Microsoft PC Manager 访问控制错误漏洞

Microsoft PC Manager is a computer management software from Microsoft USA, which can be used for one-click acceleration, system space management, pop-up window management, and comprehensive physical examination. An access control error vulnerability exists in Microsoft PC Manager. An attacker can...

Dell Client Platform BIOS 安全漏洞

Dell Client Platform BIOS is a client platform BIOS from Dell USA. The Dell Client Platform BIOS suffers from an Access Control Error vulnerability that stems from improper access control of mirrored or aliased memory regions in an externally developed component, which can be exploited by an...

Splunk Enterprise 访问控制错误漏洞

Splunk Enterprise is a suite of data collection and analytics software from Splunk Corporation in the United States. An access control error vulnerability exists in Splunk Enterprise, which stems from a missing access control and could result in shutting down scheduled searches. The following...

rowboat 访问控制错误漏洞

rowboat is an AI-driven multi-intelligence builder open-sourced by RowBoat Labs. An access control error vulnerability exists in rowboat, which stems from missing authentication in the file apps/rowboat/app/api/uploads/fileId/route.ts...

Google ChromeOS 安全漏洞

Google ChromeOS is an operating system from the American company Google. Google ChromeOS suffers from an Access Control Error vulnerability that stems from improper access control of the Stylus Tools component, which can be exploited by an attacker to obtain information about a user's files...

Escalade GLPI plugin 访问控制错误漏洞

Escalade GLPI plugin is an open source GLPI extension plugin for GLPI Project Plugins. An Access Control Error vulnerability exists in Escalade GLPI plugin versions prior to 2.9.11, which stems from improper access control and could lead to data disclosure and workflow disruption...

Pilz IndustrialPI 访问控制错误漏洞

Pilz IndustrialPI is a gateway for the Industrial Internet of Things from Pilz Individual Developers in Germany. An access control error vulnerability exists in Pilz IndustrialPI that stems from the default unconfigured NodeRED server authentication leading to command execution...

Red Hat AI Inference Server 访问控制错误漏洞

Red Hat AI Inference Server is a server product for artificial intelligence inference services from Red Hat USA. An access control error vulnerability exists in Red Hat AI Inference Server that stems from the ability to bypass authentication via an unprotected inference endpoint...

Autel MaxiCharger AC Wallbox Commercial Access Control Error Vulnerability

Autel MaxiCharger AC Wallbox Commercial is a smart AI electric car charger from Autel USA. Autel MaxiCharger AC Wallbox Commercial suffers from an Access Control Error vulnerability that stems from a lack of authentication in the Pile API, which can be exploited by an attacker to cause a credenti...

Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE 访问控制错误漏洞

The Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE DFS ProGauge MAGLINK LX CONSOLE is an industrial console from Dover Fueling Solutions, Inc. designed for expansion. An access control error vulnerability exists in the Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE that stems from...

Comet System多款产品 访问控制错误漏洞

Comet System T0510 and others are a temperature sensor from Comet System. An access control error vulnerability exists in various Comet System products, which stems from a lack of authentication in the file /setupA.cfg. The following products and versions are affected: T0510, T3510, T3511, T4511,...

GitLab CE/EE 访问控制错误漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. An access control error vulnerability exists in GitLab CE/EE versions prior to 17.2...

Mitsubishi Electric多款产品 访问控制错误漏洞

The Mitsubishi Electric G-50, among others, is an air conditioning centralized controller from Mitsubishi Electric Mitsubishi Electric of Japan. An access control error vulnerability exists in various Mitsubishi Electric products, which stems from a lack of authentication for critical functions a...

Autel MaxiCharger AC Wallbox Commercial 访问控制错误漏洞

Autel MaxiCharger AC Wallbox Commercial is a smart AI electric car charger from Autel USA. Autel MaxiCharger AC Wallbox Commercial suffers from an Access Control Error vulnerability that stems from a lack of authentication in the Pile API, which can be exploited by an attacker to cause a credenti...

Helmholz和MB connect line多款产品 访问控制错误漏洞

MB Connect Line mbCONNECT24 and others are products of MB Connect Line, Germany.MB Connect Line mbCONNECT24 is a suite of remote service portals.MB Connect Line mymbCONNECT24 is an in-house remote maintenance for virtual environments Helmholz myREX24 and others are products of Helmholz. Helmholz...

Quest KACE Systems Management Appliance 访问控制错误漏洞

Quest Software Quest KACE Systems Management Appliance is an IT asset management appliance from Quest Software, Inc. An access control error vulnerability exists in the Quest KACE Systems Management Appliance, which stems from a flaw in the license replacement feature that could lead to a denial ...

Apache SeaTunnel 访问控制错误漏洞

Apache SeaTunnel is an easy-to-use data integration framework from the Apache USA Foundation. An access control error vulnerability exists in Apache SeaTunnel version 2.3.10 and earlier, which originates from an unauthorized user being able to perform arbitrary file read and deserialization attac...

CryptPad 访问控制错误漏洞

CryptPad is a collaborative office suite from CryptPad Open Source. An access control error vulnerability exists in CryptPad versions prior to 2025.3.0 that stems from an insufficient implementation of 2FA and could lead to authentication bypass...

WAGO Device Manager 访问控制错误漏洞

WAGO Device Manager is owned by WAGO Germany. An access control error vulnerability exists in WAGO Device Manager that originates from an unauthenticated, remote attacker being able to read system files...

MCP Inspector 访问控制错误漏洞

MCP Inspector is an open source visual testing tool for MCP servers from Model Context Protocol. An access control error vulnerability exists in MCP Inspector versions prior to 0.14.1 that stems from a lack of authentication and could lead to remote code execution...