Fortinet FortiGate 信息泄露漏洞

Fortinet FortiGate is a network security platform from Fortinet, Inc. The platform provides firewall, anti-virus and intrusion prevention IPS, application control, anti-spam, wireless controller, and WAN acceleration.Fortinet fortimanager has an access control error vulnerability that is caused b...

GitLab Enterprise Edition 和 GitLab Community Edition 访问控制错误漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. An Access Control Error vulnerability exists in GitLab Enterprise Edition and GitLab Community Edition that stems from inaccurately displaying Snippet files th...

GitLab Enterprise Edition 和 GitLab Community Edition 访问控制错误漏洞

GitLab Enterprise Edition is a content management system, and GitLab Community Edition is a community edition of GitLab from GitLab, Inc. An access control error vulnerability exists in GitLab Enterprise Edition and GitLab Community Edition, which stems from improperly restricted access. A remote...

Zulip 安全漏洞

Zulip is a powerful open source group chat application from the Zulip team. Used to combine the immediacy of real-time chat with the productivity benefits of threaded conversations, Zulip is vulnerable to an access control error that stems from the presence of incorrect access controls in the...

JetBrains TeamCity 访问控制错误漏洞

JetBrains TeamCity is a distributed build management and continuous integration tool from JetBrains Jetbrains. An access control error vulnerability exists in JetBrains TeamCity, which stems from the fact that the product does not effectively restrict permissions for the Agent Push feature. An...

Visual Voice Mail 访问控制错误漏洞

Visual Voice Mail is visual voicemail. An Access Control Error vulnerability exists in Visual Voice Mail that stems from the product allowing temporary access to read SMS messages and read an IMAP authentication message. The following products and versions are affected: Visual Voice Mail version...

Cuppa CMS 访问控制错误漏洞

CuppaCMS is a content management system CMS. An access control error vulnerability exists in Cuppa CMS, which stems from the product's file copy function that allows arbitrary files to be copied to the current directory. An attacker could read arbitrary files through this vulnerability. The...

Plesk CMS Access Control Error Vulnerability

Plesk Cms is a WebOps hosting platform in Switzerland. Used to run, automate and grow applications, websites and hosting businesses, an access control error vulnerability exists in Plesk CMS, which stems from the product not effectively restricting user identities. An attacker could exploit this...

PeerTube 访问控制错误漏洞

PeerTube is a decentralized video sharing service platform. Peertube has an access control error vulnerability that stems from the product's failure to effectively check the status of videos, which could be exploited by attackers to increase the number of likes that modify private videos...

Dolibarr 访问控制错误漏洞

Dolibarr is a software application. A modern software package that helps manage your organization's activities. A security vulnerability exists in dolibarr that stems from incorrect access control IDOR...

Industrial Control Links Icl ScadaFlex II Scada Controllers 访问控制错误漏洞

Industrial Control Links Icl ScadaFlex II Scada Controllers is a set of Web Scada controllers from Industrial Control Links, Inc. It is designed to provide a complete Scada system at the lowest possible cost. An Access Control Error vulnerability exists in ICL ScadaFlex II SCADA Controllers...

Unshiftio Url-parse 访问控制错误漏洞

Url-Parse is a small Url parser that works seamlessly across Node.js and browser environments. An Access Control Error vulnerability exists in Unshiftio Url-parse that stems from the product's lack of an effective protection mechanism for user-controlled keys. The vulnerability can be exploited t...

Drogon 访问控制错误漏洞

Drogon is an open source HTTP application framework based on C 14/17. Drogon can be used to easily build various types of web application server programs using C. An access control error vulnerability exists in the Drogon framework, which stems from the product's HttpFile::save method not...

Jenkins Snow Commander Plugin Access Control Error Vulnerability

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Snow Commander Plugin 2.0 and earlier versions are vulnerable to an access control error that stems from not...

librenms Access Control Error Vulnerability

Librenms is a PHP and MySQL based open source network monitoring system from the Librenms community. The system features custom alerts, automatic discovery of network environments and automatic updates. librenms suffers from an access control error vulnerability, which stems from an improper acce...

Jenkins 插件权限许可和访问控制问题漏洞

The Jenkins Plugin is a plug-in that provides appropriate functionality for Jenkins. Jenkins Checkmarx Plugin Access Control Error vulnerability. An attacker could use this vulnerability to connect to an attacker-specified Web server via an attacker-specified credential ID to capture credentials...

Samsung Wear Os StTheaterModeReceiver Access Control Error Vulnerability (CNVD-2022-22102)

Samsung Wear Os is a version of the Android operating system from the South Korean company Samsung. It is designed for wearable computer devices such as smartwatches. An access control error vulnerability exists in versions of Samsung Wear OS prior to 3.0. The vulnerability stems from the absence...

Jenkins 插件权限许可和访问控制问题漏洞

Jenkins plug-ins are plug-ins that provide functionality for Jenkins. Jenkins Chef Sinatra Plugin Access Control Error Vulnerability. An attacker could use this vulnerability to allow Jenkins to send HTTP requests to an attacker-controlled URL and have it parse an XML response...

Jenkins 插件权限许可和访问控制问题漏洞

Jenkins is a Jenkins open source application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins SCP publisher Plugin 1.8 and earlier versions have an access control error vulnerability that stems from not...

Jenkins 插件权限许可和访问控制问题漏洞

Jenkins plug-ins are plug-ins that provide appropriate functionality for Jenkins. Jenkins dbCharts Plugin Access Control Error Vulnerability. An attacker can exploit this vulnerability to connect to a specified database using JDBC with specified credentials...