Schneider Electric StruxureWare Data Center Expert 安全漏洞

Schneider Electric StruxureWare Data Center Expert is a monitoring software from the French company Schneider Electric Schneider Electric. It is suitable for a variety of organizations to monitor their company-wide power, cooling, security, and environment. An access control error vulnerability...

answer 安全漏洞

answer is an open source knowledge-based community software. An access control error vulnerability exists in versions of answer prior to 1.1.6, which stems from prolonged password expiration. An attacker could exploit the vulnerability to account account takeover...

PT-2023-21525 · Dell · Dell Ppdm

Name of the Vulnerable Software and Affected Versions: Dell PPDM versions 19.10 through 19.12 Description: The issue is related to improper access control. A remote authenticated malicious user with low privileges could potentially exploit this to bypass intended access restrictions and perform...

The vulnerability of Google Chrome’s Intents function allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Google Chrome’s Intents function is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created web page...

PT-2023-3282 · Glpi +1 · Fields +1

Name of the Vulnerable Software and Affected Versions: Fields versions prior to 1.13.1 Fields versions prior to 1.20.4 Description: The issue is related to a lack of access control check in the Fields plugin for GLPI, allowing any authenticated user to write data to any fields container, includin...

The vulnerability of the femanager extension of the TYPO3 content management system allows a hacker to set arbitrary passwords for users of the system.

The vulnerability of the femanager extension of the TYPO3 content management system is related to the lack of access control in the InvitationController. Exploiting this vulnerability allows a malicious actor to set arbitrary passwords for users of the system remotely...

The vulnerability of the microprogrammed logic controller LS ELECTRIC XBC-DN32U, related to deficiencies in access control, allows a intruder to gain control and manage the operation of the controller.

The vulnerability of the microprogrammed logic controller LS ELECTRIC XBC-DN32U is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain control and manage the controller’s operations by sending specially crafted packets via the XGT protocol...

PT-2023-2255 · Samba +4 · Samba +4

Name of the Vulnerable Software and Affected Versions: Samba affected versions not specified Description: A flaw was found in Samba, related to an incomplete access check on dnsHostName, allowing authenticated but otherwise unprivileged users to delete this attribute from any object in the...

CVE-2022-24972

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n 5553 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which...

CVE-2023-0335 WP Shamsi <= 4.3.3 - Subscriber+ Attachment Deletion

The WP Shamsi WordPress plugin through 4.3.3 has CSRF and broken access control vulnerabilities which leads user with role as low as subscriber delete attachment...

CVE-2023-24834

WisdomGarden Tronclass has improper access control when uploading file. An authenticated remote attacker with general user privilege can exploit this vulnerability to access files belonging to other users by modifying the file ID within URL...

WisdomGarden Tronclass 代码问题漏洞

WisdomGarden Tronclass ilearn is a teaching platform from China WisdomGarden, Inc. A security vulnerability exists in WisdomGarden Tronclass that stems from improper access control when uploading files. Affected products and versions: Tronclass ilearn app version 2.3.2 and Tronclass ilearn web...

The vulnerability of the access control function in Netgear Orbi RBR750 software allows a hacker to execute arbitrary code.

The vulnerability of the access control function of Netgear Orbi RBR750 software exists due to the lack of measures taken to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a speciall...

The vulnerability in the implementation of the Google Chrome browser’s Web Payments application interface allows a perpetrator to circumvent security restrictions.

The vulnerability of the Google Chrome browser’s Web Payments application interface is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions through a specially created HTML page...

The vulnerability of the stat() function in the OverlayFS subsystem of Linux kernels allows attackers to increase their privileges.

The vulnerability of the stat function in the OverlayFS subsystem of Linux operating systems is related to deficiencies in access control when processing setuid and setgid attributes. Exploiting this vulnerability can allow attackers to enhance their privileges...

WordPress plugin OoohBoi Steroids for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

HGiga MailSherlock 安全漏洞

Hgiga MailSherlock is an enterprise mail auditing system from China Henderson Technology Hgiga. A security vulnerability exists in HGiga MailSherlock version 4.5, which stems from an insufficient access control issue. The vulnerability can be exploited by an attacker to access parts of other user...

The software for creating music or podcasts in Apple GarageBand on the MacOS operating system is vulnerable, allowing attackers to exploit this vulnerability to gain higher privileges.

The vulnerability of the Apple GarageBand software for creating music or podcasts on the MacOS operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the AMD Ryzen Master utility for adjusting AMD Ryzen processors allows a hacker to increase their privileges.

The vulnerability of the AMD Ryzen Master tool for adjusting AMD Ryzen processors is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...

answer 代码问题漏洞

answer is an open source knowledge-based community software. An access control error vulnerability exists in versions of answer prior to 1.0.6 that stems from insufficient session expiration. An attacker could exploit the vulnerability by using a token to gain unauthorized access to an applicatio...