BookStack 安全漏洞

BookStack is an open source set of BookStackApp Bookstackapp team's platform for building wiki documents using PHP and Laravel.BookStack suffers from an access control error vulnerability that makes it vulnerable to improper access control. No detailed vulnerability details are currently availabl...

Google Android 访问控制错误漏洞

Google Android is a Linux-based open-source operating system from Google, Inc. Google Android is vulnerable to an access control error that could be exploited by attackers to cause a local privilege escalation without additional execution privileges...

Google Android 访问控制错误漏洞

Google Android is a Linux-based open-source operating system from Google, Inc. Google Android is vulnerable to an access control error that could be exploited by attackers to cause a local privilege escalation without additional execution privileges...

Snipe-IT Access Control Error Vulnerability

Snipe-IT is an open source IT asset/license management system. snipe-it is vulnerable to an access control error, and no details of the vulnerability are currently available...

OmniCore robot 访问控制错误漏洞

OmniCore robot is a robot application. OmniCore robot suffers from a security vulnerability that allows an attacker to read and modify files on the robot controller...

Snipe-IT 访问控制错误漏洞

Snipe-IT is an open source IT asset/license management system. snipe-it is vulnerable to an access control error, and no details of the vulnerability are currently available...

Belloo 安全特征问题漏洞

Belloo, a "high quality" dating software from Belloo, is vulnerable to an access control error that originates from the use of md5$time to generate password recovery code in requestsuser.php. An attacker could use this vulnerability to predict the time value on the server and could easily guess t...

IBM Db2 安全漏洞

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM Db2 suffers from an Access Control Error vulnerability that originates when a networked system or...

PLEX Plex Media Server 访问控制错误漏洞

PLEX Plex Media Server is a suite of media player and media server software from Plex PLEX Switzerland. An Access Control Error vulnerability exists in Plex Media Server, which originates from a failure of the RPC service in the Product Update Service component to validate a user's identity. The...

Fortinet FortiWLC 访问控制错误漏洞

The Fortinet FortiWLC is a wireless LAN controller from Fortinet. An access control error vulnerability exists in the Fortinet FortiWLC, which arises from the product's GUI restrictions not validating the user's identity. The vulnerability can be exploited to execute arbitrary commands. The...

Mozilla Firefox 访问控制错误漏洞

Mozilla Firefox is an open source Web browser from the Mozilla Foundation. Mozilla Firefox has an access control error vulnerability that originates when the Web extension directory is reloaded and the application fails to prevent the Web extension from accessing the redirected URL of the click...

Qualcomm SDX55和QCA6390 访问控制错误漏洞

The Qualcomm SDX55 and QCA6390 are both products of Qualcomm Incorporated.The SDX55 is a modem.The QCA6390 is a central processing unit CPU product. The Access Control Error vulnerability exists in multiple Qualcomm products and stems from improper privilege masking in the products, which allows ...

Google Android 访问控制错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android has an information disclosure vulnerability that can be exploited by attackers to cause local information disclosure without additional execution privileges...

IBM Cognos Analytics 安全漏洞

IBM Cognos Analytics is a suite of business intelligence software from IBM Corporation. The software includes reports, dashboards, and scorecards, and can help companies adjust their decisions by analyzing content such as key factors and key people.IBM Cognos Analytics has an access control error...

Crafter CMS 访问控制错误漏洞

An access control error vulnerability exists in Crafter CMS, an open source content management system CMS for digital experience applications, which stems from a system that does not validate groovy scripts. An attacker with administrator, developer privileges could use the groovy lib to render...

Delicious Brains Advanced Custom Fields 安全漏洞

Delicious Brains Advanced Custom Fields is an advanced custom fields plug-in from Delicious Brains Canada.An access control error vulnerability exists in Delicious Brains Advanced Custom Fields, which stems from a lack of authorization associated with database browsing The vulnerability stems fro...

Business-Dna Solution GmbH TopEase Access Control Error Vulnerability

Business-Dna Solution GmbH TopEase is a "Transformational Risk" solution from Business-Dna Solution GmbH, Switzerland. It is used to manage complex projects and initiatives comprehensively, simply, quickly and securely. An access control error vulnerability exists in Business-Dna Solution GmbH...

Elecom Edwrc 访问控制错误漏洞

The Elecom Edwrc is a series of routers from Elecom Japan. An Access Control Error vulnerability exists in Elecom Edwrc, which arises from ELECOM routers not properly restricting access to resources from unauthorized roles...

PortSwigger Burp Suite 访问控制错误漏洞

PortSwigger Burp Suite is an application from PortSwigger UK. Software for packet-catching proxies. An Access Control Error vulnerability exists in PortSwigger Burp Suite Enterprise Edition that stems from the product not setting the correct file permissions on the embedded H2 database. An attack...

Business-Dna Solution GmbH TopEase 安全漏洞

Business-Dna Solution GmbH TopEase is a "Transformational Risk" solution from Business-Dna Solution GmbH, Switzerland. It is used to manage complex projects and initiatives comprehensively, simply, quickly and securely. An access control error vulnerability exists in Business-Dna Solution GmbH...