8855 matches found
GHSA-HH54-53M7-7FFJ alist Incorrect Access Control vulnerability
alist =3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file...
alist Incorrect Access Control vulnerability
alist =3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file...
CVE-2023-33498
alist =3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file...
CVE-2023-33498
alist =3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file...
Design/Logic Flaw
alist =3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file...
CVE-2020-36699
The Quick Page/Post Redirect Plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the qpprsavequickredirectajax and qpprdeletequickredirect functions in versions up to, and including, 5.1.9. This makes it possible for low-privileged attackers to interact...
PT-2023-11841 · WordPress · Quick Page/Post Redirect Plugin
Name of the Vulnerable Software and Affected Versions: The Quick Page/Post Redirect Plugin for WordPress versions up to, and including, 5.1.9 Description: The issue is related to authorization bypass due to missing capability checks on the qppr save quick redirect ajax and qppr delete quick...
AList 代码问题漏洞
AList is a file listing program with multi-storage support by the individual developer Xhofe in China. A security vulnerability exists in AList 3.16.3 and earlier versions, which stems from an access control error that allows users with low privileges to upload arbitrary files...
CVE-2023-33498
alist =3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file...
CVE-2023-33498
alist =3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file...
PT-2023-24366 · Alist · Alist
Name of the Vulnerable Software and Affected Versions: alist versions =3.16.3 Description: The issue concerns incorrect access control, allowing accounts with low privilege levels to upload any file. This can potentially lead to unauthorized access and data breaches. There is no information...
CVE-2023-33498
alist =3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file...
MB connect line mbCONNECT24和mymbCONNECT24 信息泄露漏洞
MB connect line mbCONNECT24 and MB connect line mymbCONNECT24 are both products of the German company MB connect line. mb connect line mbCONNECT24 is a set of remote service portals. The product supports remote access, data logging and alarms. MB connect line mymbCONNECT24 is an in-house remote...
DEBIAN-CVE-2023-33968
Kanboard is open source project management software that focuses on the Kanban methodology. Versions prior to 1.2.30 are subject to a missing access control vulnerability that allows a user with low privileges to create or transfer tasks to any project within the software, even if they have not...
CVE-2023-3066
Incorrect Authorization vulnerability in Mobatime mobile application AMXGT100 allows a low-privileged user to impersonate anyone else, including administratorsThis issue affects Mobatime mobile application AMXGT100: through 1.3.20...
PT-2023-24608
Name of the Vulnerable Software and Affected Versions Kanboard versions prior to 1.2.30 Description Kanboard is open source project management software that focuses on the Kanban methodology. The software is subject to a missing access control issue that allows a user with low privileges to creat...
Kanboard 安全漏洞
Kanboard is a suite of open source visual task board software. The software has the ability to customize the panels to suit your business. A security vulnerability exists in Kanboard versions prior to 1.2.30 that stems from an Access Control Deficiency vulnerability that allows a low-privileged...
PT-2023-15932 · WordPress · Frontend Post Wordpress Plugin
Name of the Vulnerable Software and Affected Versions: Frontend Post WordPress Plugin versions through 2.8.4 Description: The issue concerns a lack of validation for an attribute in one of the plugin's shortcodes. This could allow users with a role as low as contributor to add a malicious shortco...
PT-2023-24610 · Kanboard · Kanboard
Name of the Vulnerable Software and Affected Versions: Kanboard versions prior to 1.2.30 Description: A missing access control issue was found in Kanboard, allowing a user with the lowest privileges to leak all task and project titles, even if they are not invited or it's a personal project. This...