3194 matches found
CVE-2022-37344 WordPress Accommodation System plugin <= 1.0.1 - Missing Access Control vulnerability
Missing Access Control vulnerability in PHP Crafts Accommodation System plugin = 1.0.1 at WordPress...
TOTOLINK A7000R Access Control Error Vulnerability
TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK that supports WiFi7 technology for home or small business network environments. The TOTOLINK A7000R suffers from an access control vulnerability that stems from improper access control in its /cgi-bin/ExportSettings.sh...
TOTOLINK A7000R 安全漏洞
TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK that supports WiFi7 technology for home or small business network environments. The TOTOLINK A7000R suffers from an access control vulnerability that stems from improper access control in its /cgi-bin/ExportSettings.sh...
The vulnerability of the McAfee Security Scan Plus (MSS+) antivirus software, related to deficiencies in access control, allows a perpetrator to execute a LotL attack (a type of Living off the Land attack).
The vulnerability of the McAfee Security Scan Plus MSS+ antivirus software is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to execute a LotL attack a type of Living off the Land attack...
CVE-2022-21140
Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow a privileged user to potentially enable information disclosure via local access...
CVE-2022-35122
An access control issue in Ecowitt GW1100 Series Weather Stations =GW1100Bv2.1.5 allows unauthenticated attackers to access sensitive information including device and local WiFi passwords...
The vulnerability of the Windows operating system’s Fax Service allows attackers to escalate their privileges.
The vulnerability of the Windows operating system’s Fax Service is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
PT-2022-4091 · Microsoft · Windows Defender +1
Name of the Vulnerable Software and Affected Versions: Windows Defender affected versions not specified Description: The issue is related to insufficient access control in Windows Defender, which is part of the Windows operating system. It allows an attacker to elevate their privileges...
CVE-2022-2095
Removed by vendor...
H01: code is not same as intended function description
Lines of code Vulnerability details MIMOAutoAction.sol, 26-38 / @notice Sets a vault automation parameters @dev Can only be called by vault owner @param vaultId Vault id of the vault to be automated @param autoParams AutomatedVault struct containing all automation parameters / function...
Protect
An improper access control vulnerability CWE-284 in FortiOS may allow an authenticated attacker with a restricted user profile to gather the checksum information about the other VDOMs via CLI commands...
CVE-2022-2578 SourceCodester Garage Management System createUser.php access control
A vulnerability, which was classified as critical, has been found in SourceCodester Garage Management System 1.0. This issue affects some unknown processing of the file /phpaction/createUser.php. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit...
Honeywell Safety Manager 访问控制错误漏洞
Honeywell Safety Manager is used by Honeywell to minimize accidents, maximize production uptime, reduce compliance costs, and manage plant safety. An access control error vulnerability exists in all versions of Honeywell Safety Manager that stems from the use of the Security Builder protocol, whi...
andoverandvillages.co.uk Improper Access Control vulnerability OBB-2813631
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The vulnerability of the Windows operating system’s Portable Device Enumerator service allows a hacker to circumvent existing security restrictions.
The vulnerability of the Windows operating system’s Portable Device Enumerator service is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...
MiCODUS MV720 GPS 访问控制错误漏洞
The MiCODUS MV720 GPS is a GPS tracker from MiCODUS USA. An access control error vulnerability exists in the MiCODUS MV720 GPS that stems from SMS-based GPS commands that can be executed without authentication...
Improper access control
Improper access control vulnerability in Samsung Gallery prior to version 13.1.05.8 allows physical attackers to access the pictures using S Pen air gesture...
CVE-2022-31140
Valinor is a PHP library that helps to map any input into a strongly-typed value object structure. Prior to version 0.12.0, Valinor can use ThrowablegetMessage when it should not have permission to do so. This is a problem with cases such as an SQL exception showing an SQL snippet, a database...
FreeBSD : Gitlab -- multiple vulnerabilities (d1b35142-ff4a-11ec-8be3-001b217b3468)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the d1b35142-ff4a-11ec-8be3-001b217b3468 advisory. - A Regular Expression Denial of Service vulnerability in GitLab CE/EE affecting all versions...
