CVE-2024-41773

IBM Global Configuration Management 7.0.2 and 7.0.3 could allow an authenticated user to archive a global baseline due to improper access controls...

CVE-2024-41773 IBM Global Configuration Management incorrect ownership assignment

IBM Global Configuration Management 7.0.2 and 7.0.3 could allow an authenticated user to archive a global baseline due to improper access controls...

CVE-2024-41773 IBM Global Configuration Management incorrect ownership assignment

IBM Global Configuration Management 7.0.2 and 7.0.3 could allow an authenticated user to archive a global baseline due to improper access controls...

CVE-2024-41773

CVE-2024-41773 affects IBM Global Configuration Management (GCM) versions 7.0.2 and 7.0.3. The root cause is improper access controls that could allow an authenticated user to archive a global baseline. Public sources in the connected documents corroborate this description and assign a CVSS base ...

CVE-2024-27187

Improper Access Controls allows backend users to overwrite their username when disallowed...

CVE-2024-27187

Improper Access Controls allows backend users to overwrite their username when disallowed...

CVE-2024-27187

CVE-2024-27187 is an issue in Joomla! core: the vulnerability arises from improper access controls in the backend profile view, allowing backend users to overwrite their username when disallowed. This is documented across multiple sources (NVD, Red Hat, OSV, and Nessus/NASL references). The commo...

CVE-2024-27187 [20240804] - Core - Improper ACL for backend profile view

Improper Access Controls allows backend users to overwrite their username when disallowed...

CVE-2024-27187 [20240804] - Core - Improper ACL for backend profile view

Improper Access Controls allows backend users to overwrite their username when disallowed...

Security Bulletin: IBM Global Configuration Management - Vulnerable to archiving a global baseline by an authenticated user having improper access controls

Summary IBM Global Configuration Management is vulnerable to archiving a global baseline by an authenticated user having improper access controls/permissions. This bulletin contains information regarding the vulnerability and remediation actions. Vulnerability Details CVEID:CVE-2024-41773...

Thousands of Oracle NetSuite Sites at Risk of Exposing Customer Information

Cybersecurity researchers are warning about the discovery of thousands of externally-facing Oracle NetSuite e-commerce sites that have been found susceptible to leaking sensitive customer information. "A potential issue in NetSuite's SuiteCommerce platform could allow attackers to access sensitiv...

PT-2024-21722 · Joomla +2 · Joomla! +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to improper access controls, allowing backend users to overwrite their username even when it is disallowed. Recommendations: At the moment, there is no information abo...

PT-2024-29557 · Ibm · Ibm Global Configuration Management

Name of the Vulnerable Software and Affected Versions: IBM Global Configuration Management versions 7.0.2 through 7.0.3 Description: The issue is related to improper access controls, allowing an authenticated user to archive a global baseline. This could potentially lead to privilege escalation d...

CVE-2024-7921

A vulnerability has been found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /report/ParkOutRecord/GetDataList. The manipulation leads to improper access...

CVE-2024-7921

CVE-2024-7921 affects Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805. The vulnerability concerns an improper access control in the file /report/ParkOutRecord/GetDataList, exposing an unknown functionality that can be manipulated remotely. Public exploit disclosure i...

CVE-2024-7920

A vulnerability, which was classified as problematic, was found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805. Affected is an unknown function of the file /Report/ParkCommon/GetParkInThroughDeivces. The manipulation leads to improper access controls. It is...

CVE-2024-7919

A vulnerability, which was classified as critical, has been found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805. This issue affects some unknown processing of the file /report/ParkChargeRecord/GetDataList. The manipulation leads to improper access controls. The...

CVE-2024-7919

A vulnerability, which was classified as critical, has been found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805. This issue affects some unknown processing of the file /report/ParkChargeRecord/GetDataList. The manipulation leads to improper access controls. The...

CVE-2024-7920

CVE-2024-7920 affects Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805, with an access-control flaw in the file /Report/ParkCommon/GetParkInThroughDeivces. The issue is exploitable remotely and the exploit has been disclosed publicly. Multiple connected documents conf...

CVE-2024-7919 Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 GetDataList access control

A vulnerability, which was classified as critical, has been found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805. This issue affects some unknown processing of the file /report/ParkChargeRecord/GetDataList. The manipulation leads to improper access controls. The...