Intel Raid Web Console Access Control Disclosure

The vulnerability of the Intel Raid Web Console web console relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker to disclose protected information...

CVE-2023-29114

The CVE-2023-29114 entry concerns Enel X Waybox (JuiceBox) where a lack of access control lets attackers read system logs via the web management interface. The exposed logs contain sensitive credentials and configuration data, including Wi‑Fi credentials, APN web address/credentials, IPsec creden...

Imagine Cup Platform Code Execution

The vulnerability of the Imagine Cup platform’s Microsoft Azure Functions component is related to lack of access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Ivanti Velocity License Server Privilege Escalation

The vulnerability of the Ivanti Velocity License Server for mobile devices is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Microsoft AutoUpdate (MAU) Privilege Escalation

The vulnerability of the Microsoft AutoUpdate MAU for Mac application relates to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Microsoft SQL Server Privilege Escalation

The vulnerability of the Microsoft SQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

platforms for developing and Privilege Escalation

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

platforms for developing and Privilege Escalation

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce stores is related to deficiencies in access control. Exploiting this vulnerability can allow attackers, operating remotely, to enhance their privileges...

Windows Update Stack Privilege Escalation

The vulnerability of the Windows Update Stack component of the Windows operating system is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...

FortiADC Administrative Access File Write

The vulnerability of the FortiADC application delivery controller’s administrative interface is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain write access to arbitrary files by sending specially crafted HTTP or HTTPS requests...

RUGGEDCOM Ethernet Switches IP Packet Forwarding Unauthorized Access

The vulnerability of the IP-packet forwarding function in RUGGEDCOM Ethernet switches’ microprogrammed software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PAN-OS Access Control

The vulnerability of the PAN-OS operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to influence user access to network resources from a remote location...

Apache Airflow Access Control

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Apache Airflow is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to resources...

Microsoft Authenticator Privilege Escalation

The vulnerability of the Microsoft Authenticator multi-factor authentication application is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Microsoft Intune Linux Access Control Privilege Escalation

The vulnerability of the Microsoft Intune Linux access control agent, which manages access to corporate applications and resources, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

AuthenticatedVoter Class Auth Bypass

The vulnerability of the AuthenticatedVoter class in the Java framework for securing industrial applications under Spring Security is related to deficiencies in access control when processing the null parameter. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

USB Print driver Windows Privilege Escalation

The vulnerability of the USB Print driver for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Enterprise Management Server OMI Privilege Escalation

The vulnerability of the enterprise management server through the Internet-based Open Management Infrastructure OMI extensions for managing virtual machines in Azure is related to deficiencies in access control. Exploitation of this vulnerability could allow attackers to increase their privileges...

Windows kernel Privilege Escalation

The vulnerability of Windows operating system kernels is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass security restrictions and enhance their privileges...

Kibana Data Visualization Service Data Compromise

The vulnerability of the Kibana data visualization service is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality of the protected information...