The vulnerability of the TrueConf Server software, related to deficiencies in access control, allows a perpetrator to increase their privileges and cause service failures.

The vulnerability of the TrueConf Server software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and cause service interruptions...

The vulnerability of the Windows GDI component in Microsoft Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows GDI component in Microsoft Windows systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the OpenAPI interface of the Cisco Secure Workload protection tool for multi-cloud data centers (previously known as Tetration) allows a malicious actor to escalate their privileges.

The vulnerability of the OpenAPI interface of the Cisco Secure Workload protection tool for multi-cloud data centers relates to shortcomings in role-based access control when performing operations. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...

The vulnerability of the event forwarding mechanism in IBM QRadar WinCollect Agent, related to access control deficiencies, allows attackers to escalate their privileges and execute arbitrary commands.

The vulnerability of the event forwarding mechanism in IBM QRadar WinCollect Agent is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary commands...

The vulnerability of the Webhook component in the Kubernets Rancher cluster management software allows a hacker to increase their privileges.

The vulnerability of the Webhook component in Kubernets Rancher’s cluster management software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Windows Registry system allows attackers to increase their privileges.

The vulnerability of the Windows Registry system in operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the File Sharing component in the Nighthawk WiFi 6 Router (RAX30) microprogramming software allows a hacker to gain access to arbitrary files.

The vulnerability of the File Sharing component in the Nighthawk WiFi 6 Router RAX30 microprogramming software lies in insufficient access control. Exploiting this vulnerability can allow a remote attacker to gain access to arbitrary files...

The vulnerability of the central control module of the Rittal CMC III system, due to deficiencies in access control, allows unauthorized access by intruders to protected information and enhances their privileges.

The vulnerability of the central control block of the Rittal CMC III system is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information and enhance their privileges by cloning the access card used to open...

The vulnerability of the microprogramming software of Zyxel LTE3202-M437 and LTE3316-M604 allows attackers to enhance their privileges and gain access to the device.

The vulnerability of Zyxel LTE3202-M437 and LTE3316-M604 router microprogramming software is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to enhance their privileges and gain access to the device via the TELNET network protocol...

The vulnerability of the IBM AIX operating system’s kernel allows a hacker to execute arbitrary code and gain superuser privileges.

The vulnerability of the IBM AIX operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain superuser privileges and execute arbitrary code...

The vulnerability of the UI Desktop software lies in its lack of access control mechanisms, allowing a perpetrator to execute arbitrary commands.

The vulnerability of the UI Desktop software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

CVE-2022-46890

Weak access control in NexusPHP before 1.7.33 allows a remote authenticated user to edit any post in the forum this is caused by a lack of checks performed by the /forums.php?action=post page...

The vulnerability of the Portainer container management platform, related to deficiencies in access control, allows a hacker to gain full access to the host’s file system.

The vulnerability of the Portainer container management platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full access to the host’s file system...

CVE-2022-4711

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wprsavemegamenusettings' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to enable and modify Mega Menu...

The vulnerability of FortiOS operating systems, related to access control deficiencies, allows attackers to modify interface settings.

The vulnerability of FortiOS operating systems is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to modify interface settings remotely through APIs...

PT-2022-7091 · Pi-Hole · Pi-Hole

Name of the Vulnerable Software and Affected Versions: Pi-Hole affected versions not specified Description: The issue is related to a lack of validation in the code on a root server path: /admin/scripts/pi-hole/phpqueryads.php. This allows a potential threat actor to perform an unauthorized query...

The vulnerability of the Windows Print Spooler daemon in the Windows operating system allows a hacker to escalate their privileges.

The vulnerability of the Windows Print Spooler service in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to circumvent existing security restrictions and upload or delete certain files.

The vulnerability of the Cisco Identity Services Engine ISE’s web management interface is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and upload or delete certain files using a specially created HTTP...

The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...