732 matches found
CVE-2024-1107 IDOR in Talya Informatics' Travel APPS
Authorization Bypass Through User-Controlled Key vulnerability in Talya Informatics Travel APPS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Travel APPS: before v17.0.68...
CVE-2024-31246: Missing Authorization
Missing Authorization vulnerability in WPXPO PostX ultimate-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PostX: from n/a through = 3.2.3...
CVE-2024-0336: Missing Authentication for Critical Function
Missing Authentication for Critical Function vulnerability in EMTA Grup PDKS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects PDKS: from V3.04 before 20240603. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...
CVE-2023-33321 WordPress EventPrime plugin <= 2.8.6 - Sensitive Data Exposure
Missing Authorization vulnerability in Metagauss EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EventPrime: from n/a through 2.8.6...
CVE-2023-32259: Insufficient Granularity of Access Control
Insufficient Granularity of Access Control vulnerability in OpenText™ Service Management Automation X SMAX, OpenText™ Asset Management X AMX allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Service Management Automation X SMAX versions 2020.05, 2020.08,...
PT-2023-26905 · Unknown · Siberiancms
Name of the Vulnerable Software and Affected Versions: SiberianCMS affected versions not specified Description: The issue concerns improper access control, allowing an authorized user to disable a security feature over the network. Recommendations: At the moment, there is no information about a...
CVE-2019-15932
Intesync Solismed 3.3sp has Incorrect Access Control...
Linear eMerge 50P/5000P File Upload Vulnerability
The Linear eMerge 50P/5000P is an access control security system managed through a browser from Nortek Security & Control. A file upload vulnerability exists in the Linear eMerge 50P/5000P. An attacker could use this vulnerability to upload a file with an arbitrary extension to a directory in the...
Update Protection against Directory Traversal Vulnerability in IBM Tivoli Access Manager
A vulnerability was reported in IBM Tivoli Access Manager. IBM Tivoli Access Manager provides access control security solutions. The vulnerability can be exploited via a specially crafted filename containing '../..' sequences. An attacker may attempt to exploit this vulnerability to place files o...
TOCTOU with NT System Service Hooking
TOCTOU Time-Of-Check-to-Time-Of-Use problem is known for a while 1. Nevertheless such bugs are still not uncommon. That is more or less acceptable for general software but not for security products. I believe there are drivers that hook kernel system services by well known technique 2,3,4. Those...