The vulnerability of the displayengine module in the EMUI operating system of HarmonyOS, which allows for screen darkening

The vulnerability of the displayengine module in the EMUI operating system of HarmonyOS is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to perform a screen darkening operation remotely...

The vulnerability of the PackageKit component in macOS operating systems allows a hacker to execute arbitrary code.

The vulnerability of PackageKit for macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to deficiencies in access control, allows access to confidential information.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to confidential information...

The vulnerability of the application software interface of the Cisco DNA Center allows a hacker to read and modify data in its internal repository.

The vulnerability of the Cisco DNA Center’s application programming interface is related to errors in access management. Exploiting this vulnerability allows a malicious actor to remotely read and modify data in the internal repository by sending specially crafted API requests...

PT-2023-5848 · Pure Storage +1 · Flasharray +3

Name of the Vulnerable Software and Affected Versions: Pure Storage VASA affected versions not specified Description: A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation. The issue is related to...

The vulnerability of the HPE Aruba Networking Virtual Intranet Access Client (VIA) VPN service, related to deficiencies in access control, allows a hacker to gain access to the interface and execute arbitrary commands with root privileges.

The vulnerability of the HPE Aruba Networking Virtual Intranet Access Client VIA VPN service is related to deficiencies in access control. Exploiting this vulnerability could allow a attacker to gain access to the underlying system and execute arbitrary commands with root privileges...

Huawei HarmonyOS Security Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in HarmonyOS, which stems from an improper privilege control issue in the MediaPlaybackController module. Affected products a...

WordPress Plugin ldap-login-for-intranet-sites Access Control Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control error...

PT-2023-6824 · Glpi +2 · Glpi +2

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.10 Description: The issue is related to inadequate access control in the GLPI system, which provides ITIL Service Desk features, licenses tracking, and software auditing. A user with write access to another user's...

The vulnerability of cloud-based software for creating and using Nextcloud storage solutions is related to improper access control, which allows attackers to gain unauthorized access to protected information.

The vulnerability of cloud-based software for creating and using Nextcloud storage solutions is related to improper access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information by sending a DAV request that reveals...

Schneider Electric IGSS Access Control Error Vulnerability

Schneider Electric IGSS is a multi-player collaborative application from Schneider Electric France. An access control error vulnerability exists in Schneider Electric IGSS Update Service v16.0.0.23211 and prior versions, which originates from a service that allows a local attacker to change the...

Movim Access Control Error Vulnerability

Movim is a syndicated blogging and chat platform that acts as a web front end for the XMPP protocol. A security vulnerability exists in Movim versions prior to 0.22Z, which stems from a lack of header validation, leading to a cross-site WebSocket hijacking issue...

Vulnerability of the operating systems of ArubaOS controllers Aruba 9200 and 9000, allowing a hacker to execute arbitrary code

The vulnerability of ArubaOS controller devices Aruba 9200 and 9000 is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in their lack of access control mechanisms, allowing attackers to increase their privileges.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created...

The vulnerability of the Project Name Handler component in navigation and multimedia systems intended for use in terrestrial vehicles, provided by Harman Infotainment, allows for root access via SSH using a USB-to-Ethernet key with a password.

The vulnerability of the Project Name Handler component in navigation and multimedia systems intended for use in terrestrial vehicles, Harman Infotainment, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain root access via SSH using a...

The vulnerability of the Zoho ManageEngine ADManager Plus software for managing Active Directory services stems from deficiencies in access control. This allows attackers to execute arbitrary commands with superuser privileges.

The vulnerability of the Zoho ManageEngine ADManager Plus software for managing Active Directory services is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with superuser privileges remotely...

The vulnerability of the Azure HDInsights data analytics service, related to insufficient access control, allows attackers to escalate their privileges.

The vulnerability of the Azure HDInsight data analytics service is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges through a specially crafted request...

Dell SD ROM Utility Access Control Error Vulnerability

Dell SD ROM Utility is a tool from Dell USA that helps to permanently write-protect SD cards. An access control error vulnerability exists in Dell SD ROM Utility versions prior to 1.0.2.0, which can be exploited by an attacker to execute arbitrary code with limited access rights...

The vulnerability of the Intel Unite conference communication software for Android, related to access control deficiencies, allows unauthorized access to information.

The vulnerability of the Intel Unite conference communication software for Android is related to lack of access control. Exploiting this vulnerability can allow a perpetrator to gain unauthorized access to information...

SolarWinds Serv-U FTP Server Access Control Error Vulnerability

SolarWinds Serv-U FTP Server is a suite of FTP and MFT file transfer software from the US-based SolarWinds Corporation. An access control error vulnerability exists in versions of SolarWinds Serv-U FTP Server prior to 15.4 HF2, which stems from an attacker being able to bypass multi/two-factor...