3413 matches found
VulnCheck KEV: CVE-2024-54763
An access control issue in the component /login/hostinfo.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensitive information without authentication...
Flock Safety Gunshot Detection 安全漏洞
Flock Safety Gunshot Detection is a gunshot detection system from Flock Safety USA. A security vulnerability exists in Flock Safety Gunshot Detection versions prior to 1.3 that stems from improper access control of the chip debug interface...
WordPress plugin iCount Payment Gateway 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
Drupal Enterprise MFA - TFA for Drupal module < 4.8.0,5.2.0,5.0,5.1 - Unauthenticated Broken Access Control vulnerability
Drupal Enterprise MFA - TFA for Drupal module 4.8.0,5.2.0,5.0,5.1 - Unauthenticated Broken Access Control vulnerability discovered by Conrad Lara cmlara in WordPress Module Enterprise MFA - TFA for Drupal versions 4.8.0,5.2.0,5.0,5.1...
The vulnerability of the SIGLENT SDS1000X-E oscilloscope is related to deficiencies in access control, allowing an intruder to execute arbitrary commands and trigger a service failure.
The vulnerability of the SIGLENT SDS1000X-E oscilloscope is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder to execute arbitrary commands and cause service failures...
The vulnerability of the SIGLENT SDS1000X-E oscilloscope is related to deficiencies in access control, allowing an intruder to execute arbitrary commands and trigger a service failure.
The vulnerability of the SIGLENT SDS1000X-E oscilloscope is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder to execute arbitrary commands and cause service failures...
NOYAFA LF9 Pro 安全漏洞
NOYAFA LF9 Pro is a car recorder from NOYAFA, Hong Kong, China. A security vulnerability exists in NOYAFA LF9 Pro 20250611 and prior versions, which stems from improper access control...
CVE-2025-1055
A vulnerability in the K7RKScan.sys driver, part of the K7 Security Anti-Malware suite, allows a local low-privilege user to send crafted IOCTL requests to terminate a wide range of processes running with administrative or system-level privileges, with the exception of those inherently protected ...
CVE-2025-30675
In Apache CloudStack, a flaw in access control affects the listTemplates and listIsos APIs. A malicious Domain Admin or Resource Admin can exploit this issue by intentionally specifying the 'domainid' parameter along with the 'filter=self' or 'filter=selfexecutable' values. This allows the attack...
CVE-2025-30675: Exposure of Sensitive Information to an Unauthorized Actor
In Apache CloudStack, a flaw in access control affects the listTemplates and listIsos APIs. A malicious Domain Admin or Resource Admin can exploit this issue by intentionally specifying the 'domainid' parameter along with the 'filter=self' or 'filter=selfexecutable' values. This allows the attack...
CVE-2025-1055
CVE-2025-1055 affects the K7RKScan.sys driver in the K7 Security Anti-Malware suite. A missing access control in the driver’s IOCTL handler lets a local, low-privilege user craft IOCTLs to terminate a wide range of processes running with admin or system privileges (excluding OS-protected ones). C...
CVE-2025-1055 K7 Security Anti-Malware: IOCTL in K7RKScan.sys Allows Arbitrary Termination of High-Privilege and System Processes by a Low-Privilege User
A vulnerability in the K7RKScan.sys driver, part of the K7 Security Anti-Malware suite, allows a local low-privilege user to send crafted IOCTL requests to terminate a wide range of processes running with administrative or system-level privileges, with the exception of those inherently protected ...
DM Corporative CMS 安全漏洞
Dmacroweb DM Corporative CMS is a content management system from the Spanish company Dmacroweb. Dmacroweb DM Corporative CMS suffers from an insecure direct object reference vulnerability, which originates from the parameter option in the file /administer/select node/data.asp that fails to proper...
PT-2025-25168 · Apache · Apache Cloudstack
Name of the Vulnerable Software and Affected Versions: Apache CloudStack versions prior to 4.19.3.0 Apache CloudStack versions prior to 4.20.1.0 Description: A flaw in access control affects the "listTemplates" and "listIsos" APIs. A malicious Domain Admin or Resource Admin can exploit this issue...
WordPress plugin Fitrush 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
Lablup BackendAI 访问控制错误漏洞
Lablup BackendAI is a machine learning platform from South Korean company Lablup. Lablup BackendAI suffers from an access control error vulnerability that stems from a lack of authentication in the registration function, which could allow an arbitrary user to create an account and access private...
WordPress plugin AI Mortgage Calculator 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
PT-2025-23436
Name of the Vulnerable Software and Affected Versions Mist Community Edition versions up to 4.7.1 Description A critical issue has been found, affecting the create token function of the API Token Handler component. This leads to improper access controls, allowing remote attacks. The issue has bee...
CVE-2025-3611
Mattermost Server: CVE-2025-3611 affects versions 10.7.x <=10.7.0, 10.5.x <=10.5.3, and 9.11.x
CVE-2025-48334
Missing Authorization vulnerability in BinaryCarpenter Woo Slider Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woo Slider Pro: from n/a through 1.12. Affected action "wooslideprodeleteslider"...