ESPEC MIC 多款产品访问控制错误漏洞

The ESPEC MIC RT-12N and others are an environmental sensor from ESPEC MIC. A security vulnerability exists in the Especmic RT-12N/RS-12N, RT-22BN, and TEU-12N, which stems from a lack of authentication for critical functions, and can be exploited by an attacker to tamper with the settings of the...

Metabase 访问控制错误漏洞

Metabase is an open source data analytics platform from the American company Metabase. Metabase suffers from an Access Control Error vulnerability that stems from the fact that to edit SQL snippets, Metabase should require people to belong to at least one group with native query editing privilege...

Lost and Found Information System 访问控制错误漏洞

Lost and Found Information System is a lost and found information system by oretnom23 Individual Developer. An Access Control Error vulnerability exists in Lost and Found Information System version 1.0, which stems from incorrect access control...

Rockwell Automation Kinetix 5500 安全漏洞

The Rockwell Automation Kinetix 5500 is the first Kinetix drive from Rockwell Automation designed with an external common AC/DC bus connection system. It reduces hardware requirements and allows for seamless expansion, using a single platform for single- or multi-axis systems. An access control...

AzuraCast Access Control Error Vulnerability

AzuraCast is a simple self-hosted webcast management suite from AzuraCast. An Access Control Error vulnerability exists in versions of AzuraCast prior to 0.18.3 that stems from an improper restriction of excessive authentication attempts. An attacker could exploit the vulnerability to brute force...

IBM Cognos Analytics Access Control Error Vulnerability (CNVD-2023-37158)

IBM Cognos Analytics is a suite of business intelligence software from International Business Machines IBM. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. An Access Control...

Seiko Solutions SkyBridge 访问控制错误漏洞

Seiko Solutions SkyBridge is a series of routers from Seiko Solutions, Japan. A security vulnerability exists in Seiko Solutions SkyBridge. A remote attacker could exploit the vulnerability to obtain or change product setting information or perform certain critical functions, such as rebooting th...

Intel OFU software 安全漏洞

Intel OFU software is an application from Intel Corporation USA. A security vulnerability exists in Intel OFU software versions prior to 14.1.30 that stems from incorrect access control. An attacker can exploit the vulnerability to escalate privileges...

mage-ai 访问控制错误漏洞

mage-ai is a modern replacement for Airflow in the Mage open source. An access control error vulnerability exists in mage-ai version 0.8.34, which stems from the fact that a user who is not logged in or does not have edit privileges can access the terminal...

Zammad Access Control Error Vulnerability (CNVD-2023-36294)

Zammad is a Web-based open source help desk. Zammad suffers from an Access Control Error vulnerability that can be exploited by a remote attacker to submit a special request that can obtain sensitive information...

AzuraCast 安全漏洞

AzuraCast is a simple self-hosted webcast management suite from AzuraCast. An Access Control Error vulnerability exists in versions of AzuraCast prior to 0.18.3 that stems from an improper restriction of excessive authentication attempts. An attacker could exploit the vulnerability to brute force...

Moxa MiiNePort E1 Access Control Error Vulnerability

Moxa MiiNePort E1 is an embedded module from MOXA, China. An access control error vulnerability exists in the Moxa MiiNePort E1, which can be exploited by an attacker to submit a special request to execute arbitrary code or interrupt an operation in the system context...

Dell Alienware Command Center 访问控制错误漏洞

Dell Alienware Command Center is a package manager from Dell USA. An Access Control Error vulnerability exists in Dell Alienware Command Center, which stems from the inclusion of incorrect access controls, and can be exploited by a local malicious attacker to cause an elevation of privilege durin...

Zammad 安全漏洞

Zammad is a Web-based open source help desk. Zammad suffers from an Access Control Error vulnerability that can be exploited by a remote attacker to submit a special request that can obtain sensitive information...

MOXA MiiNePort E1 访问控制错误漏洞

Moxa MiiNePort E1 is an embedded module from MOXA, China. An access control error vulnerability exists in the Moxa MiiNePort E1, which can be exploited by an attacker to submit a special request to execute arbitrary code or interrupt an operation in the system context...

Arista EOS 访问控制错误漏洞

Arista EOS is a fully programmable, highly modular, Linux-based network operating system from Arista Corporation. An access control error vulnerability exists in Arista EOS. An attacker exploiting this vulnerability could update arbitrary configurations in the switch...

ForgeRock Access Management Access Control Error Vulnerability

ForgeRock Access Management is a comprehensive, unified solution from ForgeRock USA designed to quickly enable superior experiences tailored to the unique needs of users and employees. An access control error vulnerability exists in ForgeRock Access Management versions 6.5.0 through 7.2.0, which...

PowerJob 安全漏洞

PowerJob is an open source distributed computing and job scheduling framework that allows developers to easily schedule tasks in their applications. An Access Control Error vulnerability exists in PowerJob version V4.3.1 that stems from improper access control. An attacker could exploit the...

MAXTECH MAX-G866ac 访问控制错误漏洞

The MAXTECH MAX-G866ac is a router from MAXTECH. An access control error vulnerability exists in the MAXTECH MAX-G866ac version 0.4.1TBRO20160314, which stems from a lack of authentication in the component Remote Management...

Schneider Electric StruxureWare Data Center Expert Access Control Error Vulnerability (CNVD-2023-37594)

Schneider Electric StruxureWare Data Center Expert is a monitoring software from the French company Schneider Electric Schneider Electric. It is suitable for a variety of organizations to monitor their company-wide power, cooling, security, and environment. An access control error vulnerability...