CVE-2022-34049

An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows unauthenticated attackers to download log files and configuration data...

CVE-2022-34047

An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain usernames and passwords via view-source:http://IPADDRESS/setsafety.shtml?r=52300 and searching for var syspasswd...

CVE-2022-34046

An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IPADDRESS/sysinit.shtml?r=52300 and searching for logincheckuser;...

The vulnerability of the Azure Site Recovery recovery tool, related to deficiencies in access control, allows a attacker to expose the protected information.

The vulnerability of the Azure Site Recovery recovery tool is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to expose the protected information...

Cisco Nexus Dashboard 访问控制错误漏洞

Cisco Nexus Dashboard is a centralized data center control panel that makes it easier to manage hybrid cloud network operations and maintenance.A security vulnerability exists in Cisco Nexus Dashboard that could be exploited by attackers to spoof user identities and send malicious requests...

Cisco Nexus Dashboard 访问控制错误漏洞

Cisco Nexus Dashboard is the United States Cisco Cisco a single console. It can simplify the operation and management of data center networks. Cisco Nexus Dashboard has a security vulnerability that can be exploited by an unauthenticated, remote attacker to access specific APIs running in the dat...

PT-2022-21983 · Wavlink · Wavlink Wn533A8

Name of the Vulnerable Software and Affected Versions: Wavlink WN533A8 version M33A8.V5030.190716 Description: An access control issue allows attackers to obtain usernames and passwords via the API endpoint "http://IP ADDRESS/sysinit.shtml?r=52300" by searching for logincheckuser. Recommendations...

The vulnerability of the microprogrammed Ethernet switch Bosch PRA-ES8P2S, related to deficiencies in access control, allows attackers to bypass existing security restrictions and elevate their privileges to the root level.

The vulnerability of the microprogrammed Ethernet switch Bosch PRA-ES8P2S is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and elevate their privileges to the root level...

CVE-2022-34738

The SystemUI module has a vulnerability in permission control. If this vulnerability is successfully exploited, users are unaware of the service running in the background...

CVE-2022-33689

Improper access control vulnerability in TelephonyUI prior to SMR Jul-2022 Release 1 allows attackers to change preferred network type by unprotected binder call...

CVE-2022-30751

Improper access control vulnerability in sendDHCPACKBroadcast function of SemWifiApClient prior to SMR Jul-2022 Release 1 allows attacker to access wifi ap client mac address that connected by using WIFIAPSTADHCPACKEVENT action...

SAMSUNG Mobile devices SemWifiApClient 安全漏洞

Samsung Mobile devices are a range of Samsung mobile devices from the South Korean company Samsung SAMSUNG, including cell phones, tablets, and more. Samsung Mobile devices SemWifiApClient has an access control vulnerability that originates from improper access control in the sendDHCPACKBroadcast...

SAMSUNG Mobile devices SemWifiApClient 安全漏洞

An access control error vulnerability exists in Samsung SemWifiApClient, a Wifi component of Samsung mobile devices, which stems from improper access control in SemWifiApClient and can be exploited by attackers to gain unauthorized access the Wi-Fi AP client MAC address...

Siemens Mendix Applications using Mendix 7和Siemens Mendix Applications using Mendix 9 安全漏洞

Mendix is a high-productivity application platform that enables mobile and web applications to be built and continuously improved at scale. Siemens Mendix is vulnerable to an access control error that could be exploited by an attacker to set weak passwords...

Samsung Gallery 安全漏洞

Samsung Gallery is an application from Samsung Samsung Inc. The best image and video viewing application for Galaxy users.An access control error vulnerability exists in versions prior to Samsung Gallery 13.1.05.8, which stems from faulty access validation logic in Gallery, and could be exploited...

The vulnerability of Splunk Enterprise’s deployment servers allows a attacker to compromise the Universal Forwarder and execute arbitrary code.

The vulnerability of the Splunk Enterprise platform’s deployment servers is related to lack of access control. Exploiting this vulnerability allows a malicious actor to compromise the Universal Forwarder and execute arbitrary code...

The vulnerability of the join.c component in the isolated Firejail programming environment, which allows a hacker to escalate their privileges.

The vulnerability of the join.c component in the isolated Firejail programming environment is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2022-2243

An access control vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows authenticated users to enumerate issues in non-linked sentry projects...

PT-2022-15427 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE/CE versions 14.8 through 14.10.4 GitLab EE/CE versions 15.0 through 15.0.3 GitLab EE/CE versions 15.1 through 15.1.0 Description: An access control issue affects GitLab EE/CE, allowing authenticated users to enumerate issues in...

Emerson DeltaV Distributed Control System 访问控制错误漏洞

Emerson DeltaV Distributed Control System is an automated distributed control system from Emerson. The system includes features such as network security management, alarm management, batch control, and change management. An access control error vulnerability exists in the Emerson DeltaV Distribut...