CVE-2022-36837: Improper Authorization

Intent redirection vulnerability using implicit intent in Samsung email prior to version 6.1.70.20 allows attacker to get sensitive information...

CVE-2022-33722: Improper Authorization

Implicit Intent hijacking vulnerability in Smart View prior to SMR Aug-2022 Release 1 allows attacker to access connected device MAC address...

The vulnerability of the SAP Business Objects Business Intelligence Platform, related to improper authorization, allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the SAP Business Objects Business Intelligence Platform is related to improper authorization. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to modify, add, or delete data...

Improper Authorization

Overview Affected versions of this package are vulnerable to Improper Authorization in the UpdateSavedSearch function in savedsearches.go that allows a user to delete but not read another user's saved searches. Remediation Upgrade github.com/sourcegraph/sourcegraph-public-snapshot/cmd/frontend to...

CVE-2022-31178 Improper Authorization in eLabFTW

eLabFTW is an electronic lab notebook manager for research teams. A vulnerability was discovered which allows a logged in user to read a template without being authorized to do so. This vulnerability has been patched in 4.3.4. Users are advised to upgrade. There are no known workarounds for this...

CVE-2022-2595

Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1...

CVE-2022-2595

Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1...

Authorization

Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1...

CVE-2022-2595

Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1...

CVE-2022-2595

CVE-2022-2595 concerns the GitHub repository kromitgmbh/titra, affected in versions prior to 0.79.1. The root cause is improper authorization in the Add Extension functionality, which can allow a low-privilege/unauthenticated user to upload a malicious extension and trigger remote code execution....

Authorization

Pandora FMS v7.0NG.760 and below allows an improper authorization in User Management where any authenticated user with access to the User Management module could create, modify or delete any user with full admin privilege. The impact could lead to a vertical privilege escalation to access the...

UBUNTU-CVE-2022-26310

Pandora FMS v7.0NG.760 and below allows an improper authorization in User Management where any authenticated user with access to the User Management module could create, modify or delete any user with full admin privilege. The impact could lead to a vertical privilege escalation to access the...

CVE-2022-26310

CVE-2022-26310 affects Pandora FMS v7.0NG.760 and earlier, via improper authorization in User Management that lets any authenticated user with access to that module create, modify, or delete users with full admin privileges, enabling vertical privilege escalation to admin level. The connected doc...

PT-2022-17616 · Kromitgmbh · Titra

Name of the Vulnerable Software and Affected Versions: GitHub repository kromitgmbh/titra versions prior to 0.79.1 Description: The issue is related to improper authorization. Recommendations: For versions prior to 0.79.1, update to version 0.79.1 or later to resolve the issue...

CVE-2022-2595: Improper Authorization

Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1...

titra 授权问题漏洞

titra is a modern open source time tracking project for freelancers and small teams. titra suffers from an authorization issue vulnerability that stems from improper authorization in titra prior to 0.79.1...

CVE-2022-26310: Improper Authorization

Pandora FMS v7.0NG.760 and below allows an improper authorization in User Management where any authenticated user with access to the User Management module could create, modify or delete any user with full admin privilege. The impact could lead to a vertical privilege escalation to access the...

Transposh WordPress Translation 1.0.8.1 Improper Authorization Vulnerability

Transposh WordPress Translation versions 1.0.8.1 and below do not properly enforce authorization on functionalities available on the plugin's "Utilities" page leading to unauthorized access for all user roles, including "Subscriber". 1. ADVISORY INFORMATION ======================= Product:...

WordPress plugin Transposh WordPress Translation 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Transposh WordPress...

Transposh WordPress Translation 1.0.8.1 Improper Authorization

RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: Transposh WordPress Translation Vendor URL: https://wordpress.org/plugins/transposh-translation-filter-for-wordpress/ Type: Improper Authorization CWE-285 Date found: 2022-02-21 Date...