Nagios Access Control Error Vulnerability

Nagios is a set of open source and free network monitoring tools from the American company Nagios. An access control error vulnerability exists in Nagios Fusion version 4.1.8 and earlier, which can be exploited by an attacker to extract the password used to manage the Fusion server via the...

Apple iPadOS 访问控制错误漏洞

Apple iPadOS is an operating system from Apple Inc. for the iPad tablet computer. Apple iPadOS suffers from an Access Control Error vulnerability that stems from improper access restrictions in the kernel subsystem. A native application can bypass implemented security restrictions and expose...

Apple macOS Big Sur 访问控制错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. An access control error vulnerability exists in macOS Big Sur, which stems from a feature that allows local users to gain unauthorized access to otherwise restricted functionality. Affected Versions:macOS: 11.0 20A2411, 11.0.1 20B29,...

IBM Security Guardium Access Control Error Vulnerability

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. IBM Security Guardium suffers from an Access Control Error vulnerabili...

IBM Security Guardium 安全漏洞

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. IBM Security Guardium suffers from an Access Control Error vulnerabili...

Qnap Systems QNAP Music Station 访问控制错误漏洞

Qnap Systems QNAP Music Station is a music playback and management application from China Weilian Qnap Systems. An access control error vulnerability exists in QNAP Music Station. The vulnerability can be exploited to gain privileges, read sensitive information, execute commands, and evade...

CloudBees Jenkins P4 Plugin Access Control Error Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An Access Control Error...

OctoPrint 访问控制错误漏洞

OctoPrint is an application. Provides a fast web interface for controlling consumer 3D printers. A security vulnerability previously existed in OctoPrint version 1.6.0. The vulnerability stemmed from the Logging subsystem in the program having incorrect access control...

Adobe Magento 访问控制错误漏洞

Adobe Magento is the United States of America Odobie Adobe company's set of open source PHP e-commerce system . The system provides features such as rights management, search engine and payment gateway. An access control error vulnerability exists in Adobe Magento. The vulnerability is due to...

Pax Technology PAXSTORE Access Control Error Vulnerability

PAX Technology PAXSTORE is an application from China PAX PAX Inc. An ecosystem that connects 2.5 million terminals, thousands of application developers and 180+ markets in 80+ countries worldwide. An access control error vulnerability exists in Pax Technology PAXSTORE version v7.0.820200511171508...

OpenEMR Access Control Error Vulnerability

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An access control error vulnerability exists in OpenEMR version 5.0.2.1, which ste...

Zulip server access control error vulnerability (CNVD-2021-39935)

Zulip server is an open source team chat application from the American company Zulip. An Access Control Error vulnerability exists in versions of Zulip Server prior to 3.4, which results in a user with this privilege being able to send messages. No details of the vulnerability are provided at thi...

PHPGurukul Online Book Store Access Control Error Vulnerability

PHPGurukul Online Book Store is a PHP-based online bookstore website system. An access control error vulnerability exists in adminverify.php in Online Book Store v1.0. An attacker can exploit this vulnerability to bypass authentication and obtain sensitive information...

Cisco HyperFlex HX Data Platform Access Control Error Vulnerability

Cisco HyperFlex HX Data Platform is a network appliance from Cisco USA. Provides enterprise-class agility, scalability, security and lifecycle management capabilities. An access control error vulnerability exists in Cisco HyperFlex HX Data Platform, which can be exploited by an attacker to upload...

Cisco SD-WAN vManage Access Control Error Vulnerability

Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. An access control error vulnerability exists in Cisco SD-WAN vManage, which can be exploited by an unauthenticated, neighboring attacker to...

Fortinet FortiWLC 访问控制错误漏洞

The Fortinet FortiWLC is a wireless LAN controller from Fortinet, Inc. An access control error vulnerability exists in the Fortinet FortiWLC that stems from the presence of hard-coded credentials in the application code...

Cisco HyperFlex HX Data Platform 访问控制错误漏洞

Cisco HyperFlex HX Data Platform is a network appliance from Cisco USA. Provides enterprise-class agility, scalability, security and lifecycle management capabilities. An access control error vulnerability exists in Cisco HyperFlex HX Data Platform, which can be exploited by an attacker to upload...

Libre Wireless LS9 访问控制错误漏洞

Libre Wireless LS9 is a network device from Libre Wireless, Inc. Libre Wireless LS9 LS1.5/p7040 devices. an access control error vulnerability exists that stems from the luci service daemon running on port 7777 providing a subclass of commands with the Read prefix. Such commands can directly read...

Dell Hybrid Client 访问控制错误漏洞

DELL Dell Hybrid Client is an application from Dell, Inc. An access control error vulnerability exists in versions prior to Dell Hybrid Client 1.5, which could be exploited by an attacker to gain root-level access to the system...

GitLab 访问控制错误漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug list, and more. An Access Control Error vulnerability exists in GitLab CE/...