LS ELECTRIC XBC-DN32U 访问控制错误漏洞

The LS ELECTRIC XBC-DN32U is a PLC programmable logic controller from LS ELECTRIC in Korea. An Access Control Error vulnerability exists in the LS ELECTRIC XBC-DN32U version 01.80. The vulnerability stems from the device's inability to properly control access to the PLC via its internal XGT...

WordPress plugin HTTP Headers 访问控制错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An access control error vulnerability exist...

Huawei HarmonyOS 访问控制错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from the fact that some interfaces in the package management module are not authenticated an...

TPCMS 日志信息泄露漏洞

TPCMS is a source of happiness Source of Happiness individual developers of an open source content management system. An access control error vulnerability exists in TPCMS version 3.2. A remote attacker could exploit this vulnerability to obtain sensitive information via the application URL...

Discourse 访问控制错误漏洞

Discourse is an open source community discussion platform. The platform includes community, email, and chat room features. Discourse suffers from an access control error vulnerability, which can be exploited by an attacker to create new threads as any user with embeddable comments...

Schneider Electric Easy UPS Online Monitoring Software 访问控制错误漏洞

Schneider Electric Easy UPS Online Monitoring Software is a power monitoring software from the French company Schneider Electric. Schneider Electric Easy UPS Online Monitoring Software suffers from an Access Control Error vulnerability that stems from a lack of authentication for critical functio...

Shenzhen Sihai Zhonglian Network Technology COMFAST CF-WR623N 授权问题漏洞

The Shenzhen Sihai Zhonglian Network Technology COMFAST CF-WR623N is a wireless router from Shenzhen Sihai Zhonglian Network Technology Shenzhen, China. A security vulnerability exists in Shenzhen Sihai Zhonglian Network Technology COMFAST CF-WR623N V2.3.0.1 and prior firmware versions, which ste...

Mozilla Firefox ESR 访问控制错误漏洞

Mozilla Firefox ESR is an extended support version of Firefox web browser from the Mozilla Foundation, USA. Mozilla Firefox ESR suffers from an Access Control Error vulnerability. An attacker could exploit this vulnerability to cause arbitrary code execution, information disclosure, or spoofing...

WAGO 访问控制错误漏洞

WAGO 750-88x Series and so on are products of WAGO, Germany.WAGO 750-88x Series is a 750-88x series programmable logic controller.WAGO 750-87x Series is a 750-87x series programmable logic controller.WAGO Series PFC100 is a programmable logic controller. a programmable logic controller. An access...

Plex media server 访问控制错误漏洞

Plex media server is a media player from Plex. An access control error vulnerability exists in Plex media server version 1.21 and prior versions, which can be exploited in a distributed denial of service attack via the plex service...

VMware Harbor Unauthorized Access Vulnerability

Harbor is an open source container image repository project designed for enterprise users. VMware Harbor has an unauthorized access vulnerability, which stems from an access control error in Harbor and can be used by attackers to construct malicious data for unauthorized access attacks without...

Little Software Stats 访问控制错误漏洞

Little Software Stats is Little Apps open source a Web application . It provides open source runtime intelligence solutions. Little Apps Little Software Stats has an access control error vulnerability that stems from a security issue in the component Password Reset Handler file...

Apache Superset 访问控制错误漏洞

An access control error vulnerability exists in Apache Superset, a data visualization and data exploration platform from the Apache Foundation, which stems from improper access controls and could be exploited by an unauthenticated attacker to access dashboard configuration metadata using the REST...

Harbor 访问控制错误漏洞

Harbor is an open source container image repository project designed for enterprise users. VMware Harbor has an unauthorized access vulnerability, which stems from an access control error in Harbor and can be used by attackers to construct malicious data for unauthorized access attacks without...

SAP Host Agent 访问控制错误漏洞

SAP Host Agent is a set of agent programs from SAP that supports a number of lifecycle management tasks such as operating system monitoring, database monitoring and system instance monitoring. An Access Control Error vulnerability exists in SAP Host Agent versions 7.21 and 7.22, which arises from...

SAP NetWeaver AS 访问控制错误漏洞

SAP NetWeaver AS is a SAP network application server from SAP. It not only provides network services, but also the basic platform for SAP software. An Access Control Error vulnerability exists in the Java-based SAP NetWeaver AS version 7.50, which stems from improper access control, and can be...

Zip4j 访问控制错误漏洞

Zip4j is a Java library for zip files and streams from the individual developer Srikanth Reddy Lingala. A security vulnerability exists in Zip4j that stems from the use of Zip4j that does not always check the MAC when decrypting ZIP archives...

Nextcloud Talk 访问控制错误漏洞

Nextcloud Talk is a self-hosted local audio/video and chat communication service from Nextcloud Germany. An access control error vulnerability exists in Nextcloud Talk. An attacker could use this vulnerability to access a user's Nextcloud files and view conversations...

RedditOnRails 访问控制错误漏洞

RedditOnRails is a Reddit-like site built on Ruby on Rails. An access control error vulnerability exists in RedditOnRails, which stems from incorrect access control...

IBM Robotic Process Automation 代码问题漏洞

IBM Robotic Process Automation is a robotic process automation product from International Business Machines IBM. An access control error vulnerability exists in IBM Robotic Process Automation for Cloud Pak versions 20.12 through 21.0.3, which can be exploited by an attacker to cause a user to be...