The vulnerability of Google Chrome’s Autofill function allows attackers to bypass existing security restrictions.

The vulnerability of Google Chrome’s Autofill function is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions through a specially created HTML page...

The vulnerability of the Downloads component in the Google Chrome browser allows a hacker to bypass existing security restrictions.

The vulnerability of the Downloads component in the Google Chrome browser is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions through a specially created HTML page...

Medium: squid

Issue Overview: A flaw was found in squid. A trusted client can directly access the cache manager information, bypassing the manager ACL protection and resulting in information disclosure. CVE-2022-41317 Affected Packages: squid Note: This advisory is applicable to Amazon Linux 2 - Squid4 Extra...

Low: redis

Issue Overview: A flaw was found in the Redis database where Lua scripts can be manipulated to overcome ACL rules. This flaw allows an attacker with access to Redis to inject Lua code that executes the potentially higher privileges of another Redis user. CVE-2022-24735 A flaw was found in the Red...

CVE-2023-38206 ColdFusion | Improper Access Control (CWE-284)

Adobe ColdFusion versions 2018u18 and earlier, 2021u8 and earlier and 2023u2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the administration CFM and CFC endpoints...

EuroTel ETL3100 - Transmitter Authorization Bypass (IDOR)

Exploit Title: EuroTel ETL3100 - Transmitter Authorization Bypass IDOR Exploit Author: LiquidWorm Vendor: EuroTel S.p.A. | SIEL, Sistemi Elettronici S.R.L Product web page: https://www.eurotel.it | https://www.siel.fm Affected version: v01c01 Microprocessor: socs0t10/ats01s01, Model: ETL3100...

CVE-2023-4345

Broadcom RAID Controller web interface is vulnerable client-side control bypass leads to unauthorized data access for low privileged user...

CVE-2023-4345 Broadcom RAID Controller web interface is vulnerable client-side control bypass

Broadcom RAID Controller web interface is vulnerable client-side control bypass leads to unauthorized data access for low privileged user...

CVE-2023-4345

CVE-2023-4345 affects Broadcom RAID Controller web interface, describing a client-side control bypass that can lead to unauthorized data access by a low-privileged user. The NVD entry assigns CVSSv3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N (base 6.5, MEDIUM) with high confidentiality impact and no ...

CVE-2023-4345 Broadcom RAID Controller web interface is vulnerable client-side control bypass

Broadcom RAID Controller web interface is vulnerable client-side control bypass leads to unauthorized data access for low privileged user...

PT-2023-21750 · Tigergraph · Tigergraph Enterprise

Name of the Vulnerable Software and Affected Versions: Tigergraph Enterprise version 3.7.0 Description: An issue was discovered in the TigerGraph platform, which allows users to define new User Defined Functions UDFs from C/C++ code. This functionality enables users to upload custom C/C++ code,...

Adobe Acrobat < 20.005.30514.10514 / 23.003.20269 Multiple Vulnerabilities (APSB23-30)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 20.005.30514.10514 or 23.003.20269. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat Reader versions 23.003.20244 and earlier and 20.005.30467 and earlier are affected by an Access of...

CVE-2023-3622

Access Control Bypass Vulnerability in the SolarWinds Platform that allows an underprivileged user to read arbitrary resource...

CVE-2023-3622

Access Control Bypass Vulnerability in the SolarWinds Platform that allows an underprivileged user to read arbitrary resource...

Improper access control

Access Control Bypass Vulnerability in the SolarWinds Platform that allows an underprivileged user to read arbitrary resource...

CVE-2023-3622 Access Control Bypass Vulnerability in the SolarWinds Platform

Access Control Bypass Vulnerability in the SolarWinds Platform that allows an underprivileged user to read arbitrary resource...

CVE-2023-3622

CVE-2023-3622 affects SolarWinds Platform (as referenced by Nessus plugin SOLARWINDS_PLATFORM_2023_3.NASL) with the remediation path to upgrade to version 2023.3 or newer. The issue is an Access Control Bypass that lets an underprivileged user read arbitrary resources. The Nessus entry indicates ...

SolarWinds Platform 授权问题漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. SolarWinds Platform suffers from an authorization issue vulnerability that stems from an access control bypass issue. A low-privilege attacker could exploit this...

Medium: keepalived

Issue Overview: A flaw was found in keepalived, where an improper authentication vulnerability allows an unprivileged user to change properties that could lead to an access-control bypass. CVE-2021-44225 Affected Packages: keepalived Note: This advisory is applicable to Amazon Linux 2 AL2 Core...

Cisco NX-OS Software Unexpected IP in IP Packet Processing (CVE-2020-10136)

Multiple products that implement the IP Encapsulation within IP standard RFC 2003, STD 1 decapsulate and route IP-in-IP traffic without any validation, which could allow an unauthenticated remote attacker to route arbitrary traffic via an exposed network interface and lead to spoofing, access...