PT-2021-9684 · Unknown · Soplanning

Name of the Vulnerable Software and Affected Versions: SOPlanning versions prior to 1.47 Description: The issue is related to incorrect access control due to public secret key information and its related authentication algorithm. Specifically, the key for the admin account is hardcoded in the...

NETGEAR JGS516PE/GS116Ev2 Buffer Overflow Vulnerability

The NETGEAR JGS516PE/GS116Ev2 is a 16-port Gigabit Smart Managed Plus switch. A buffer overflow vulnerability exists in the access control section of the NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43. An attacker can exploit this vulnerability by injecting IP addresses into a whitelist via the...

PT-2021-2277 · Microsoft · Windows 10 Update Assistant +1

Name of the Vulnerable Software and Affected Versions: Windows 10 Update Assistant affected versions not specified Description: The issue is related to improper access control in the Windows Update Assistant, which can be exploited to elevate privileges. This could allow an attacker to affect the...

PT-2021-15234 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions 2.4.21 through 2.20.23 GitHub Enterprise Server versions 2.21.0 through 2.21.14 GitHub Enterprise Server versions 2.22.0 through 2.22.6 GitHub Enterprise Server versions 3.0.0 Description: An improper access...

OTRS AG OTRSCIsInCustomerFrontend Permission License and Access Control Issues Vulnerability

OTRS AG OTRSCIsInCustomerFrontend is a management system from OTRS USA. It provides modern, flexible ticket and process management services. A privilege permission and access control issue vulnerability exists in OTRS AG OTRSCIsInCustomerFrontend, which stems from an agent being able to view and...

PT-2021-2307 · Adobe · Acrobat +1

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader DC versions 2020.013.20074 and earlier Adobe Acrobat Reader DC versions 2020.001.30018 and earlier Adobe Acrobat Reader DC versions 2017.011.30188 and earlier Adobe Acrobat versions prior to the fixed version Description:...

Backblaze Permission License and Access Control Issues Vulnerability

Backblaze is a cloud backup service from Backblaze, Inc. in the United States. A privilege permission and access control issue vulnerability exists in Backblaze for Windows and Backblaze for macOS prior to version 7.0.0.439, which stems from a lack of privilege handling and validation prior to th...

CVE-2020-26176

An issue was discovered in tangro Business Workflow before 1.18.1. No or broken access control checks exist on the /api/document//attachments API endpoint. Knowing a document ID, an attacker can list all the attachments of a workitem, including their respective IDs. This allows the attacker to...

NZXT CAM 权限许可和访问控制问题漏洞

NZXT CAM is a performance monitoring software for gaming computers from NZXT USA. The software can be used to manage computer performance, temperature, and devices to ensure that the computer is at optimal performance. NZXT CAM 4.8.0 suffers from a Privilege Permission and Access Control Issues...

Trend Micro Apex One and OfficeScan XG Incorrect Access Control Information Disclosure Vulnerability (CNVD-2020-73779)

Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities.Trend Micro OfficeScan XG is a suite of distributed anti-virus software from Trend Micro. An incorrect access control information disclosure...

Code injection

Endress+Hauser Ecograph T Neutral/Private Label RSG35, ORSG35 and Memograph M Neutral/Private Label RSG45, ORSG45 with Firmware version V2.0.0 and above is prone to exposure of sensitive information to an unauthorized actor. The firmware release has a dynamic token for each request submitted to t...

OPENSUSE-SU-2020:1899-1 Security update for sddm

This update for sddm fixes the following issue: - Fix X not having access control on startup boo1177201, CVE-2020-28049. This update was imported from the openSUSE:Leap:15.2:Update update project...

PT-2020-4801 · Microsoft · Windows Bind Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Bind Filter Driver affected versions not specified Description: The issue is related to insufficient access control in the Windows Bind Filter driver, which can be exploited to elevate privileges. This could allow an attacker to affec...

PT-2020-4823 · Microsoft · Windows Update Orchestrator Service +1

Name of the Vulnerable Software and Affected Versions: Windows Update Orchestrator Service affected versions not specified Description: The issue is related to insufficient access control in the Windows Update Orchestrator Service component of the Windows operating system. Exploitation of this...

CVE-2020-8193

Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints...

Unspecified Vulnerability in Open Solutions for Education openSIS (CNVD-2021-19767)

Open Solutions for Education openSIS is a U.S. Open Solutions for Education, Inc. open source student information management system . A security vulnerability exists in Open Solutions for Education openSIS 7.4 and prior versions that stems from improper access control. An attacker could exploit t...

CVE-2020-13382

openSIS through 7.4 has Incorrect Access Control...

CVE-2020-12826

A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2. Because execid in include/linux/sched.h is only 32 bits, an integer overflow can interfere with a donotifyparent protection mechanism. A child process can send an arbitrary signal to a parent...

An Undisclosed Critical Vulnerability Affect vBulletin Forums — Patch Now

If you are running an online discussion forum based on vBulletin software, make sure it has been updated to install a newly issued security patch that fixes a critical vulnerability. Maintainers of the vBulletin project recently announced an important patch update but didn't reveal any informatio...

The vulnerability of the Email Address list and Message Display components of the Oracle Email Center software, a business automation system within the Oracle E-Business Suite. This allows attackers to access, modify, add, or delete data, or gain unauthorized access to protected information.

The vulnerability of the Email Address list and Message Display components of the Oracle Email Center software, a messaging automation system within the Oracle E-Business Suite, is related to lack of access control. Exploiting this vulnerability could allow an attacker to modify, add, or delete...