3283 matches found
ZKTeco ZKBioSecurity 安全漏洞
ZKTeco ZKBioSecurity is a web-based all-in-one platform from ZKTeco China.An access control error vulnerability exists in ZKTeco ZKBioSecurity V5000 version 3.0.5r. The vulnerability stems from the presence of improper access control in the application, which can be exploited by an attacker to...
The vulnerability of the implementation of the DefaultActionMapper mechanism in the Apache Struts software framework allows attackers to circumvent security restrictions.
The vulnerability of the DefaultActionMapper mechanism implemented by the Apache Struts software platform is related to deficiencies in access control when processing the ‘action: prefix’ parameter. Exploiting this vulnerability allows an attacker to bypass security restrictions while operating...
CVE-2022-20818
Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could exploit these vulnerabilities by running a...
CVE-2022-2760
In affected versions of Octopus Deploy it is possible to reveal the Space ID of spaces that the user does not have access to view in an error message when a resource is part of another Space...
Bytebase 安全漏洞
Bytebase is an open source web-based, zero-configuration, dependency-free database schema change and version control management tool for DevOps teams.Bytebase versions 0.1.0 through 1.0.4 are vulnerable to an access control error that stems from unrestricted low privilege user access, which can b...
The vulnerability of the rcp.c component in the NetKit-rsh remote execution program allows a attacker to compromise data integrity.
The vulnerability of the rcp.c component in the NetKit-rsh remote execution program is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to compromise data integrity using a dummy file name or the file name “.”...
The vulnerability of the WKUserScript script in Mozilla Firefox’s browser loading mechanism for iOS allows a malicious user to load any file they desire.
The vulnerability of the WKUserScript script in Mozilla Firefox’s browser download function for iOS is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to download any file they desire...
Hitachi Vantara Hitachi Content Platform 安全漏洞
Hitachi Vantara Hitachi Content Platform is an object storage system from Hitachi Vantara, Inc. that provides massively scalable, reliable, efficient and easy-to-use storage for automated management and preservation of content. An access control error vulnerability exists in Hitachi Vantara Hitac...
The vulnerability of the Mozilla Firefox browser for Android allows attackers to trigger service denial-of-service attacks or perform spear-phishing attacks.
The vulnerability of the Mozilla Firefox browser for Android is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures or perform spear-phishing attacks using a specially created link...
TestLink 安全漏洞
TestLink is a suite of open source software from the TestLink team for managing the software testing process and providing statistical analysis. A security vulnerability exists in TestLink version v1.9.20, which stems from /lib/attachments/attachmentdownload.php containing an incorrect access...
CVE-2022-36864
Improper access control and intent redirection in Samsung Email prior to 6.1.70.20 allows attacker to access specific formatted file and execute privileged behavior...
PT-2022-23668 · Samsung · Samsung Email
Name of the Vulnerable Software and Affected Versions: Samsung Email versions prior to 6.1.70.20 Description: The issue is related to improper access control and intent redirection, allowing an attacker to access a specific formatted file and execute privileged behavior. Recommendations: For...
CVE-2022-36638
An access control issue in the component print.php of Garage Management System v1.0 allows unauthenticated attackers to access data for all existing orders...
CVE-2022-36638
An access control issue in the component print.php of Garage Management System v1.0 allows unauthenticated attackers to access data for all existing orders...
Garage Management System 安全漏洞
SourceCodester Garage Management System Cms-Website is a garage management system by mayurik personal developer. It helps you to manage all your vehicles, cars and motorcycles. A security vulnerability exists in Garage Management System v1.0, which stems from an access control issue in the...
CVE-2022-36202
Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient/settings.php. The settings.php is affected by Broken Access Control IDOR via id= parameter...
PT-2022-6779 · Google +1 · Google Chrome +1
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 105.0.5195.52 Description: The issue is related to inappropriate implementation in the Extensions component of Google Chrome, which is associated with inadequate access control. This allows a remote attacker wh...
CVE-2022-32993
TOTOLINK A7000R V4.1cu.4134 was discovered to contain an access control issue via /cgi-bin/ExportSettings.sh...
Hitachi Kokusai Electric ISnex HC-IP9100HD 访问控制错误漏洞
The Hitachi Kokusai Electric ISnex HC-IP9100HD is a network camera from Hitachi, Japan. A security vulnerability exists in Hitachi Kokusai Electric ISnex HC-IP9100HD version 1.07 and earlier versions, which stems from an access control issue. An attacker exploiting this vulnerability could remote...