CVE-2021-37791

MyAdmin v1.0 is affected by an incorrect access control vulnerability in viewing personal center in /api/user/userData?userCode=admin...

Ping Identity Windows PingId 访问控制错误漏洞

Ping Identity Windows PingId is a software from Ping Identity, Inc. that provides security for applications. An access control error vulnerability exists in Ping Identity Windows PingId versions prior to 2.8, which stems from a failure to validly validate local Java service communication used to...

Mozilla Firefox 访问控制错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation. Mozilla Firefox suffers from an Access Control Error vulnerability that stems from a lack of protection for sensitive information on cross-domain same-site pages in the MediaError message attribute...

Nagios XI 访问控制错误漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. A security vulnerability exists in Nagios XI version 5.8.5 and prior versions. An attacker can exploit the...

SUSE Manager 访问控制错误漏洞

SUSE Manager is a Linux server management system from SUSE Germany. The system provides automated software management, system configuration, and monitoring. An access control error vulnerability exists in SUSE Manager release-notes-susemanager. No information about this vulnerability is available...

Schneider Electric IGSS Data Server Access Control Error Vulnerability (CNVD-2023-38195)

The Schneider Electric IGSS Data Server is a data server for the interactive graphical Scada system from Schneider Electric, France. An Access Control Error vulnerability exists in Schneider Electric IGSS Data Server versions prior to 15.0.0.22140, which stems from the application's lack of...

JTEKT TOYOPUC Products 访问控制错误漏洞

JTEKT TOYOPUC Products is a family of programmable controllers from JTEKT Japan. An access control error vulnerability exists in JTEKT TOYOPUC Products that stems from a lack of authentication functionality in the affected products. An attacker could use this vulnerability to change the controlle...

Schneider Electric IGSS Data Server 访问控制错误漏洞

The Schneider Electric IGSS Data Server is a data server for the interactive graphical Scada system from Schneider Electric, France. An Access Control Error vulnerability exists in Schneider Electric IGSS Data Server versions prior to 15.0.0.22140, which stems from the application's lack of...

NETGEAR WNAP320 安全漏洞

The NETGEAR WNAP320 is a wireless access point AP from NETGEAR. An access control error vulnerability exists in the NETGEAR WNAP320 version v2.0.3, which stems from incorrect access control in /recreate.php, which can be exploited by an attacker to obtain a user's cookie...

IOBit IOTransfer 访问控制错误漏洞

IOBit IOTransfer is an easy-to-use iOS file transfer tool, phone cleaner, and video downloader from IOBit. Easily transfer/sync/move/backup photos, music, videos, contacts and more. An Access Control Error vulnerability exists in IOBit IOTransfer version 4.3.1.1561, which can be exploited by an...

Hillrom Welch Allyn ELI 访问控制错误漏洞

The Hillrom Welch Allyn ELI is a series of resting electrocardiographs from Hillrom, Inc. An Access Control Error vulnerability exists in Hillrom Welch Allyn ELI that stems from not restricting or incorrectly restricting access to resources by unauthorized actors. The following products and...

FileCloud 访问控制错误漏洞

FileCloud is an ultra-secure content collaboration platform from US-based FileCloud, Inc. providing industry-leading compliance, data governance, data leakage protection, data retention and digital rights management capabilities. An access control error vulnerability exists in FileCloud version...

WordPress Like Button Rating plugin Access Control Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control error...

LibreHealth EHR 安全漏洞

LibreHealth EHR is a clinically-focused electronic health record EHR system designed to be easy to use out of the box and customizable for use in a variety of healthcare environments. version 2.0.0 of LibreHealth EHR is vulnerable to an access control error that could be exploited by an attacker ...

Dominion Voting Systems ImageCast X 访问控制错误漏洞

Dominion Voting Systems ImageCast X is an intuitive and configurable face-to-face voting solution from Dominion Voting Systems. of ballots...

Nextcloud 访问控制错误漏洞

Nextcloud is an open source, self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. An access control error vulnerability exists in Nextcloud richdocuments versions prior to 6.0.0, prior to 5.0.4, and prior to 4.2.6, which originates from a share...

GitLab 访问控制错误漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. An Access Control Error vulnerability exists in GitLab Community Edition and GitLab...

Open Automation Software OAS Platform访问控制错误漏洞

Open Automation Software OAS Platform is an industrial Internet of Things IoT suite from Open Automation Software, Inc. An access control error vulnerability exists in Open Automation Software OAS Platform version V16.00.0112, which stems from an external configuration control issue with the OAS...

Publify Access Control Error Vulnerability

Publify is a simple but full-featured web publishing software.An access control error vulnerability exists in versions of Publify prior to 9.2.9, which stems from incorrect access control. An attacker could exploit this vulnerability to allow an unprivileged user to modify/delete an administrator...

Open Automation Software OAS Platform 访问控制错误漏洞

Open Automation Software OAS Platform is an industrial Internet of Things IoT suite from Open Automation Software, Inc. Open Automation Software OAS Platform V16.00.0112 contains an information disclosure vulnerability that could be exploited by attackers to compromise sensitive information...