SAMSUNG Mobile devices TelephonyUI 安全漏洞

An access control error vulnerability exists in Samsung TelephonyUI, a Telephony service for Samsung mobile devices in South Korea that provides support for the Telephony Application Programming Interface TAPI. The vulnerability stems from a lack of proper permission checking in TelephonyUI, whic...

IBM Security Access Manager Appliance 安全漏洞

The IBM Security Access Manager Appliance ISAM Appliance is a network appliance-based security solution from IBM of the United States. The product is primarily used for access control and Web-based threat protection, providing system performance monitoring, log analysis, and diagnostics.IBM...

Multiple MediaTek Chips Autoboot Access Control Error Vulnerability

MediaTek Inc. is the world's fourth largest fab-based semiconductor company and a leader in the markets of mobile terminals, smart home applications, wireless connectivity and Internet of Things IoT products, with approximately 1.5 billion units of end products with built-in MediaTek chips hittin...

Cisco Unified Communications Manager 安全漏洞

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. An Access Control Error...

Apache Superset 访问控制错误漏洞

Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. Apache Superset suffers from an Access Control Error vulnerability that stems from improper access restrictions. A remote attacker could exploit the vulnerability to bypass implemented security...

GitLab 访问控制错误漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. GitLab suffers from an Access Control Error vulnerability that stems from an...

GitLab 访问控制错误漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. An access control error vulnerability exists in GitLab EE versions 12.2 through...

CVE-2021-37791

MyAdmin v1.0 is affected by an incorrect access control vulnerability in viewing personal center in /api/user/userData?userCode=admin...

Ping Identity Windows PingId 访问控制错误漏洞

Ping Identity Windows PingId is a software from Ping Identity, Inc. that provides security for applications. An access control error vulnerability exists in Ping Identity Windows PingId versions prior to 2.8, which stems from a failure to validly validate local Java service communication used to...

Nagios XI 访问控制错误漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. A security vulnerability exists in Nagios XI version 5.8.5 and prior versions. An attacker can exploit the...

Mozilla Firefox 访问控制错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation. Mozilla Firefox suffers from an Access Control Error vulnerability that stems from a lack of protection for sensitive information on cross-domain same-site pages in the MediaError message attribute...

Schneider Electric IGSS Data Server Access Control Error Vulnerability (CNVD-2023-38195)

The Schneider Electric IGSS Data Server is a data server for the interactive graphical Scada system from Schneider Electric, France. An Access Control Error vulnerability exists in Schneider Electric IGSS Data Server versions prior to 15.0.0.22140, which stems from the application's lack of...

SUSE Manager 访问控制错误漏洞

SUSE Manager is a Linux server management system from SUSE Germany. The system provides automated software management, system configuration, and monitoring. An access control error vulnerability exists in SUSE Manager release-notes-susemanager. No information about this vulnerability is available...

JTEKT TOYOPUC Products 访问控制错误漏洞

JTEKT TOYOPUC Products is a family of programmable controllers from JTEKT Japan. An access control error vulnerability exists in JTEKT TOYOPUC Products that stems from a lack of authentication functionality in the affected products. An attacker could use this vulnerability to change the controlle...

Schneider Electric IGSS Data Server 访问控制错误漏洞

The Schneider Electric IGSS Data Server is a data server for the interactive graphical Scada system from Schneider Electric, France. An Access Control Error vulnerability exists in Schneider Electric IGSS Data Server versions prior to 15.0.0.22140, which stems from the application's lack of...

NETGEAR WNAP320 安全漏洞

The NETGEAR WNAP320 is a wireless access point AP from NETGEAR. An access control error vulnerability exists in the NETGEAR WNAP320 version v2.0.3, which stems from incorrect access control in /recreate.php, which can be exploited by an attacker to obtain a user's cookie...

Hillrom Welch Allyn ELI 访问控制错误漏洞

The Hillrom Welch Allyn ELI is a series of resting electrocardiographs from Hillrom, Inc. An Access Control Error vulnerability exists in Hillrom Welch Allyn ELI that stems from not restricting or incorrectly restricting access to resources by unauthorized actors. The following products and...

IOBit IOTransfer 访问控制错误漏洞

IOBit IOTransfer is an easy-to-use iOS file transfer tool, phone cleaner, and video downloader from IOBit. Easily transfer/sync/move/backup photos, music, videos, contacts and more. An Access Control Error vulnerability exists in IOBit IOTransfer version 4.3.1.1561, which can be exploited by an...

FileCloud 访问控制错误漏洞

FileCloud is an ultra-secure content collaboration platform from US-based FileCloud, Inc. providing industry-leading compliance, data governance, data leakage protection, data retention and digital rights management capabilities. An access control error vulnerability exists in FileCloud version...

WordPress Like Button Rating plugin Access Control Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control error...