CWE-807.

Sophos Firewall: A business logic vulnerability in the Up2Date component of Sophos Firewall older than…

• Sophos Firewall
• CWE-807

Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) Vulnerable to Bypass of IAM Authenticator

• cyberark conjur
• CWE-807

Lucee before 5.4.7.3 LTS and 6 before 6.1.1.118, when an attacker can place files on the server, is vulnerable to a protection mechanism failure that can let an attacker run code that would be expect…

• Lucee Server
• CWE-807

GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

• Palo Alto Networks GlobalProtect App
• Palo Alto Networks GlobalProtect UWP App
• CWE-807

Request approval spoofing in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center

• Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center
• CWE-807

Duplicate Advisory: Picklescan Allows Remote Code Execution via Malicious Pickle File Bypassing Static Analysis

• CWE-646
• CWE-807

<=0.0.21 · no fixed version yet

Lexmark has identified a vulnerability in our Lexmark Print Management Client (LPMC).

• Lexmark Print Management Client
• CWE-807

Anubis has a bot protection bypass when a sophisticated attacker asks to pass a challenge of difficulty 0 in github.com/Xe/x

• CWE-807

* · no fixed version yet

ECOVACS lawnmower and vacuum cloud service live video PIN bypass

• ECOVACS HOME
• ECOVACS cloud service
• CWE-603
• CWE-807

Traffic Alert and Collision Avoidance System (TCAS) II has a Reliance on Untrusted Inputs in a Security Decision vulnerability

• Traffic Alert and Collision Avoidance System (TCAS) II Collision Avoidance Systems
• CWE-807

IBM Security ReaQta improper input validation

• IBM Security ReaQta
• CWE-807

TrueFiling authorization bypass via user-controlled keys

• i3 Verticals TrueFiling
• Broken access control
• CWE-807

2N Access Commander: In 2N Access Commander versions 3.1.1.2 and prior…

• 2N Access Commander
• CWE-807

Authentication bypass Vulnerability in Aero

• Brokerage Technology Solutions Aero
• CWE-807

Sinatra vulnerable to Reliance on Untrusted Inputs in a Security Decision

• CWE-807

<4.1.0 · fixed in 4.1.0

BT: Encryption procedure host vulnerability

• Zephyr
• CWE-807

Privilege escalation in mk_informix plugin

• Checkmk
• CWE-272
• CWE-807

Improper input validation in Google Chrome

• Google Chrome
• CWE-20
• CWE-807

Missing check in tpm2_checkquote allows attackers to misrepresent the TPM state

• tpm2-software tpm2-tools
• CWE-807

Rancher Privilege escalation vulnerability via malicious "Connection" header

• CWE-807

>=2.0.0, <2.4.16 || >=2.5.0, <2.5.9 · fixed in 2.4.16, 2.5.9

Privilege escalation in mk_informix plugin

• Checkmk
• CWE-272
• CWE-807

Gallagher Command Centre Diagnostics Service: A reliance on untrusted inputs in a security decision could be exploited by a privileged…

• Gallagher Command Centre Diagnostics Service
• CWE-807

CSRF token reuse vulnerability in github.com/gofiber/fiber/v2

• Cross-site request forgery (CSRF)
• CWE-20

<2.50.0 · fixed in 2.50.0

DCK pinning attack in TETRA

• ETSI TETRA Standard
• CWE-807

GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

• Palo Alto Networks GlobalProtect App
• CWE-807

Mattermost Server server restarts may provide attackers with API access

• CWE-20
• CWE-807

<3.6.7-0.20170420152529-0968e4079e0a || >=3.7.0, <3.7.5 || >=3.8.0, <3.8.2 · fixed in 3.6.7-0.20170420152529-0968e4079e0a, 3.7.5, 3.8.2

Sony Neural Network Libraries reliance on untrusted inputs prior to v1.0.10

• CWE-807

<1.0.10 · fixed in 1.0.10

Cisco Firepower Management Center Software Information Disclosure Vulnerability

• Cisco Firepower Management Center
• CWE-807

login-proxy sends password to attacker-provided domain

• openSUSE Build service
• CWE-807

Pterodactyl Panel vulnerable to authentication bypass due to improper user-provided security token verification

• Authentication bypass
• Insecure deserialization

>=1.0.0, <1.6.2 · fixed in 1.6.2

Cached redirect poisoning via X-Forwarded-Host header

• CWE-807

<1.9.0 · fixed in 1.9.0

Malicious package may avoid detection in python auditing

• CWE-807

<1.9.0 · fixed in 1.9.0

Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation.

• Nextcloud Server
• CWE-807