The vulnerability of the Citrix NetScaler Application Delivery Controller (previously Citrix ADC) and the Citrix NetScaler Gateway (previously Citrix Gateway) access control systems, related to behavior anomaly detection, allows attackers to gain unauthorized access to limited functions.

The vulnerability of the Citrix NetScaler Application Delivery Controller previously Citrix ADC and the Citrix NetScaler Gateway previously Citrix Gateway access control system is related to the violation of expected behavior. Exploiting this vulnerability can allow an attacker, operating remotel...

Improper Access Control

calibreweb is vulnerable to Improper Access Control. The vulnerability is due to insufficient permission checks in the createshelf method of shelf.py, allowing users without public shelf permissions to create public shelves...

Intel BigDL 访问控制错误漏洞

Intel BigDL is an application from Intel Corporation USA. A security vulnerability exists in Intel BigDL versions prior to 2.5.0 that stems from improper access control. An attacker can exploit the vulnerability to elevate privileges...

Improper Access Control Allows deleting other users' reminders

Description Because the report I reported before was exploited on the public, I created a new report to exploit on the local machine The vulnerability allows users to delete other users' prompts on the system via the groupid parameter Proof of Concept const deletePromptController = async req, res...

CVE-2024-48010

Dell PowerProtect DD is affected by an access control vulnerability prior to these versions: • 8.1.0.0 (and earlier listed) and specifically 7.13.1.10, 7.10.1.40, and 7.7.5.50. A remote, high-privileged attacker could potentially escalate privileges in the application. Remediation: update to 8.1....

Trend Micro Deep Security 20 Agent for Windows vulnerable to improper access control

Overview Trend Micro Incorporated has released a security update for Deep Security 20 Agent for Windows to fix a improper access control vulnerability CVE-2024-48903. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of the solution through JVN. Impact A...

CVE-2024-38748

Access Control vulnerability in TheInnovs EleForms allows . This issue affects EleForms: from n/a through 2.9.9.9...

WordPress plugin Newspack 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin WordPress File Upload 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin Backup and Restore WordPress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-30431 · WordPress · Wpbackitup Backup/Restore

Name of the Vulnerable Software and Affected Versions: WPBackItUp Backup and Restore WordPress versions 1.50 and earlier Description: The issue is related to an Access Control vulnerability in WPBackItUp Backup and Restore WordPress. Recommendations: For versions 1.50 and earlier, update to a...

The vulnerability of the access control function for geolocation in Cisco Firepower Threat Defense’s microprogramming operating system allows a hacker to circumvent security restrictions.

The vulnerability of the access control function for geolocation in Cisco Firepower Threat Defense FTD software relates to incorrect handling of values. Exploiting this vulnerability can allow an attacker operating remotely to circumvent security restrictions...

Fortinet FortiManager Access Control Error Vulnerability (CNVD-2025-00408)

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices, and can group devices into different management domains ADOM to further simplify the deployment and management of multi-device...

YSoft SAFEQ 访问控制错误漏洞

YSoft SAFEQ is an enterprise print management suite solution platform from the Czech company YSoft. A security vulnerability exists in YSoft SAFEQ that stems from SafeQ JMX not enforcing authentication, resulting in vulnerability to JMX MLet attacks...

Improper Access Control

magento/community-edition is vulnerable to an Improper Access Control. The vulnerability is due to improper access control in Adobe Commerce, which fails to properly enforce restrictions on certain actions, allowing unauthorized users to bypass security measures...

PT-2025-16920 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google ChromeOS versions 131.0.6778.268 through 16063.87.0 Description: The issue is related to an access control vulnerability in the Gerrit chromiumos project configuration, which allows an attacker with a registered Gerrit account to injec...

Magento Open Source Improper Access Control vulnerability

Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in Privilege escalation. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on...

CVE-2024-7048

In version v0.3.8 of open-webui, an improper privilege management vulnerability exists in the API endpoints GET /api/v1/documents/ and POST /rag/api/v1/doc. This vulnerability allows a lower-privileged user to access and overwrite files managed by a higher-privileged admin. By exploiting this...

The vulnerability of the RES software service for controlling user access to applications and data in Ivanti Workspace Control allows a intruder to increase their privileges.

The vulnerability of the RES software service for controlling user access to applications and data in Ivanti Workspace Control is related to the use of dangerous methods or functions. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2024-47657 Improper Access Control Vulnerability

This vulnerability exists in the Shilpi Net Back Office due to improper access controls on certain API endpoints. An authenticated remote attacker could exploit this vulnerability by manipulating a parameter dfclientid through API request URLs which could lead to unauthorized access to sensitive...