AXIS License Plate Verifier Security Vulnerability

AXIS License Plate Verifier is a license plate verifier from AXIS Sweden. Ideal for free flow, low speed traffic and vehicle access control scenarios, it makes detecting and reading license plates easy. A security vulnerability exists in AXIS License Plate Verifier 2.8.3 and prior versions that...

The vulnerability of the VOLSNAP.SYS driver in Windows operating systems allows a hacker to gain elevated privileges.

The vulnerability of the VOLSNAP.SYS driver for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Fortinet FortiNAC network access control mechanism, related to deficiencies in access control, allows a intruder to perform unauthorized calls via JSP.

The vulnerability of the Fortinet FortiNAC network access control mechanism is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to perform unauthorized calls...

The vulnerability of the Change and Transport System component of the SAP NetWeaver software integration platform allows a perpetrator to trigger a service failure.

The vulnerability of the Change and Transport System component of the SAP NetWeaver software integration platform is related to the lack of a mechanism for controlling the resources used. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

The vulnerability of the Memcached service of the microprogramming software used in the Elenos ETG150 transmitter allows a hacker to increase their privileges.

The vulnerability of the Memcached microprogramming system used by the Elenos ETG150 transmitter is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

CVE-2023-36339

An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request...

CVE-2023-36339

An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request...

CVE-2023-38334

Omnis Studio 10.22.00 has incorrect access control. It advertises an irreversible feature for locking classes within Omnis libraries: it should be no longer possible to delete, view, change, copy, rename, duplicate, or print a locked class. Due to implementation issues, locked classes in Omnis...

SAP NetWeaver Process Integration 访问控制错误漏洞

SAP NetWeaver Process Integration PI is an SAP enterprise application integration software from SAP, Germany, and is a component of the NetWeaver product group. The component is mainly used for the exchange of information between the internal system and the external. An access control error...

Siemens SIMATIC CN 4100 安全漏洞

The Siemens SIMATIC CN 4100 is a communication node from Siemens, Germany. A security vulnerability previously existed in the Siemens SIMATIC CN 4100 version 2.5, which resulted in an escalation of privileges due to incorrect access control included in the configuration file of the affected devic...

The vulnerability of the Cloudflare WARP for Windows client, related to access control deficiencies, allows attackers to execute connection and disconnection commands for WARP, as well as obtain network diagnostic information and application configurations.

The vulnerability of Cloudflare WARP for Windows relates to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute connection and disconnection commands for WARP, as well as obtain diagnostic information and application configurations...

The vulnerability of Microsoft Edge browsers, related to vulnerabilities in access control, allows attackers to bypass security restrictions, enhance their privileges, or execute arbitrary code.

The vulnerability of Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions, enhance their privileges, or execute arbitrary code by opening a specially crafted malicious web page...

PT-2023-24677 · Glpi +2 · Glpi +2

Name of the Vulnerable Software and Affected Versions: GLPI versions 0.68 through 10.0.7 Description: The issue is related to an incorrect rights check on a file accessible by an authenticated user, allowing access to the list of all users and their personal information. Users should upgrade to...

Elenos ETG150 安全漏洞

The Elenos ETG150 is an FM transmitter from Elenos. A security vulnerability exists in the Elenos ETG150 FM transmitter version 3.12 that stems from the presence of incorrect access control, which can be exploited by an attacker to escalate user role privileges using a user profile...

CVE-2023-29711

An incorrect access control issue was discovered in Interlink PSG-5124 version 1.0.4, allows attackers to execute arbitrary code via crafted GET request...

CVE-2022-45287

An access control issue in Registration.aspx of Temenos CWX 8.5.6 allows authenticated attackers to escalate privileges and perform arbitrary Administrative commands...

PT-2023-14638 · Temenos · Temenos Cwx

Name of the Vulnerable Software and Affected Versions: Temenos CWX version 8.5.6 Description: The issue is related to an access control problem in the Registration.aspx file, allowing authenticated attackers to escalate privileges and execute arbitrary administrative commands. Recommendations: Fo...

Makves DCAP 安全漏洞

Makves DCAP is a data protection and risk management related to the storage and access of information resources from the Russian company Makves. A security vulnerability exists in Makves DCAP version v3.0.0.122, which stems from incorrect access control. An attacker exploits the vulnerability to...

WordPress plugin Easy Media Replace 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

Zoom VDI client installer 安全漏洞

Zoom VDI client installer is a client installer from Zoom USA. A security vulnerability exists in Zoom VDI client installer versions prior to 5.14.0 that stems from incorrect access control. An attacker can exploit the vulnerability to delete local files without proper privileges...