CVE-2024-25811

Dreamer CMS v4.0.1 contains an access control flaw that can allow attackers to download backup files and leak sensitive information. The issue is described across sources (including Red Hat and NVD records) as an access-control error affecting Dreamer CMS 4.0.1. There is no detailed root-cause br...

CVE-2024-20325

A vulnerability in the Live Data server of Cisco Unified Intelligence Center could allow an unauthenticated, local attacker to read and modify data in a repository that belongs to an internal service on an affected device. This vulnerability is due to insufficient access control implementations o...

Authentication flaw

An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03.01.46, and Tenda AX12 V1 V22.03.01.46 allows attackers to bypass authentication on any endpoint via a crafted URL...

CVE-2023-47422

An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03.01.46, and Tenda AX12 V1 V22.03.01.46 allows attackers to bypass authentication on any endpoint via a crafted URL...

CVE-2023-47422

An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03.01.46, and Tenda AX12 V1 V22.03.01.46 allows attackers to bypass authentication on any endpoint via a crafted URL...

CVE-2023-27303

Improper access control in some IntelR ThunderboltTM DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-25073

Improper access control in some IntelR DSA software before version 23.4.33 may allow an authenticated user to potentially enable denial of service via local access...

PT-2024-11056 · Meinberg · Meinberg Lantime-Firmware

Name of the Vulnerable Software and Affected Versions: Meinberg LANTIME-Firmware versions prior to 6.24.029 Meinberg LANTIME-Firmware versions 7 prior to 7.04.008 Description: An issue was discovered in the LTOS-Web-Interface of Meinberg LANTIME-Firmware, where an admin can delete required user...

SUSE-SU-2024:0315-1 Security update for slurm

This update for slurm fixes the following issues: - CVE-2023-49933: Fixed a message extension attack that could bypass the message hash bsc1218046. - CVE-2023-49936: Fixed a NULL pointer dereference bsc1218050. - CVE-2023-49937: Fixed a double free that could lead to denial of service or code...

ilgallorosso.it Improper Access Control vulnerability OBB-3840814

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-38141 WordPress Sales Report Email for WooCommerce Plugin <= 2.8 is vulnerable to Broken Access Control

Missing Authorization vulnerability in Zorem Sales Report Email for WooCommerce.This issue affects Sales Report Email for WooCommerce: from n/a through 2.8...

CVE-2023-51071

An access control issue in QStar Archive Solutions Release RELEASE3-0 Build 7 Patch 0 allows unauthenticated attackers to arbitrarily disable the SMB service on a victim's Qstar instance by executing a specific command in a link...

CVE-2023-51071

An access control issue in QStar Archive Solutions Release RELEASE3-0 Build 7 Patch 0 allows unauthenticated attackers to arbitrarily disable the SMB service on a victim's Qstar instance by executing a specific command in a link...

CVE-2023-51070

CVE-2023-51070 concerns QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0. The issue is described as an access-control flaw that allows unauthenticated attackers to arbitrarily adjust sensitive SMB settings on the QStar Server. The affected software is QStar Archive Solutions Release RE...

CVE-2024-0358 DeShang DSO2O install.php access control

A vulnerability was found in DeShang DSO2O up to 4.1.0. It has been classified as critical. This affects an unknown part of the file /install/install.php. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the publ...

PT-2024-13775 · Zoom · Zoom Sdks For Windows +2

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions prior to 5.16.10 Zoom VDI Client for Windows versions prior to 5.16.10 Zoom SDK for Windows versions prior to 5.16.10 Description: The issue is related to improper access control in Zoom products for...

CVE-2023-51717

Dataiku DSS before 11.4.5 and 12.4.1 has Incorrect Access Control that could lead to a full authentication bypass...

CVE-2023-41784 Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro

Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro...

PT-2023-11481 · Uffizio · Uffizio'S Gps Tracker

Name of the Vulnerable Software and Affected Versions: Uffizio's GPS Tracker all versions Description: An improper access control issue exists, leading to sensitive information disclosure of connected devices. Visiting the vulnerable host at port 9000 returns a JSON body with details about deploy...

CVE-2023-47320

Silverpeas Core 6.3.1 is vulnerable to Incorrect Access Control. An attacker with low privileges is able to execute the administrator-only function of putting the application in "Maintenance Mode" due to broken access control. This makes the application unavailable to all users. This affects...