Microsoft Excel 访问控制错误漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security vulnerability exists in Microsoft Excel. An attacker could exploit the vulnerability to bypass certain features...

Prowise Reflect 访问控制错误漏洞

Prowise Reflect is a screen sharing software from Prowise Netherlands. An access control error vulnerability exists in Prowise Reflect version 1.0.9 that stems from the presence of remote keystroke injection, which could lead to an attacker sending keyboard events via WebSocket...

eXtplorer 访问控制错误漏洞

eXtplorer is a PHP-based file manager by soerennb individual developer. An access control error vulnerability exists in eXtplorer version 2.1.14, which stems from an authentication bypass that could allow an attacker to upload malicious PHP files and execute remote commands...

Microsoft SQL Server 访问控制错误漏洞

Microsoft SQL Server is a large commercial database system from Microsoft Corporation that is used on Microsoft Windows systems. An access control error vulnerability exists in Microsoft SQL Server. An attacker could exploit the vulnerability to elevate privileges. The following products and...

Microsoft Windows Routing and Remote Access Service 访问控制错误漏洞

Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to perform functions such as network routing, virtual private networks VPNs, and dial-up connections. An access control error vulnerability exists in Microsoft Windows Routing and...

Microsoft HTTP.sys 访问控制错误漏洞

Microsoft HTTP.sys is an HTTP application protocol from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft HTTP.sys. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 10 Version 21H2 for...

Eclipse Che 访问控制错误漏洞

Eclipse Che is a set of Java-based open source online integrated development environments IDEs from the Eclipse Foundation. An access control error vulnerability exists in Eclipse Che che-machine-exec, which originates from an unauthenticated remote attacker who can execute arbitrary commands and...

Appsmith 访问控制错误漏洞

Appsmith is an open source platform from Appsmith Open Source for building, deploying and maintaining internal applications. An Access Control Error vulnerability exists in Appsmith versions prior to 1.93 that stems from the server using the Origin value in the request header as the baseUrl of an...

Flycatcher Toys smART Sketcher 访问控制错误漏洞

Flycatcher Toys smART Sketcher is a smart drawing projector from Flycatcher. An Access Control Error vulnerability exists in Flycatcher Toys smART Sketcher 2.0 and prior versions, which stems from a lack of authentication in the Bluetooth Low Energy Interface component, which could lead to...

OpenProject 访问控制错误漏洞

OpenProject is a Web-based project management software from OpenProject Open Source. An Access Control Error vulnerability exists in versions prior to OpenProject 16.6.3, which stems from improper access control and could lead to unauthorized access to meeting details...

Vivotek IP7137 访问控制错误漏洞

The Vivotek IP7137 is an IP camera from China's VIVOTEK Communications Vivotek. An access control error vulnerability exists in the Vivotek IP7137 version 0200a, which originates from accessing the live camera feed via the RTSP protocol without authentication, which could lead to information...

FLIR Thermal Camera 访问控制错误漏洞

FLIR Thermal Camera F Series and others are a series of thermal imaging cameras from FLIR, USA. An access control error vulnerability exists in FLIR Thermal Camera F/FC/PT/D Stream version 8.0.0.64, which stems from a lack of authentication and could lead to unauthorized access to the live video...

titra 访问控制错误漏洞

titra is a time tracking project from kromit open source. An access control error vulnerability exists in titra version 0.99.49 and earlier, which stems from improper access control and could lead to a user viewing and editing time entries in unauthorized private projects...

WHILL Model C2和WHILL Model F 访问控制错误漏洞

The WHILL Model C2 and WHILL Model F are both power wheelchairs from WHILL USA. An access control error vulnerability exists in the WHILL Model C2 and WHILL Model F. The vulnerability stems from a lack of authentication over a Bluetooth connection, which could lead to unauthorized control of the...

Plane 访问控制错误漏洞

Plane is an open source, self-hosted project planning tool from Plane Open Source. An access control error vulnerability exists in versions of Plane prior to 1.2.0, which stems from a guest user being able to access a list of members of a specific workspace and recognize an administrator's email...

The vulnerability of the Cisco Catalyst Center (formerly Cisco DNA Center) network infrastructure management system, related to access control errors, allows a intruder to gain unauthorized access to protected information or enhance their privileges.

The vulnerability of the Cisco Catalyst Center formerly Cisco DNA Center network infrastructure management system is related to access control errors. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information or increase their privileges by...

Akuvox S539 访问控制错误漏洞

Akuvox S539 is a business access control intercom terminal from China Ruiyunlian Akuvox. The Akuvox S539 suffers from an access control error vulnerability that originates from unauthenticated access to the video stream, which could lead to information disclosure...

SOUND4多款产品 访问控制错误漏洞

SOUND4 IMPACT and others are products of SOUND4, a French company.SOUND4 IMPACT is a professional audio processor for broadcasting.SOUND4 FIRST is an audio processor for broadcasting.SOUND4 PULSE is an audio processor. An Access Control Error vulnerability exists in various SOUND4 products, which...

youlai-mall 访问控制错误漏洞

youlai-mall is a full-stack mall system by youlaitech open source. An access control error vulnerability exists in youlai-mall version 1.0.0 and 2.0.0, which originates from the file mall-ums/ums-boot/src/main/java/com/youlai/mall/ums/controller/app/MemberController. The function getMemberByMobil...

TOZED ZLT M30S 访问控制错误漏洞

TOZED ZLT M30S is a mobile WiFi router from China's Tongze Kangwei TOZED. An access control error vulnerability exists in TOZED ZLT M30S version 1.47 and earlier, which stems from incorrect manipulation of the parameter goformId in the Web Management Interface component file /reqproc/procpost,...