Emerson DeltaV Distributed Control System 访问控制错误漏洞

Emerson DeltaV Distributed Control System is an automated distributed control system from Emerson. The system includes features such as network security management, alarm management, batch control, and change management. An access control error vulnerability exists in the Emerson DeltaV Distribut...

MyAdmin 安全漏洞

MyAdmin is a backend management system for cdfan personal developers. A security vulnerability exists in MyAdmin v1.0, which stems from an incorrect access control vulnerability when viewing the Personal Center in /api/user/userData?userCode=admin...

The vulnerability of the Citrix Application Delivery Management (ADM) platform’s management service, related to access control deficiencies, allows a hacker to bypass the administrator password and increase their privileges.

The vulnerability of the Citrix Application Delivery Management ADM delivery management platform is related to lack of access control mechanisms. Exploiting this vulnerability could allow a malicious actor to bypass the administrator’s password and gain increased privileges...

Motorola Solutions MOSCAD IP Gateway和ACE IP Gateway 访问控制错误漏洞

The Motorola Solutions MOSCAD IP Gateway and Motorola Solutions ACE IP Gateway are both products of Motorola Solutions, Inc. A series of IP gateways. Use OPC to remotely and locally monitor, detect, alert, and protect any site.Motorola Solutions ACE IP Gateway is a series of IP gateways. An acces...

Advantech iView 访问控制错误漏洞

Advantech iView, a Simple Network Protocol SNMP based software from Advantech, China, manages B B SmartWorx devices. prior versions of Advantech iView 5.7.04.6469 are vulnerable to an access control error due to a lack of authentication, which could be exploited to read or modify sensitive data a...

LDAP Account Manager 注入漏洞

LDAP Account Manager is a web front-end for managing entries e.g., users, groups, DHCP settings stored in the LDAP directory.An injection vulnerability exists in LDAP Account Manager LAM versions prior to 8.0, which stems from faulty access control and could be exploited by an attacker to pass th...

The vulnerability of the Windows Container Isolation FS Filter driver on operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Container Isolation FS Filter driver in operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Desktop Bridge application converter for Windows operating systems allows a hacker to escalate their privileges.

The vulnerability of the Desktop Bridge application converter for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2022-28612

Improper Access Control vulnerability leading to multiple Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerabilities in Muneeb's Custom Popup Builder plugin = 1.3.1 at WordPress...

CVE-2022-32256

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.1. The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to low privileged users accessing privileged information...

The vulnerability of D-Link DIR816L router’s microprogramming software allows a hacker to gain access to the folder_view.php and category_view.php folders.

The vulnerability of D-Link DIR816L router’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to the folders folderview.php and categoryview.php...

PT-2022-21181 · Siemens · Sinema Remote Connect Server

Name of the Vulnerable Software and Affected Versions: SINEMA Remote Connect Server versions prior to V3.1 Description: A vulnerability has been identified in the SINEMA Remote Connect Server, where a web service lacks proper access control for some endpoints, potentially leading to unauthorized...

CVE-2022-32562

An issue was discovered in Couchbase Server before 7.0.4. Operations may succeed on a collection using stale RBAC permission...

CVE-2022-30311

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection...

WordPress plugin Like Button Rating 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control error...

The vulnerability of SonicWall SMA 1000 series network firewall microprogramming software, related to access control deficiencies, allows attackers to gain unauthorized access to limited functions.

The vulnerability of SonicWall SMA 1000 series network firewall microprogramming software is related to access control deficiencies. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to limited functions of the system...

PT-2022-21197 · Opswat · Opswat Metadefender Core +2

Name of the Vulnerable Software and Affected Versions: OPSWAT MetaDefender Core versions prior to 5.1.2 OPSWAT MetaDefender ICAP versions prior to 4.12.1 OPSWAT MetaDefender Email Gateway Security versions prior to 5.6.1 Description: The issue is related to incorrect access control, which can...

Envoy 访问控制错误漏洞

Envoy is an open source distributed proxy server.An access control error vulnerability exists in versions of Envoy prior to 1.22.1, which stems from allowing access in the presence of an access token for additional requests. No detailed vulnerability details are currently available...

The vulnerability of the MultipartStream.java file in the Apache Commons FileUpload library allows a hacker to induce a service failure.

The vulnerability of the MultipartStream.java file in the Apache Commons FileUpload library is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure by manipulating the Content-Type header created by the...

The vulnerability of the File System API interfaces in Microsoft Edge and Google Chrome browsers allows attackers to circumvent established security restrictions.

The vulnerability of the File System API interfaces in Microsoft Edge and Google Chrome is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions set by the user through a specially created website...