PT-2024-13686 · Godaddy · Godaddy Email Marketing

Name of the Vulnerable Software and Affected Versions: GoDaddy Email Marketing versions 1.4.3 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For GoDadd...

PT-2024-9309 · Dell · Dell Openmanage Server Administrator

Name of the Vulnerable Software and Affected Versions: Dell OpenManage Server Administrator versions 11.0.1.0 and prior Description: The issue is related to an improper access control vulnerability in the Dell OpenManage Server Administrator. This vulnerability can be exploited by a remote...

Drupal Pages Restriction Access module 2.0.0-2.0.2 - Unauthenticated Broken Access Control vulnerability

Unauthenticated Broken Access Control vulnerability discovered by Pierre Rudloff in WordPress Module Pages Restriction Access versions 2.0.0-2.0.2...

PT-2024-9161 · Veeam · Veeam Service Provider Console

Name of the Vulnerable Software and Affected Versions: Veeam Service Provider Console VSPC versions prior to 8.1.0.21377 Description: The issue is related to access control errors in the Veeam Service Provider Console VSPC backup and restore software for remote and cloud clients. It allows a remo...

The vulnerability of the software for optimizing performance of cloud and local applications in Intel Granulate, related to deficiencies in access control, allows attackers to enhance their privileges.

The vulnerability of the software for optimizing performance of cloud and local applications in Intel Granulate is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2024-50671

Incorrect access control in Adapt Learning Adapt Authoring Tool = 0.11.3 allows attackers with Authenticated User roles to obtain email addresses via the "Get users" feature. The vulnerability occurs due to a flaw in permission verification logic, where the wildcard character in permitted URLs...

Adapt Authoring Tool 安全漏洞

Adapt Authoring Tool is a free and easy-to-use eLearning authoring tool from Adapt Learning open source. A security vulnerability exists in Adapt Authoring Tool that stems from incorrect access control and allows an attacker with an authenticated user role to obtain an email address via the Get...

Meabilis 安全漏洞

Meabilis is an online tool from Meabilis, Inc. that makes it easy to manage professional websites without programming knowledge. A security vulnerability exists in Meabilis version 1.0 that stems from an access control error. An attacker exploiting the vulnerability could access another user's...

KIA Instrument Cluster KIA Seltos Software 安全漏洞

KIA Instrument Cluster KIA Seltos Software is an in-vehicle communication system from the Korean company KIA. A security vulnerability exists in KIA Instrument Cluster KIA Seltos Software version v1.0, which originates from an access control error. An attacker can exploit the vulnerability to...

CVE-2024-48536

Incorrect access control in eSoft Planner 3.24.08271-USA allow attackers to view all transactions performed by the company via supplying a crafted web request...

WordPress plugin nBlocks 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

The vulnerability of GigaDevice’s GD32 microprogrammed software controllers, models GD32E23x, GD32F20x, GD32F1x0, GD32F4xx, GD32F30x, GD32C10x, GD32E10x, and GD32E50x, is related to deficiencies in access control. This allows a perpetrator to execute arbitrary shell commands.

The vulnerability of GigaDevice’s microprogrammed controllers, such as GD32E23x, GD32F20x, GD32F1x0, GD32F4xx, GD32F30x, GD32C10x, GD32E10x, and GD32E50x, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to execute arbitrary shell code in the SRA...

CVE-2020-3539

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. The vulnerability is due to a failure to limit access to resources that are intended for use...

CVE-2024-52428

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Scripteo Ads Booster by Ads Pro allows PHP Local File Inclusion.This issue affects Ads Booster by Ads Pro: from n/a through 1.12...

UBUNTU-CVE-2024-48898

A vulnerability was found in Moodle. Users with access to delete audiences from reports could delete audiences from other reports that they do not have permission to delete from...

The vulnerability of the SmartFabric OS10 network operating system, related to deficiencies in access control, allows a intruder to execute arbitrary commands.

The vulnerability of the SmartFabric OS10 network operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...

The vulnerability of the SmartFabric OS10 network operating system, related to deficiencies in access control, allows attackers to increase their privileges.

The vulnerability of the SmartFabric OS10 network operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Improper access of prompt data by another user.

Description Another user can able to see the prompts data of a particular users. Proof of Concept let promptid be the prompt id of user 1 visit http://127.0.0.1:8080/prompts/promptid from another users user 2 session user 2 can see the user 1 promptid's data. Previously it was reported by some on...

CVE-2022-20931

A vulnerability in the version control of Cisco TelePresence CE Software for Cisco Touch 10 Devices could allow an unauthenticated, adjacent attacker to install an older version of the software on an affected device. This vulnerability is due to insufficient version control. An attacker could...

Cisco TelePresence Collaboration Endpoint和Cisco RoomOS 安全漏洞

Cisco RoomOS Software and Cisco TelePresence Collaboration Endpoint Software are both products of the U.S. company Cisco Cisco.Cisco RoomOS Software is a set of automatic management software for Cisco devices. The software is mainly used for upgrading and managing the motherboard firmware of Cisc...