The vulnerability of the Solution Manager Diagnostics (Root Cause Analysis) tool within the SAP Solution Manager software platform allows a perpetrator to enhance their privileges.

The vulnerability of the Solution Manager Diagnostics Root Cause Analysis tool within the SAP Solution Manager software platform is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...

The vulnerability in Google Chrome’s developer tools for web developers allows a hacker to bypass existing security restrictions.

The vulnerability of Google Chrome’s developer tools relates to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially created web page...

CVE-2022-22541

SAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate users to access information they shouldn't see through relational or OLAP connections. The main impact is the disclosure of company data to people that shouldn't or don't need to have access...

WordPress plugin Visual Form Builder 访问控制错误漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Visual Form Builder plugin versions prior...

CVE-2022-27840

Improper access control vulnerability in SamsungRecovery prior to version 8.1.43.0 allows local attckers to delete arbitrary files as SamsungRecovery permission...

CVE-2022-28776

Improper access control vulnerability in Galaxy Store prior to version 4.5.36.4 allows attacker to install applications from Galaxy Store without user interactions...

CVE-2021-37292

An Access Control vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS 1.0.0 due to an undocumented backdoor account. A malicious user can log in using the backdor account with admin highest privileges and obtain system control...

Samsung Flow 安全漏洞

Samsung flow is an application for Samsung Samsung mobile devices, a software used to connect Samsung to Win10-based computers for a seamless, secure, and connected experience.An access control error vulnerability exists in versions prior to Samsung Flow 4.8.06.5, which stems from a lack of prope...

Samsung SMR 授权问题漏洞

Samsung SMR is a system patch package from South Korea's Samsung Samsung. It provides patches for Samsung cell phone applications. Samsung SMR Knox Manage is vulnerable to an access control error, which can be exploited by attackers to bypass Knox Manage using the function keys of the hardware...

WordPress plugin 安全漏洞

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress Salon booking system Free and Pro has an access control error vulnerability that stems from improper authorizati...

Samsung Members 安全漏洞

Samsung Members is a community platform app from Samsung South Korea, Inc. An access control error vulnerability exists in versions prior to Samsung Members 13.6.08.5, which stems from a lack of proper access validation logic. A local attacker could exploit the vulnerability to execute the call...

KevinLAB Building Energy Management System 安全漏洞

KevinLAB Building Energy Management System is a building energy management system from KevinLAB Korea.An access control error vulnerability exists in KevinLAB Building Energy Management System version 1.0.0, which stems from a network system or The product does not properly restrict access to...

zbzcms 安全漏洞

zbzcms Station Helper CMS is a content management website from China Station Helper CMS zbzcms. zbzcms version 1.0 is vulnerable to an access control error, which can be exploited by attackers to arbitrarily add administrator accounts...

CVE-2021-43498

An Access Control vulnerability exists in ATutor 2.2.4 in passwordreminder.php when the g, id, h, formpasswordhidden, and formchange HTTP POST parameters are set...

The vulnerability of the OAuth2 ACS access control service of the VMware Workspace One Access application management platform allows a perpetrator to bypass the authentication process and gain unauthorized access to the application.

The vulnerability of the OAuth2 ACS access control service of the VMware Workspace One Access application management platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process and gain...

CVE-2021-43430

An Access Control vulnerability exists in BigAntSoft BigAnt office messenger 5.6 via imwebserver, which could let a malicious user upload PHP Trojan files...

The vulnerability of Xen hypervisors, related to deficiencies in access control, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Xen hypervisors is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Owncloud ownCloud 安全漏洞

Owncloud is a personal cloud storage solution from Owncloud, a U.S. company. versions prior to Owncloud 2.20 contain an access control error vulnerability that could be exploited by attackers to access the application's internal files...

CVE-2022-20762

A vulnerability in the Common Execution Environment CEE ConfD CLI of Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure SMI software could allow an authenticated, local attacker to escalate privileges on an affected device. This vulnerability is due to insufficient access control in...

PT-2022-3802 · Swhkd · Swhkd

Name of the Vulnerable Software and Affected Versions: SWHKD version 1.1.5 Description: The issue is related to a lack of proper access control in the SWHKD implementation of the Wayland display server protocol, specifically when handling files with the -c option. This can allow an attacker to...