6 matches found
SUSE CVE-2026-54369
acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions aclgetfile, aclsetfile, aclextendedfile, and acldeletedeffile that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who contr...
NULL Pointer Dereference
Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the archiveaclfromtextnl function. An attacker can cause applications to crash by supplying a specially crafted archive containing a malformed ACL string. Remediation A fix was pushed into the master branch...
CVE-2026-33302: Incorrect Authorization
OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.2, the module ACL function AclMain::zhAclCheck only checks for the presence of any "allow" user or group. It never checks for explicit "deny" allowed=0. As a result,...
PLANET Technology switching software Function Compromise Data Compromise
The vulnerability of the webaclipv4BasedAceAdd function in PLANET Technology’s microprogrammed switching software is related to buffer overflows in the stack when processing the ipv4Aclkey parameter. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integri...
CVE-2025-44895
The PLANET FW-WGS-804HPT wall-mounted managed switch, specifically version v1.305b241111 , contains a stack-based buffer overflow vulnerability within the web_acl_ipv4BasedAceAdd function. This flaw is triggered when processing the ipv4Aclkey parameter in the microprogrammed switching software. A...
