FCNT 访问控制错误漏洞

FCNT is a cell phone service from FCNT. FCNT suffers from an access control error vulnerability that originates under certain conditions when an attacker can directly manipulate the device with the user's unlocked screen, exposing the settings page of a provided security feature and/or changing...

Microsoft Azure PolicyWatch 访问控制错误漏洞

Microsoft Azure PolicyWatch is an application from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Azure PolicyWatch that stems from a lack of authentication for critical functions, allowing an unauthorized attacker to elevate privileges through the network...

mySCADA myPRO Manager Access Control Error Vulnerability

mySCADA myPRO is a professional HMI/SCADA system designed primarily for the visualization and control of industrial processes. An access control error vulnerability exists in mySCADA myPRO Manager, which can be exploited by an attacker to submit a special request for unauthorized access to...

mySCADA myPRO 访问控制错误漏洞

mySCADA myPRO is a professional HMI/SCADA system designed primarily for the visualization and control of industrial processes. An access control error vulnerability exists in mySCADA myPRO Manager, which can be exploited by an attacker to submit a special request for unauthorized access to...

BlueZ 访问控制错误漏洞

BlueZ is an open source Bluetooth protocol stack written in C by BlueZ. It is used to provide support for the core Bluetooth layers and protocols. BlueZ suffers from an Access Control Error vulnerability that stems from improper authorization controls in the HID over GATT Profile implementation,...

Allegra 访问控制错误漏洞

Allegra is a project management software for mid-sized organizations from Allegra. An access control error vulnerability exists in Allegra that stems from the SiteConfigAction feature containing an improperly access controlled remote code execution vulnerability...

Red Hat Ansible Automation Platform 访问控制错误漏洞

Red Hat Ansible Automation Platform Red Hat AAP is a unified solution for enabling strategic automation from Red Hat USA. A security vulnerability exists in Red Hat Ansible Automation Platform. An attacker could exploit the vulnerability to elevate privileges...

IBM Concert 安全漏洞

IBM Concert is a new tool from International Business Machines IBM Inc. that uses generative AI to help manage complex cloud-native applications. An Access Control Error vulnerability exists in versions prior to IBM Concert 1.0.3 that stems from improper access control and can be exploited by an...

OpenCTI 访问控制错误漏洞

OpenCTI is an open source cyber threat intelligence platform from OpenCTI Open Source. An access control error vulnerability exists in OpenCTI versions prior to 6.1.9, which stems from the ability to bypass regular expression validation used to block Introspection queries by removing redundant...

WAGO多款产品 访问控制错误漏洞

WAGO PFC100 and others are products of WAGO, Germany.WAGO PFC100 is a programmable logic controller PLC.WAGO CC100 0751-9x01 is a compact controller.WAGO Edge Controller 0752-8303/8000-0002 is a controller. An access control error vulnerability exists in various WAGO products. The vulnerability...

Nextcloud 访问控制错误漏洞

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. Nextcloud suffers from an Access Control Error vulnerability that stems from the fact that when a file is blocked by access control, users can still copy an...

python_book 安全漏洞

pythonbook is an online book lending website, book management system by Tim Green, an individual developer. A security vulnerability exists in pythonbook version V1.0, which stems from an access control error. An attacker can exploit the vulnerability to obtain sensitive information about users...

Calibre-Web 访问控制错误漏洞

Calibre-Web is a web application for browsing, reading, and downloading eBooks from the Calibre database by Jan B, an individual developer. An access control error vulnerability exists in Calibre-Web that stems from the createshelf method in shelf.py not verifying that a user has the required...

Moodle Access Control Error Vulnerability

Moodle is Moodle open source set of free e-learning software platform, also known as course management system, learning management system or virtual learning environment. Moodle suffers from an Access Control Error vulnerability that stems from insufficient access control over the inclusion of an...

Fortinet FortiOS Access Control Error Vulnerability (CNVD-2024-49648)

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. An access control error...

Baxter Life2000 访问控制错误漏洞

The Baxter Life2000 is a mask-less non-invasive ventilator from Baxter. An access control error vulnerability exists in Baxter Life2000 version 06.08.00.00 and prior, which stems from unsupported user authentication, allowing an attacker to obtain diagnostic information or manipulate device...

Intel Server Board M70KLP 访问控制错误漏洞

Intel Server Board M70KLP is a server motherboard from Intel Corporation, USA. An Access Control Error vulnerability exists in Intel Server Board M70KLP UEFI, which stems from improper access control. An attacker can exploit the vulnerability to elevate privileges...

Intel Server M20NTP 访问控制错误漏洞

Intel Server M20NTP is a server motherboard from Intel Corporation USA. An access control error vulnerability exists in Intel Server M20NTP that stems from improper access control. An attacker can exploit the vulnerability to gain access to sensitive information...

Intel DSA 访问控制错误漏洞

Intel DSA is a driver update tool from Intel Intel. It can detect user drivers, update the installed drivers to the latest version, support intel series of graphics cards, audio, network cards and chipset drivers, i-card users must have. An Access Control Error vulnerability exists in Intel DSA...

Intel Thunderbolt 访问控制错误漏洞

Intel Thunderbolt is an application from Intel Corporation USA. An access control error vulnerability exists in Intel Thunderbolt versions prior to 1.0.49.9, which stems from improper access control. An attacker could exploit the vulnerability to elevate privileges...