Zulip Server Access Control Error Vulnerability

Zulip is a powerful open source group chat application that combines the immediacy of live chat with the productivity benefits of threaded conversations.Zulip Server is the Zulip server. An access control error vulnerability exists in Zulip Server versions prior to 2.1.5. The vulnerability stems...

SAP Business Objects Business Intelligence Platform Access Control Error Vulnerability (CNVD-2020-62944)

SAP Business Objects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP, Germany. The product features report generation, analytics, and data visualization. An access control error vulnerability exists in Xvfb in SAP Business...

Contour Access Control Error Vulnerability

Contour is a Kubernetes entry controller that uses the Envoy agent. An Access Control Error vulnerability exists in versions prior to Contour 1.7.0. The vulnerability stems from a network system or product not properly restricting access to resources from unauthorized roles. No detailed...

Cisco Cyber Vision Center Software Access Control Error Vulnerability

Cisco Cyber Vision Center Software is a set of industrial control system ICS monitoring solution from the U.S. company Cisco Cisco. The product supports dynamic asset inventory, real-time network monitoring and other functions. An access control error vulnerability exists in the access control...

Red Hat CloudForms Access Control Error Vulnerability

Red Hat CloudForms is a hybrid infrastructure management platform from Red Hat, Inc. The platform provides deployment, management, and other capabilities across virtual machines, clouds, containers, and physical infrastructure. An access control error vulnerability exists in Red Hat CloudForms. T...

Cisco Data Center Network Manager Access Control Error Vulnerability

Cisco Data Center Network Manager DCNM is a data center management system from Cisco. The system works with Cisco Nexus and MDS series switches and provides storage visualization, configuration and troubleshooting. An access control error vulnerability exists in the Web management interface in...

NETGEAR R6700 Access Control Error Vulnerability

The NETGEAR R6700 is a wireless router from NETGEAR. An Access Control Error vulnerability exists in the handling of URLs in the NETGEAR R6700 version V1.0.4.8410.0.58, which arises from the program failing to route URLs correctly.An attacker could exploit this vulnerability to gain access to...

Cisco Data Center Network Manager Access Control Error Vulnerability (CNVD-2020-44067)

Cisco Data Center Network Manager DCNM is a data center management system from Cisco. The system works with Cisco Nexus and MDS series switches and provides storage visualization, configuration and troubleshooting. An Access Control Error vulnerability exists in the Device Manager application in...

IceWarp Email Server Access Control Error Vulnerability

IceWarp Email Server is a commercial email and groupware server developed by IceWarp. An access control error vulnerability exists in IceWarp Email Server 12.3.0.1. No detailed vulnerability details are provided at this time...

Citrix Systems Workspace App Access Control Error Vulnerability (CNVD-2020-42654)

Citrix Systems Workspace App formerly known as Receiver is an application from Citrix Systems, Inc. that provides secure access to applications, desktops, and data. An access control error vulnerability exists in the automatic update service in the Citrix Systems Workspace App Windows 1912 LTSR a...

ABB IRC5 FTP server Access Control Error Vulnerability

The ABB IRC5 is a robot control system. An Access Control Error vulnerability exists in the ABB IRC5 FTP server, which can be exploited by a remote attacker to submit a specially crafted request for unauthorized access to the system...

Siemens Opcenter Execution Core Access Control Error Vulnerability

Opcenter Execution Core formerly known as Camstar Enterprise Platform is a general purpose Manufacturing Execution System MES. A SQL injection vulnerability exists in Siemens Camstar Enterprise Platform and Opcenter Execution Core. An attacker could exploit the vulnerability to view internal...

Siemens Opcenter Execution Core Access Control Error Vulnerability (CNVD-2020-43671)

Opcenter Execution Core formerly known as Camstar Enterprise Platform is a general purpose Manufacturing Execution System MES. An access control error vulnerability exists in Camstar Enterprise Platform all versions and Opcenter Execution Core prior to version 8.2. An attacker could use this...

C-More HMI EA9 Access Control Error Vulnerability

The C-More HMI EA9 is the human machine interface touch panel. An access control error vulnerability exists in the C-More HMI EA9 control port, which can be exploited by remote attackers to execute arbitrary code...

C-MORE HMI EA9 Access Control Error Vulnerability (CNVD-2020-49043)

The C-More HMI EA9 is the human machine interface touch panel. An access control error vulnerability exists in the EA-HTTP.exe process in the C-More HMI EA9, which can be exploited by an attacker to issue commands to a physical device controlled by the device...

D-Link DSL-2750U Access Control Error Vulnerability

The D-Link DSL-2750U is a wireless router from AUO D-Link of Taiwan, China. An access control error vulnerability exists in the D-link DSL-2750U ISL2750UEME version 3.V1E, which can be exploited by an attacker to gain access to the control panel for approximately 90 seconds when the device is...

Access Control Error Vulnerability in Multiple Mitsubishi Electric Products

Mitsubishi Electric GT27 and others are a GOT2000 series graphic operation terminal from Mitsubishi Electric Japan. An access control error vulnerability exists in CoreOS Y and prior versions in the Mitsubishi Electric GT27, GT25, and GT23 GOT2000 series, which can be exploited by an attacker to...

Grundfos CIM 500 Access Control Error Vulnerability

The Grundfos CIM 500 is an Ethernet module from the Danish company Grundfos. An access control error vulnerability exists in Grundfos CIM 500 versions prior to v06.16.00. An attacker could exploit the vulnerability to request password-stored files without authentication...

Micro Air Vehicle Link Access Control Error Vulnerability

Micro Air Vehicle Link MAVLink is a lightweight messaging protocol from the Dronecode project that is primarily used for communication between ground control terminals ground stations and UAVs as well as between airborne UAV components. An access control error vulnerability exists in MAVLink, whi...

Nextcloud Deck Access Control Error Vulnerability

Nextcloud Deck is a Kanban-style organization tool developed by Nextcloud, Inc. designed for individual planning and project organization for teams integrated with Nextcloud. An access control vulnerability exists in Nextcloud Deck version 1.0.0. An attacker can exploit the vulnerability to injec...