SOURCEFORGE Adminer安全漏洞

SOURCEFORGE Adminer is an application from the American SOURCEFORGE community. It provides database management in a single PHP file. A security vulnerability exists in Adminer version 4.6.2 and prior versions that stems from the presence of improper access control. An attacker can exploit the...

CVE-2022-26572: Undefined Security Weakness

Xerox ColorQube 8580 was discovered to contain an access control issue which allows attackers to print, view the status, and obtain sensitive information...

CVE-2022-25521

NUUO v03.11.00 was discovered to contain access control issue...

CVE-2022-25521

NUUO v03.11.00 was discovered to contain access control issue...

CVE-2022-25521

NUUO v03.11.00 is affected by an access control issue (described across multiple sources as a control/authorization problem). The CVE entry itself notes a high-severity impact with a 9.8/10 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H vector, indicating potential exposure of confidential data, integrity, ...

PT-2022-17349 · Nuuo · Nuuo

Name of the Vulnerable Software and Affected Versions: NUUO version 03.11.00 Description: The issue is related to an access control problem. Recommendations: For NUUO version 03.11.00, at the moment, there is no information about a newer version that contains a fix for this issue...

CVE-2022-25521: Use of Hard-coded Credentials

NUUO v03.11.00 was discovered to contain access control issue...

CVE-2022-26254

CVE-2022-26254 affects WoWonder The Ultimate PHP Social Network Platform v4.0.0. The connected Red Hat and CVE sources corroborate a post-authentication bypass of access controls that lets unauthenticated attackers arbitrarily change group ID names. The description consistently states an access c...

CVE-2021-46390

An access control issue in the authentication module of LexarF35 v1.0.34 allows attackers to access sensitive data and cause a Denial of Service DoS. An attacker without access to securely protected data on a secure USB flash drive can bypass user authentication without having any information...

Apple Mac OS X Security Update (HT212979)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Fastfat Driver 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Fastfat Driver with privilege permission and access control issues. The following products and editions are affected:Windows 10 Version 1809 fo...

Microsoft Windows Ancillary Function Driver for WinSock 权限许可和访问控制问题漏洞

Microsoft Windows Ancillary Function Driver for WinSock is an auxiliary function driver for Winsock from Microsoft. WinSock contains an elevation of privilege vulnerability that could be exploited by attackers to execute arbitrary code with elevated privileges...

OPENSUSE-SU-2022:0724-1 Security update for go1.16

This update for go1.16 fixes the following issues: - CVE-2022-23806: Fixed incorrect returned value in crypto/elliptic IsOnCurve bsc1195838. - CVE-2022-23772: Fixed overflow in Rat.SetString in math/big can lead to uncontrolled memory consumption bsc1195835. - CVE-2022-23773: Fixed incorrect acce...

PT-2022-10955 · Zulip · Zulip

Name of the Vulnerable Software and Affected Versions: zulip/zulip versions prior to 4.10 Description: The issue is related to improper access control in the GitHub repository zulip/zulip. Recommendations: For versions prior to 4.10, update to version 4.10 or later to resolve the issue...

CVE-2022-25402

An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files...

Improper access control

An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files...

CVE-2022-22914

CVE-2022-22914 affects Ovidentia CMS 6.0 FileManager. The issue is an incorrect access control that permits an authenticated attacker to view and download files in the upload directory via path traversal. Underlying cause: insufficient restriction on file paths in FileManager. Impact: exposure of...

Vulnerability in Istio

Istio 1.1.x through 1.1.6 has Incorrect Access Control...

Microsoft Windows Common Log File System Driver权限许可和访问控制问题漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

SUSE-SU-2022:0328-1 Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP3)

This update for the Linux Kernel 4.4.180-94147 fixes several issues. The following security issues were fixed: - CVE-2018-25020: Fixed an issue in the BPF subsystem in the Linux kernel mishandled situations with a long jump over an instruction sequence where inner instructions require substantial...