3283 matches found
WordPress plugin Royal Elementor Addons 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
PT-2023-15141 · WordPress · Royal Elementor Addons
Name of the Vulnerable Software and Affected Versions: The Royal Elementor Addons plugin for WordPress versions up to, and including, 1.3.59 Description: The issue is related to insufficient access control in the 'wpr import templates kit' AJAX action. This allows any authenticated user, includin...
PT-2023-15128 · WordPress · Royal Elementor Addons
Name of the Vulnerable Software and Affected Versions: The Royal Elementor Addons plugin for WordPress versions up to, and including, 1.3.59 Description: The issue is related to insufficient access control in the 'wpr activate required theme' AJAX action. This allows any authenticated user,...
PT-2023-15139 · WordPress · Royal Elementor Addons
Name of the Vulnerable Software and Affected Versions: The Royal Elementor Addons plugin for WordPress versions up to, and including, 1.3.59 Description: The issue is related to insufficient access control in the 'wpr reset previous import' AJAX action. This allows any authenticated user, includi...
PT-2023-15156 · WordPress · Royal Elementor Addons
Name of the Vulnerable Software and Affected Versions: The Royal Elementor Addons plugin for WordPress versions up to, and including, 1.3.59 Description: The issue is related to insufficient access control in the 'wpr save template conditions' AJAX action. This allows any authenticated user,...
The vulnerability of the kbdint_next_device() function in the sshd service of the OpenSSH security tool allows a attacker to execute a brute-force attack or cause a service failure.
The vulnerability of the kbdintnextdevice function in the sshd service of the OpenSSH cryptographic protection mechanism is related to deficiencies in access control when processing the oKbdInteractiveDevices parameter, which contains a list of methods for authenticating using an interactive...
The vulnerability of the Oracle Solaris operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the Oracle Solaris operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service failures...
PT-2022-28102 · Unknown · Usememos/Memos
Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is related to insufficient granularity of access control, allowing an attacker to archive any user's public or private post. This affects the usememos/memos GitHub repository...
The vulnerability of the Fax Compose Form component in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Fax Compose Form component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
DEBIAN-CVE-2022-4662
A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the system...
Rockwell Automation Studio 5000 Logix Designer 授权问题漏洞
Rockwell Automation Studio 5000 Logix Designer is a Windows-based application from Rockwell Automation, Inc. It is used to build programs for PLCs. An access control error vulnerability exists in Rockwell Automation Studio 5000 Logix Designer version v.20-33, which arises from a user being grante...
CVE-2022-46664
A vulnerability has been identified in Mendix Workflow Commons All versions V2.4.0, Mendix Workflow Commons V2.1 All versions V2.1.4, Mendix Workflow Commons V2.3 All versions V2.3.2. Affected versions of the module improperly handle access control for some module entities. This could allow...
CVE-2022-45936
A vulnerability has been identified in Mendix Email Connector All versions V2.0.0. Affected versions of the module improperly handle access control for some module entities. This could allow authenticated remote attackers to read and manipulate sensitive information...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Dec-2022 Release 1, which stems from an incorrect access control...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in versions prior to SMR Dec-2022 Release 1, which stems from an incorrect access control vulnerability in...
PT-2022-27337 · Tenda · Tenda Ac18
Name of the Vulnerable Software and Affected Versions: Tenda A18 version 15.13.07.09 Description: An access control issue allows unauthenticated attackers to access the Telnet service. Recommendations: For Tenda A18 version 15.13.07.09, consider restricting access to the Telnet service until a...
Aruba Networks AirWave Management Platform 安全漏洞
Aruba Networks AirWave Management Platform, from Aruba Networks, provides granular visibility into wired and wireless networks and is the leading multi-vendor management platform designed for local campus environments. A security vulnerability exists in the Aruba Networks AirWave Management...
CVE-2022-44929
An access control issue in D-Link DVG-G5402SP GE1.03 allows unauthenticated attackers to escalate privileges via arbitrarily editing VoIP SIB profiles...
CVE-2022-44211
In GL.iNet Goodcloud 1.1 Incorrect access control allows a remote attacker to access/change devices' settings...
PT-2022-22586 · Unknown · Ixp Data Easy Install
Name of the Vulnerable Software and Affected Versions: IXPdata EasyInstall version 6.6.14725 Description: The issue is related to an access control problem. Recommendations: For version 6.6.14725, at the moment, there is no information about a newer version that contains a fix for this issue...