The vulnerability of the SET ROLE and SET SESSION commands in the PostgreSQL database management system allows attackers to enhance their privileges and gain access to protected information.

The vulnerability of the SET ROLE and SET SESSION commands in the PostgreSQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to enhance their privileges and gain access to protected information...

Cisco RoomOS Software和Cisco TelePresence Collaboration Endpoint Software 安全漏洞

Cisco RoomOS Software and Cisco TelePresence Collaboration Endpoint Software are both products of Cisco Corporation.Cisco RoomOS Software is a set of automated management software for Cisco devices. The software is mainly used for upgrading and managing the motherboard firmware of Cisco...

Lilishop 安全漏洞

Lilishop is a mall system from Lilishop Open Source. A security vulnerability exists in Lilishop version 4.2.4 and prior versions, which stems from an access control error. An attacker exploiting this vulnerability could capture and send coupon collection packets to obtain coupons that exceed the...

CVE-2024-40408

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section. This vulnerability allows attackers to create arbitrary user profiles with elevated privileges...

CVE-2024-40405

Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain access to a secondary broker via a crafted request...

CVE-2024-40404

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endpoint where Web Sockets connections are established...

The vulnerability of the Buildah container management tool arises due to an incorrect path name limitation for the restricted access catalog. This allows a malicious user to elevate their privileges within the system.

The vulnerability of the Buildah container management tool exists due to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability can allow a malicious user to gain increased privileges within the system...

CVE-2021-27704

Appspace 6.2.4 is affected by Incorrect Access Control via the Appspace Web Portal password reset page...

Fortinet FortiOS 授权问题漏洞

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. An access control error...

CVE-2024-48010

Dell PowerProtect DD, versions prior to 8.1.0.0, 7.13.1.10, 7.10.1.40, and 7.7.5.50, contains an access control vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to escalation of privilege on the application...

The vulnerability of the Intel Raid Web Console web console, related to deficiencies in access control, allows a intruder to trigger a service failure.

The vulnerability of the Intel Raid Web Console web console relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CVE-2024-40239

The CVE-2024-40239 issue affects the Android app Life: Personal Diary, Journal (version 17.5.0). The vulnerability is described as an incorrect access control that could allow a physically proximate attacker to escalate privileges through the app’s fingerprint authentication function. The availab...

Cisco Nexus 3500 Series Switches 权限许可和访问控制问题漏洞

Cisco Nexus 3500 Series Switches is a 3500 series switch from Cisco USA. The Cisco Nexus 3500 Series Switches are vulnerable to a privilege-granting and access-control issue, which arises from an ACL denial rule that is not properly enforced when the device is rebooted. An unauthenticated, remote...

The vulnerability of the Partners component of Oracle Marketing’s marketing platform, a part of the Oracle E-Business Suite, which allows an attacker to gain unauthorized access to read, add, modify, or delete data.

The vulnerability of the Partners component of Oracle’s marketing platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to read, add, modify, or delete data using the HTTP protocol...

golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses

A flaw was found in the Go language standard library net/netip. The method Is IsPrivate, IsPublic, etc doesn't behave properly when working with IPv6 mapped to IPv4 addresses. The unexpected behavior can lead to integrity and confidentiality issues, specifically when these methods are used to...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a privilege issue vulnerability that stems from a privilege control in the ability module. An attacker could exploit this...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A privilege control vulnerability exists in the Huawei HarmonyOS clipboard module, which can be exploited by an attacker to compromise confidentiality...

CVE-2024-43312

Missing Authorization vulnerability in WPClever WPC Frequently Bought Together for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPC Frequently Bought Together for WooCommerce: from n/a through 7.1.9...

CVE-2024-43209

Missing Authorization vulnerability in Bitly allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bitly: from n/a through 2.7.2...

WordPress plugin User Rights Access Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...