WordPress WPML Multilingual CMS premium plugin access control error vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress WPML Multilingual CMS premium plugin 4.5.10 and earlier versions are vulnerable to an acces...

Miele appWash Access Control Error Vulnerability

Miele appWash is a laundry room digitization app from Miele Germany. Miele appWash suffers from an Access Control Error vulnerability that stems from the use of an API endpoint to bypass authorization checks. An attacker could use this vulnerability to gain read and partial write access to data...

Tailscale 访问控制错误漏洞

Tailscale is an open source WireGuard based application from Tailscale. Can provide a secure private network for any size team . An Access Control Error vulnerability exists in versions prior to Tailscale v1.32.3. Attackers use the vulnerability to remotely execute code...

WBCE CMS Access Control Error Vulnerability

WBCE CMS is an open source content management system CMS based on PHP and MySQL. WBCE CMS suffers from an Access Control Error vulnerability that stems from the increaseattempts function in the wbce/framework/class.login.php file in its Header Handler component not appropriately restricting too...

Miele appWash 安全漏洞

Miele appWash is a laundry room digitization app from Miele Germany. Miele appWash suffers from an Access Control Error vulnerability that stems from the use of an API endpoint to bypass authorization checks. An attacker could use this vulnerability to gain read and partial write access to data...

Karmasis Infraskope Agent 访问控制错误漏洞

Karmasis Infraskope Agent is an application logger from Karmasis. An Access Control Error vulnerability exists in Karmasis Infraskope Agent versions prior to 7.10.00, which stems from improper access control in the application and can be exploited by an attacker to corrupt the page listing the...

BACKCLICK 访问控制错误漏洞

BACKCLICK, a marketing software from BACKCLICK Germany, helps organizations create, implement, evaluate and run web-based email campaigns. version 5.9.63 of BACKCLICK Professional is vulnerable to an authentication bypass. An attacker could use this vulnerability to bypass user authentication use...

Karmasis Infraskope Agent 访问控制错误漏洞

Karmasis Infraskope Agent is an application logger from Karmasis. An access control error vulnerability exists in Karmasis Infraskope Agent. An attacker could modify the logs by exploiting this vulnerability...

Rdiffweb 访问控制错误漏洞

Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. Provides quick access to your archives through an efficient web interface. An access control error vulnerability exists in Rdiffweb versions prior to 2.5.0a6, which stems from a lack of authentication for critic...

Wiesemann & Theis Com-Server Family 访问控制错误漏洞

The Wiesemann & Theis Com-Server Family is a family of serial device servers from Wiesemann & Theis, Germany. An access control error vulnerability exists in Wiesemann & Theis Com-Server Family. A remote attacker could exploit this vulnerability to log in to the system without knowing the passwor...

Intel NUC 安全漏洞

Intel NUC is a small minicomputer from Intel U.S. Inc. IntelR NUC 8 Compute Elements CBWHL357.0096 previous versions have an access control error vulnerability, which stems from improper BIOS firmware access control and can be exploited by attackers for local privilege elevation...

Avaya Scopia Pathfinder 访问控制错误漏洞

Avaya Scopia Pathfinder is a complete firewall and NAT traversal solution from Avaya USA. An Access Control Error vulnerability exists in Avaya Scopia Pathfinder version 8.3.7.0.4, which originates from a compromised access control in user authentication, allowing an unauthenticated, remote...

多款Bitdefender产品访问控制错误漏洞

Bitdefender Engines and others are products of the Romanian company Bitdefender.Bitdefender Engines is an antivirus engine.Bitdefender Endpoint Security Tool is an endpoint security management tool.Bitdefender Bitdefender Antivirus Plus is a suite of antivirus programs that offer mainly cyber...

SICK SIM Series 访问控制错误漏洞

SICK SIM Series is a series of sensor integrators from SICK, Germany. An access control error vulnerability exists in SICK SIM Series FX Partnumber versions 1097816 and 1097817 firmware versions prior to 1.6.0, which stems from a vulnerability that allows an unprivileged, remote attacker to acces...

SICK SIM Series 访问控制错误漏洞

SICK SIM Series is a series of sensor integrators from SICK, Germany. An access control error vulnerability exists in the SICK SIM Series 4000 PPC Partnumber 1078787 version, which stems from a vulnerability that allows an unprivileged, remote attacker to access a user level defined as...

InHand Networks InRouter302 访问控制错误漏洞

The InHand Networks InRouter302 is an LTE cellular router from InHand Networks USA. An access control error vulnerability exists in InHand Networks InRouter302 version V3.5.45. An attacker could exploit this vulnerability to escalate privilege escalation and cause information disclosure...

Delta Electronics InfraSuite Device Master 访问控制错误漏洞

Delta Electronics InfraSuite Device Master is a device used to simplify and automate the monitoring of critical equipment from Delta Electronics Taiwan, China. An access control error vulnerability exists in Delta Electronics InfraSuite Device Master 00.00.01a and prior versions, which stems from...

Delta Electronics InfraSuite Device Master 访问控制错误漏洞

Delta Electronics InfraSuite Device Master is used to simplify and automate the monitoring of critical devices by Delta Electronics of Taiwan, China. The Delta Electronics InfraSuite Device Master suffers from an access control error vulnerability that stems from deserialization of untrusted data...

Sanitization Management System 访问控制错误漏洞

Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. An access control error vulnerability exists in Sanitialization Management System version 1.0 that stems from insufficient authentication...

free5GC 访问控制错误漏洞

free5GC is an open source project for 5th Generation 5G mobile core networks open sourced by free5GC. A security vulnerability exists in free5GC version v3.2.1, which stems from vulnerability to information leakage...