TastyIgniter 安全漏洞

TastyIgniter is an online ordering software from TastyIgniter open source. A security vulnerability exists in TastyIgniter version 3.7.6, which stems from improper access control of the invoice function in Orders.php, which could lead to unauthorized users accessing and generating invoices...

Bitdefender Box 安全漏洞

Bitdefender BOX is a smart home security control device from Bitdefender, Romania. A security vulnerability exists in Bitdefender Box version 1.3.52.928 and earlier, which stems from improper access control and could allow an unauthenticated attacker to downgrade the device firmware...

The vulnerability of the TSHttpTxnIntercept() function in the Apache Traffic Server allows a hacker to gain unauthorized access to protected information.

The vulnerability of the TSHttpTxnIntercept function in the Apache Traffic Server web server is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2024-56196

A flaw was found in Apache Traffic Server. This vulnerability allows improper access control via incompatible ACL behavior. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and...

DEBIAN-CVE-2024-56195

Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.8, from 10.0.0 through 10.0.3. Users are recommended to upgrade to version 9.2.9 or 10.0.4, which fixes the issue...

GitLab Enterprise Edition 安全漏洞

GitLab Enterprise Edition EE is a content management system from GitLab, Inc. in the United States. A security vulnerability exists in GitLab Enterprise Edition that stems from improper privilege control and could lead to user access to sensitive project analysis data...

The vulnerability of the Intel Graphics Performance Analyzer (Intel GPA) tool, related to deficiencies in access control, allows a malicious actor to trigger a service failure.

The vulnerability of the Intel Graphics Performance Analyzer Intel GPA lies in its lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the virtual learning environment Moodle, related to lack of access control, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the virtual learning environment Moodle is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Linux Distros Unpatched Vulnerability : CVE-2022-4662

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash...

CVE-2024-31525

Peppermint Ticket Management 0.4.6 is vulnerable to Incorrect Access Control. A regular registered user is able to elevate his privileges to admin and gain complete access to the system as the authorization mechanism is not validated on the server side and only on the client side. This can result...

Linux Distros Unpatched Vulnerability : CVE-2014-5177

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libvirt 1.0.0 through 1.2.x before 1.2.5, when fine grained access control is enabled, allows local users to read arbitrary files via a crafted XML document...

CVE-2024-8261 IDOR in Proliz Software's OBS

Authorization Bypass Through User-Controlled Key vulnerability in Proliz Software OBS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects OBS: before 24.0927...

CVE-2025-25950

Incorrect access control in the component /rest/staffResource/update of Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR v1.0.118 allows create and modify user accounts, including an Administrator account...

PT-2025-9240

Name of the Vulnerable Software and Affected Versions Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR version 1.0.118 Description The issue is related to incorrect access control in the component "/rest/staffResource/update" of the affected software, allowing unauthorize...

The vulnerability of the Tray Monitor Service in backup and data recovery software on computers and servers running Acronis Agent and Acronis CyberProtect 16 allows attackers to enhance their privileges.

The vulnerability of the Tray Monitor Service in backup and data recovery software on Acronis Agent and Acronis CyberProtect 16 software for data protection involves deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability in the form2LocalAclEditcfg.cgi script of the ACL Handler component of the D-Link DIR-816 A2 router’s software, which allows a perpetrator to compromise the integrity of protected information.

The vulnerability of the form2LocalAclEditcfg.cgi script within the ACL Handler component of the D-Link DIR-816 A2 router software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

Serosoft Solutions Academia Student Information System EagleR 安全漏洞

Serosoft Solutions Academia Student Information System EagleR is a student information system from Serosoft Solutions, India. A security vulnerability exists in Serosoft Solutions Academia Student Information System EagleR v1.0.118, which stems from improper access control in the...

The vulnerability in the form2AddVrtsrv.cgi script of the Virtual Service Handler component of the D-Link DIR-816 A2 router microprogramming system, which allows a attacker to compromise the integrity of protected information.

The vulnerability of the form2AddVrtsrv.cgi script of the Virtual Service Handler component in the D-Link DIR-816 A2 router microprogramming system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected...

PT-2025-9571

Name of the Vulnerable Software and Affected Versions Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR version 1.0.118 Description The issue is related to incorrect access control in the /rest/staffResource/update component, allowing unauthorized creation and modification...

Unifiedtransform 安全漏洞

Unifiedtransform is an open source school management software from the individual developer Hasib Mahmud. A security vulnerability exists in Unifiedtransform v2.X. The vulnerability stems from improper access control, which allows unauthorized users to access and operate the management endpoints...