HTTP requests...

5.8CVSS6.7AI score0.00906EPSS
SaveExploits0Affected Software1
Github Security Blog
Github Security Blog
•added 2023/03/05 9:30 p.m.•34 views

Wallabag Improper Authorization vulnerability

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.4...

7.3CVSS5.5AI score0.00498EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2023/03/05 9:30 p.m.•69 views

GHSA-8CCW-F83G-V7G3 Wallabag Improper Authorization vulnerability

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.4...

5.3CVSS5.5AI score0.00498EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2023/03/05 12:00 a.m.•12 views

CVE-2023-0734 Improper Authorization in wallabag/wallabag

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.4...

7.3CVSS7.1AI score0.00498EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/03/05 12:00 a.m.•42 views

CVE-2023-0734 Improper Authorization in wallabag/wallabag

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.4...

7.3CVSS5.5AI score0.00498EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/03/05 12:00 a.m.•33 views

wallabag 授权问题漏洞

wallabag is a web application that allows you to save web pages for later reading. An authorization issue vulnerability exists in versions prior to wallabag 2.5.4 that stems from improper authorization management...

7.3CVSS6.5AI score0.00498EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/05 12:00 a.m.•2 views

CVE-2023-0734: Improper Authorization

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.4...

7.3CVSS5.8AI score0.00498EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/03/05 12:00 a.m.•22 views

Ghost 安全漏洞

Ghost CMS is an open source headless content management system CMS written in JavaScript from the Ghost Foundation in Singapore. A security vulnerability exists in Ghost version 5.35.0 that stems from improper authorization management...

5.7CVSS5.8AI score0.0063EPSS
SaveExploits0References4
Mend
Mend
•added 2023/03/05 12:00 a.m.•6 views

CVE-2023-0734

Improper Authorization in GitHub repository wallabag/wallabag prior to 2.5.4...

7.3CVSS0.00498EPSS
SaveExploits1References6
CVE
CVE
•added 2023/03/05 12:00 a.m.•78 views

CVE-2023-0734

CVE-2023-0734 affects wallabag/wallabag prior to 2.5.4 due to an improper authorization issue in the GitHub repository. The vulnerability stems from inadequate access control in the affected code paths, enabling unauthorized behavior. Public sources consistently identify the affected version rang...

7.3CVSS6.7AI score0.00498EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2023/03/03 7:15 a.m.•19 views

CVE-2023-1164

A vulnerability was found in KylinSoft kylin-activation on KylinOS and classified as critical. Affected by this issue is some unknown functionality of the component File Import. The manipulation leads to improper authorization. The attack needs to be approached locally. The exploit has been...

7.8CVSS6.3AI score0.00381EPSS
SaveExploits1References3
NVD
NVD
•added 2023/03/03 7:15 a.m.•40 views

CVE-2023-1164

A vulnerability was found in KylinSoft kylin-activation on KylinOS and classified as critical. Affected by this issue is some unknown functionality of the component File Import. The manipulation leads to improper authorization. The attack needs to be approached locally. The exploit has been...

8.4CVSS8.4AI score0.00381EPSS
SaveExploits1References3
Prion
Prion
•added 2023/03/03 7:15 a.m.•34 views

Authorization

A vulnerability was found in KylinSoft kylin-activation on KylinOS and classified as critical. Affected by this issue is some unknown functionality of the component File Import. The manipulation leads to improper authorization. The attack needs to be approached locally. The exploit has been...

7.2CVSS7.6AI score0.00381EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2023/03/03 6:56 a.m.•130 views

CVE-2023-1164

CVE-2023-1164 affects KylinSoft kylin-activation on KylinOS, specifically the File Import functionality. The root cause is improper authorization within File Import, enabling a local attacker to exploit the issue. Several sources confirm the vulnerability, with public disclosures indicating local...

8.4CVSS8AI score0.00381EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/03/03 6:56 a.m.•40 views

CVE-2023-1164 KylinSoft kylin-activation File Import improper authorization

A vulnerability was found in KylinSoft kylin-activation on KylinOS and classified as critical. Affected by this issue is some unknown functionality of the component File Import. The manipulation leads to improper authorization. The attack needs to be approached locally. The exploit has been...

8.4CVSS8.6AI score0.00381EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/03 12:00 a.m.•5 views

CVE-2023-1164: Improper Authorization

A vulnerability was found in KylinSoft kylin-activation on KylinOS and classified as critical. Affected by this issue is some unknown functionality of the component File Import. The manipulation leads to improper authorization. The attack needs to be approached locally. The exploit has been...

8.4CVSS4.9AI score0.00381EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/03 12:00 a.m.•4 views

CVE-2023-20088: Improper Authorization

A vulnerability in the nginx configurations that are provided as part of the VPN-less reverse proxy for Cisco Finesse could allow an unauthenticated, remote attacker to create a denial of service DoS condition for new and existing users who are connected through a load balancer. This vulnerabilit...

7.5CVSS5.9AI score0.00795EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/03/03 12:00 a.m.•19 views

PT-2023-16792 · Unknown · Kylin-Activation

Name of the Vulnerable Software and Affected Versions: kylin-activation versions prior to 1.3.11-23 and 1.30.10-5.p23 Description: A critical issue was found in the File Import component of kylin-activation, leading to improper authorization. The attack must be approached locally. The exploit has...

8.4CVSS7.2AI score0.00381EPSS
SaveExploits1References5
Rows per page
Query Builder