Rockwell Automation Kinetix 5500 安全漏洞

The Rockwell Automation Kinetix 5500 is the first Kinetix drive from Rockwell Automation designed with an external common AC/DC bus connection system. It reduces hardware requirements and allows for seamless expansion, using a single platform for single- or multi-axis systems. An access control...

Seiko Solutions SkyBridge 访问控制错误漏洞

Seiko Solutions SkyBridge is a series of routers from Seiko Solutions, Japan. A security vulnerability exists in Seiko Solutions SkyBridge. A remote attacker could exploit the vulnerability to obtain or change product setting information or perform certain critical functions, such as rebooting th...

Intel OFU software 安全漏洞

Intel OFU software is an application from Intel Corporation USA. A security vulnerability exists in Intel OFU software versions prior to 14.1.30 that stems from incorrect access control. An attacker can exploit the vulnerability to escalate privileges...

mage-ai 访问控制错误漏洞

mage-ai is a modern replacement for Airflow in the Mage open source. An access control error vulnerability exists in mage-ai version 0.8.34, which stems from the fact that a user who is not logged in or does not have edit privileges can access the terminal...

Zammad Access Control Error Vulnerability (CNVD-2023-36294)

Zammad is a Web-based open source help desk. Zammad suffers from an Access Control Error vulnerability that can be exploited by a remote attacker to submit a special request that can obtain sensitive information...

AzuraCast 安全漏洞

AzuraCast is a simple self-hosted webcast management suite from AzuraCast. An Access Control Error vulnerability exists in versions of AzuraCast prior to 0.18.3 that stems from an improper restriction of excessive authentication attempts. An attacker could exploit the vulnerability to brute force...

Moxa MiiNePort E1 Access Control Error Vulnerability

Moxa MiiNePort E1 is an embedded module from MOXA, China. An access control error vulnerability exists in the Moxa MiiNePort E1, which can be exploited by an attacker to submit a special request to execute arbitrary code or interrupt an operation in the system context...

Dell Alienware Command Center 访问控制错误漏洞

Dell Alienware Command Center is a package manager from Dell USA. An Access Control Error vulnerability exists in Dell Alienware Command Center, which stems from the inclusion of incorrect access controls, and can be exploited by a local malicious attacker to cause an elevation of privilege durin...

Zammad 安全漏洞

Zammad is a Web-based open source help desk. Zammad suffers from an Access Control Error vulnerability that can be exploited by a remote attacker to submit a special request that can obtain sensitive information...

MOXA MiiNePort E1 访问控制错误漏洞

Moxa MiiNePort E1 is an embedded module from MOXA, China. An access control error vulnerability exists in the Moxa MiiNePort E1, which can be exploited by an attacker to submit a special request to execute arbitrary code or interrupt an operation in the system context...

Arista EOS 访问控制错误漏洞

Arista EOS is a fully programmable, highly modular, Linux-based network operating system from Arista Corporation. An access control error vulnerability exists in Arista EOS. An attacker exploiting this vulnerability could update arbitrary configurations in the switch...

ForgeRock Access Management Access Control Error Vulnerability

ForgeRock Access Management is a comprehensive, unified solution from ForgeRock USA designed to quickly enable superior experiences tailored to the unique needs of users and employees. An access control error vulnerability exists in ForgeRock Access Management versions 6.5.0 through 7.2.0, which...

Schneider Electric StruxureWare Data Center Expert Access Control Error Vulnerability (CNVD-2023-37594)

Schneider Electric StruxureWare Data Center Expert is a monitoring software from the French company Schneider Electric Schneider Electric. It is suitable for a variety of organizations to monitor their company-wide power, cooling, security, and environment. An access control error vulnerability...

PowerJob 安全漏洞

PowerJob is an open source distributed computing and job scheduling framework that allows developers to easily schedule tasks in their applications. An Access Control Error vulnerability exists in PowerJob version V4.3.1 that stems from improper access control. An attacker could exploit the...

MAXTECH MAX-G866ac 访问控制错误漏洞

The MAXTECH MAX-G866ac is a router from MAXTECH. An access control error vulnerability exists in the MAXTECH MAX-G866ac version 0.4.1TBRO20160314, which stems from a lack of authentication in the component Remote Management...

Schneider Electric StruxureWare Data Center Expert Access Control Error Vulnerability (CNVD-2023-37593)

Schneider Electric StruxureWare Data Center Expert is a monitoring software from the French company Schneider Electric Schneider Electric. It is suitable for a variety of organizations to monitor their company-wide power, cooling, security, and environment. An access control error vulnerability...

Schneider Electric StruxureWare Data Center Expert Access Control Error Vulnerability

Schneider Electric StruxureWare Data Center Expert is a monitoring software from the French company Schneider Electric Schneider Electric. It is suitable for a variety of organizations to monitor their company-wide power, cooling, security, and environment. An access control error vulnerability...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an Access Control Error vulnerability that arises from an existing authorization code being invalidated when de-authorizing an OAuth2 application, which can be exploited by an...

PaperCut NG 访问控制错误漏洞

PaperCut NG is a suite of next-generation printer control software from PaperCut Australia. An Access Control Error vulnerability exists in PaperCut NG version 22.0.5, which stems from improper access control and can be exploited by an attacker to bypass authentication and execute arbitrary code ...

Cloud hypervisor 资源管理错误漏洞

Cloud hypervisor is Cloud hypervisor's virtual machine monitor for modern cloud workloads. Cloud hypervisor suffers from an access control error vulnerability that originates from allowing a user to send a malicious HTTP request via an HTTP API socket, which can be exploited by an attacker to cau...