Windows Print Spooler Privilege Escalation

The vulnerability of the Windows Print Spooler in operating systems related to the print queue is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2022-18184 · Sourcecodester · Sourcecodester Company Website Cms

Name of the Vulnerable Software and Affected Versions: SourceCodester Company Website CMS affected versions not specified Description: A critical issue was found in the SourceCodester Company Website CMS, affecting some unknown functionality of the file site-settings.php of the component Cookie...

Digi ConnectPort X2D security vulnerabilities

The Digi ConnectPort X2D is a small gateway from Digi, Inc. It provides low-cost IP networking for RF devices and sensor networks. The Digi ConnectPort X2D suffers from a security vulnerability that stems from the web application's lack of device access protection and device privilege control...

CVE-2022-2578

A vulnerability, which was classified as critical, has been found in SourceCodester Garage Management System 1.0. This issue affects some unknown processing of the file /phpaction/createUser.php. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit...

CVE-2022-2578

CVE-2022-2578 affects SourceCodester Garage Management System 1.0. The issue is an improper access control flaw related to remote processing of the file /php_action/createUser.php, enabling unauthorized access. Multiple sources (NVD, Red Hat, CVE lists, etc.) describe the vulnerability as critica...

PT-2022-17506

Name of the Vulnerable Software and Affected Versions SourceCodester Garage Management System version 1.0 Description A critical issue has been found in the processing of the file /php action/createUser.php, leading to improper access controls. The attack may be initiated remotely. Recommendation...

PT-2022-24262

Name of the Vulnerable Software and Affected Versions Gitea versions prior to 1.16.9 Description The issue is related to improper access controls in Gitea, allowing an attacker to assign any issue to any project. This results in the attacker gaining access to private issue titles due to the lack ...

A Data-Centric Cybersecurity Framework for Digital Transformation

In this white paper A Cybersecurity Framework for Securing Cloud Data for Digital Transformation, analyst Richard Steinnon of IT Harvest explains that while cloud vendors supply a resilient and secure infrastructure, organizations who put data into the cloud are ultimately responsible for...

Cybozu Office security vulnerabilities

Cybozu Office is a Web-based, cross-platform collaborative office solution from Cybozu. A security vulnerability exists in Cybozu Office that stems from improper access restrictions in the address book, which can be exploited by remote attackers to bypass the security restrictions and gain access...

Cybozu Office security vulnerabilities

Cybozu Office is a web-based, cross-platform collaborative office solution from Cybozu. A security vulnerability exists in Cybozu Office, which stems from improper access restrictions in the scheduling program, and can be exploited by a remote attacker to bypass the security restrictions and gain...

CVE-2021-39017

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to upload arbitrary files, caused by improper access controls. IBM X-Force ID: 213725...

CVE-2021-39017

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to upload arbitrary files, caused by improper access controls. IBM X-Force ID: 213725...

Improper access control

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to upload arbitrary files, caused by improper access controls. IBM X-Force ID: 213725...

CVE-2021-39017

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to upload arbitrary files, caused by improper access controls. IBM X-Force ID: 213725...

CVE-2021-39017

CVE-2021-39017 overview (IBM ELM Publishing) : The vulnerability arises from improper access controls in IBM Engineering Lifecycle Optimization - Publishing, allowing a remote attacker to upload arbitrary files. Affected versions are PUB 6.0.x and 7.0.x lines, including 6.0.6, 6.0.6.1, 7.0, 7.0.1...

Security Bulletin: IBM Spectrum Protect 8.1.14.000 Server is vulnerable to bypass of security restrictions (CVE-2022-22394)

Summary IBM Spectrum Protect 8.1.14.000 Server could allow a remote attacker to bypass security restrictions due to improper enforcement of access controls. Vulnerability Details CVEID:CVE-2022-22394 DESCRIPTION: The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass...

PT-2022-10841

Name of the Vulnerable Software and Affected Versions IBM Engineering Lifecycle Optimization - Publishing versions 6.0.6 through 7.0.2 Description The issue allows a remote attacker to upload arbitrary files due to improper access controls. This could potentially lead to unauthorized access or da...

CVE-2021-39017: Undefined Security Weakness

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to upload arbitrary files, caused by improper access controls. IBM X-Force ID: 213725...

Any token approved for the base vault can be stolen

Lines of code Vulnerability details Impact All tokens approved for the BaseVault contract can be stolen by any attacker. The batchDeposit functions lack proper access controls and allow the token source to be an arbitrary address as opposed to restricting it to msg.sender. Since token approvals...

CVE-2021-39017

IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to upload arbitrary files, caused by improper access controls. IBM X-Force ID: 213725...