Magento Commerce 和 Magento Open Source 访问控制错误漏洞

Magento Open Source is to provide basic e-commerce functionality that allows you to build unique online stores from scratch.Magento Commerce is to provide a best-in-class shopping experience without the need for developer support.Magento Open Source is to provide basic e-commerce functionality th...

Netgear RBR750 授权问题漏洞

Netgear RBR750 is a home WiFi system from Netgear, Inc. Multiple NETGEAR devices are vulnerable to an access control error, which stems from the product not properly restricting access from unauthorized roles. No details of the vulnerability are currently available...

Dolibarr ERP/CRM 访问控制错误漏洞

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. An Access Control Error vulnerability exists in Dolibarr ERP/C...

Mitsubishi Electric MELSEC iQ-R series 访问控制错误漏洞

The Mitsubishi Electric MELSEC iQ-R series is a programmable logic controller from Mitsubishi Electric Corporation Mitsubishi Electric. An access control error vulnerability exists in the Mitsubishi Electric MELSEC iQ-R series of products. The vulnerability arises from a product that does not hav...

mySCADA myPRO 访问控制错误漏洞

mySCADA myPRO is a software application. myPRO is a professional HMI/SCADA system designed primarily for the visualization and control of industrial processes. An access control error vulnerability exists in mySCADA myPRO where the affected product allows unauthenticated access to sensitive syste...

NVIDIA Jetson 安全漏洞

Jetson Linux is an application software. High-performance, low-power computing for deep learning and computer vision makes it an ideal platform for compute-intensive projects.Jetson Linux is vulnerable to an access control error that could be exploited by an attacker to cause code execution, a...

GitLab 访问控制错误漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. GitLab suffers from an Access Control Error vulnerability...

Fortinet FortiManager 访问控制错误漏洞

Fortinet FortiManager is a centralized network security management platform from Fortinet, Inc. The platform supports centralized management of any number of Fortinet devices and can group devices into different management domains ADOMs to further simplify multi-device security deployment and...

Liferay Portal 和 Liferay DXP 安全漏洞

Liferay Portal and Liferay DXP are both products of Liferay, a J2EE-based portal solution that uses EJB and JMS technologies and serves as a web publishing and shared workspace, enterprise collaboration platform, social network, etc. Liferay DXP is a digital experience collaboration platform...

Fortinet FortiSandbox 安全漏洞

Fortinet FortiSandbox is an APT Advanced Persistent Threat protection appliance from Fortinet. The appliance offers dual sandboxing technology, dynamic threat intelligence system, real-time control panel and reporting. An Access Control Error vulnerability exists in Fortinet FortiSandbox that ste...

Google Chrome 访问控制错误漏洞

Chrome is a web browsing tool developed by Google. versions prior to Google Chrome 92.0.4515.131 are vulnerable to an incorrect security UI in navigation. An attacker could exploit this vulnerability to bypass security restrictions...

Geutebrück G-Cam E2 和 G-Code 访问控制错误漏洞

Geutebrück G-Cam E2 is a camera from manualslib.Geutebrück G-Code is an analog video encoder module from Geutebrück, Germany. An access control error vulnerability exists in the Geutebrück G-Cam E2 and G-Code, which stems from the default user authentication settings and allows unauthenticated...

AVEVA System Platform 访问控制错误漏洞

AVEVA System Platform is an application from AVEVA UK. A responsive, standards-driven and scalable foundation for regulatory, enterprise SCADA, MES and IIoT applications. AVEVA System Platform is vulnerable to an Access Control Error vulnerability that arises from the software not properly...

ArchiSteamFarm 访问控制错误漏洞

ArchiSteamFarm is a C application whose main purpose is to idle Steam cards from multiple accounts simultaneously. ArchiSteamFarm suffers from an Access Control Error vulnerability that stems from an error in the ASF code POST /Api/ASF, where the ASF API endpoint responsible for updating the glob...

iPadOS 访问控制错误漏洞

Apple iPadOS is an operating system for the iPad tablet computer from Apple USA. An access control error vulnerability exists in iPadOS due to improper access restrictions. A native application can bypass the implemented security restrictions and gain unauthorized access to Find My Data. The...

Schneider Electric Easergy T200产品访问控制错误漏洞

Schneider-electric Schneider Electric Easergy T200 is a remote control terminal for medium/low voltage substations from Schneider-electric, France. An access control error vulnerability exists in several Schneider Electric products due to a lack of valid authorized operation of the product and...

Oracle Solaris 访问控制错误漏洞

Oracle Solaris is a Unix-like operating system, and a security vulnerability exists in the Kernel component of Oracle Solaris version 11. An attacker could use the vulnerability to update, insert, or remove unauthorized access to certain data accessible to the product, and cause a partial denial ...

Schneider Electric C-Bus Toolkit 访问控制错误漏洞

Schneider Electric C-Bus Toolkit is an application from Schneider Electric, France. It is used to run, configure and debug C-Bus installations on a personal computer. An Access Control Error vulnerability exists in C-Bus Toolkit version 1.15.8 and earlier, which stems from an incorrect...

Samsung Tizen Code Injection Vulnerability

Samsung Tizen is an open-source Linux-based mobile operating system from Samsung, South Korea, for smartphones, tablets, smartwatches, netbooks, in-vehicle messaging and entertainment devices, and smart TVs. The code injection vulnerability in Samsung Tizen stems from an access control error...

Trend Micro Apex One 访问控制错误漏洞

Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities. An access control error vulnerability exists in Trend Micro Apex One. The vulnerability stems from incorrect privilege assignment. A local...