Azure Marketplace Disclosure Information

The vulnerability of the Azure Marketplace component of Microsoft Azure’s software platform is related to access control errors. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...

PT-2024-10289 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Microsoft Edge, which is based on Chromium. This vulnerability can be exploited by a remote attacker...

BigDL Access Control Privilege Escalation

The vulnerability of BigDL software is related to errors in access control. Exploiting this vulnerability can allow a remote attacker to enhance their privileges...

Cisco Analog Telephone Adapter Device Command Execution

The vulnerability of the web interface for managing microprogrammed software in Cisco Analog Telephone Adapter ATA devices of the 190 series is related to access control errors. Exploiting this vulnerability allows a malicious actor to execute commands on behalf of the Admin user by sending a...

Synology cameras Code Execution

The vulnerability of the microprogramming software of Synology BC500, Synology TC500, and Synology CC400W is related to access control errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Remote Desktop Services Windows RCE

The vulnerability of Remote Desktop Services RDS for Windows operating systems is related to access control errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

Xen vlapic_error DoS

The vulnerability of the vlapicerror function in supervisors is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

TestLink security vulnerabilities

TestLink is a suite of open source software from the TestLink team for managing the software testing process and providing statistical analysis. A security vulnerability exists in TestLink version 1.9.20 that stems from the application not checking user permissions, resulting in an access control...

Microsoft Visio graphic editors

The vulnerability of Microsoft Visio graphic editors, Microsoft Office programs, and 365 Apps for Enterprise is related to access control errors. Exploiting this vulnerability allows an attacker to execute arbitrary code, provided that the user opens a specially crafted file...

TCP/IP Connectivity Utilities Privilege Escalation

The vulnerability of the TCP/IP Connectivity Utilities component in IBM i operating systems is related to access control errors. Exploiting this vulnerability allows attackers to enhance their privileges...

PowerScale OneFS Privilege Escalation

The vulnerability of the PowerScale OneFS operating system is related to access control errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

NVIDIA GPU Display Driver Code Execution

The vulnerability of the NVIDIA GPU Display Driver software driver is related to access control errors. Exploiting this vulnerability allows an attacker to execute arbitrary code, enhance their privileges, or disclose sensitive information...

PowerScale OneFS Privilege Escalation

The vulnerability of the PowerScale OneFS operating system is related to access control errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

PT-2023-7008

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description The issue is related to a security feature bypass in Microsoft Office, which is connected to access control errors. Exploitation of this issue may allow an attacker to bypass existin...

Node Role Label Handler Privilege Escalation

The vulnerability of the Node Role Label Handler component in the corporate platform’s application programming interface of Red Hat OpenShift Container Platform is related to access control errors. Exploiting this vulnerability could allow a malicious actor to enhance their privileges by modifyin...

Microsoft Exchange Server Access Control RCE

The vulnerability of Microsoft Exchange Server is related to access control errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the server’s account context through a remote network call...

FortiSwitchManager Access Control Modification

The vulnerability of the FortiSwitchManager local management platform is related to errors in access control. Exploiting this vulnerability allows a malicious actor to make changes to settings by sending commands through the application programming interface...

SICAM TOOLBOX II Access Control Command Execution

The vulnerability of the SICAM TOOLBOX II engineering software is related to access control errors. Exploiting this vulnerability can allow attackers to execute arbitrary commands with elevated privileges...

PT-2023-4690 · Unknown · Sicam Toolbox Ii

Name of the Vulnerable Software and Affected Versions: SICAM TOOLBOX II versions prior to V07.10 Description: A vulnerability has been identified in the SICAM TOOLBOX II application, where the database service is executed as NT AUTHORITYSYSTEM. This could allow a local attacker to execute operati...

Huawei 535-232a Router Access Control Error

The vulnerability of Huawei 535-232a router’s microprogramming software is related to access control errors during the processing of domain names. Exploiting this vulnerability allows a remote attacker to intercept packets...