Liferay Portal 和 Liferay DXP 安全漏洞

Liferay Portal and Liferay DXP are both products of Liferay, a J2EE-based portal solution that uses EJB and JMS technologies and serves as a web publishing and shared workspace, enterprise collaboration platform, social network, etc. Liferay DXP is a digital experience collaboration platform...

Fortinet FortiManager 访问控制错误漏洞

Fortinet FortiManager is a centralized network security management platform from Fortinet, Inc. The platform supports centralized management of any number of Fortinet devices and can group devices into different management domains ADOMs to further simplify multi-device security deployment and...

Google Chrome 访问控制错误漏洞

Chrome is a web browsing tool developed by Google. versions prior to Google Chrome 92.0.4515.131 are vulnerable to an incorrect security UI in navigation. An attacker could exploit this vulnerability to bypass security restrictions...

AVEVA System Platform 访问控制错误漏洞

AVEVA System Platform is an application from AVEVA UK. A responsive, standards-driven and scalable foundation for regulatory, enterprise SCADA, MES and IIoT applications. AVEVA System Platform is vulnerable to an Access Control Error vulnerability that arises from the software not properly...

Geutebrück G-Cam E2 和 G-Code 访问控制错误漏洞

Geutebrück G-Cam E2 is a camera from manualslib.Geutebrück G-Code is an analog video encoder module from Geutebrück, Germany. An access control error vulnerability exists in the Geutebrück G-Cam E2 and G-Code, which stems from the default user authentication settings and allows unauthenticated...

ArchiSteamFarm 访问控制错误漏洞

ArchiSteamFarm is a C application whose main purpose is to idle Steam cards from multiple accounts simultaneously. ArchiSteamFarm suffers from an Access Control Error vulnerability that stems from an error in the ASF code POST /Api/ASF, where the ASF API endpoint responsible for updating the glob...

Schneider Electric Easergy T200产品访问控制错误漏洞

Schneider-electric Schneider Electric Easergy T200 is a remote control terminal for medium/low voltage substations from Schneider-electric, France. An access control error vulnerability exists in several Schneider Electric products due to a lack of valid authorized operation of the product and...

iPadOS 访问控制错误漏洞

Apple iPadOS is an operating system for the iPad tablet computer from Apple USA. An access control error vulnerability exists in iPadOS due to improper access restrictions. A native application can bypass the implemented security restrictions and gain unauthorized access to Find My Data. The...

Oracle Solaris 访问控制错误漏洞

Oracle Solaris is a Unix-like operating system, and a security vulnerability exists in the Kernel component of Oracle Solaris version 11. An attacker could use the vulnerability to update, insert, or remove unauthorized access to certain data accessible to the product, and cause a partial denial ...

Schneider Electric C-Bus Toolkit 访问控制错误漏洞

Schneider Electric C-Bus Toolkit is an application from Schneider Electric, France. It is used to run, configure and debug C-Bus installations on a personal computer. An Access Control Error vulnerability exists in C-Bus Toolkit version 1.15.8 and earlier, which stems from an incorrect...

Samsung Tizen Code Injection Vulnerability

Samsung Tizen is an open-source Linux-based mobile operating system from Samsung, South Korea, for smartphones, tablets, smartwatches, netbooks, in-vehicle messaging and entertainment devices, and smart TVs. The code injection vulnerability in Samsung Tizen stems from an access control error...

Samsung FactoryCameraFB Access Control Error Vulnerability

Samsung FactoryCameraFB is a system application from Samsung South Korea. An access control error vulnerability exists in Samsung Mobile FactoryCameraFB. An attacker could use this vulnerability to allow an untrusted application to access arbitrary files with escalated privileges...

Trend Micro Apex One 访问控制错误漏洞

Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities. An access control error vulnerability exists in Trend Micro Apex One. The vulnerability stems from incorrect privilege assignment. A local...

SAMSUNG Members 安全漏洞

Samsung Members is a community platform app from Samsung South Korea. An access control error vulnerability exists in Samsung Members. The vulnerability allows untrusted applications to cause local file inclusion in a webview. No detailed vulnerability details are provided at this time...

SAMSUNG Members 安全漏洞

Samsung Members is a community platform app from Samsung South Korea. An access control error vulnerability exists in Samsung Members. The vulnerability allows untrusted applications to load arbitrary web pages in a webview. No details of the vulnerability are provided at this time...

QSAN Storage Manager Access Control Error Vulnerability (CNVD-2021-48979)

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. An access control error vulnerability exists in FirmwareUpgrade in QSAN Storage Manager 3.3.1 and earlier versions. A remote attacker could exploit this vulnerability to reboot and disrupt the device...

QSAN Storage Manager 安全漏洞

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. An access control error vulnerability exists in FirmwareUpgrade in QSAN Storage Manager 3.3.1 and earlier versions. A remote attacker could exploit this vulnerability to reboot and disrupt the device...

NinjaRMM 访问控制错误漏洞

NinjaRMM is a remote monitoring and management software from NinjaRMM USA. Improve business efficiency by combining monitoring, alerting, patching, antivirus, backup and IT automation all in a single management platform. An Access Control Error vulnerability exists in NinjaRMM, which arises from...

GitLab 安全漏洞

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. An access control error vulnerability exists in GitLab. An attacker can exploit this vulnerability ...

GitLab访问控制错误漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An Access Control Error vulnerability exists in GitLab...