CVE-2024-25063

Due to insufficient server-side validation, a successful exploit of this vulnerability could allow an attacker to gain access to certain URLs that the attacker should not have access to...

CVE-2023-49543

Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute administrative functions without authenticating...

Commend WS203VICM Access Control Error Vulnerability

The Commend WS203VICM is a vandal resistant station with camera and call button from Commend. An access control error vulnerability exists in Commend WS203VICM version 1.7 and prior versions, which originated to allow remote attackers to bypass the access control of the Commend WS203VICM by...

Field Logic DataCube3 Security Vulnerability

Field Logic DataCube4 is a small measurement terminal system from Field Logic. A security vulnerability exists in Field Logic DataCube3 version 1.0 that stems from incorrect directory access restrictions and is susceptible to incorrect access control...

The vulnerability of the Azure Site Recovery disaster recovery tool, related to deficiencies in access control, allows attackers to bypass existing security restrictions and enhance their privileges.

The vulnerability of the Azure Site Recovery recovery mechanism is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to bypass existing security restrictions and enhance their privileges...

The vulnerability of the Microsoft Outlook email client, related to deficiencies in access control, allows attackers to circumvent existing security restrictions and enhance their privileges.

The vulnerability of the Microsoft Outlook email client is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass existing security restrictions and enhance their privileges...

The vulnerability of the Live Data server software used for creating Cisco Unified Intelligence Center reports allows a perpetrator to read and modify data stored in the internal service storage.

The vulnerability of the Live Data server of the Cisco Unified Intelligence Center software relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker to read and modify data in the internal service storage using a specially created CLI configuration query...

The vulnerability of the Scalefusion MDM Agent, a software tool for managing endpoints, stems from deficiencies in access control. This allows attackers to open arbitrary websites.

The vulnerability of the Scalefusion MDM Agent software management tool is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to open arbitrary websites...

PT-2024-1972 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 12.0 through 16.7.6 GitLab EE versions 16.8 through 16.8.2 GitLab EE versions 16.9 through 16.9.0 Description: The issue discovered in GitLab EE is related to insufficient access control, allowing for the bypassing of 'grou...

Intel Thunderbolt DCH drivers security vulnerability

Intel Thunderbolt DCH drivers is a driver for Windows from Intel Corporation USA. A security vulnerability exists in previous versions of Intel Thunderbolt DCH drivers 88, which stems from an improper access control issue that could lead to privilege escalation via local access by an authenticate...

The vulnerability of the /cgi-bin/cstecgi.cgi file, a microprogramming system for the TOTOLink T6 mesh system, allows a perpetrator to increase their privileges.

The vulnerability of the /cgi-bin/cstecgi.cgi file of the mesh-system software TOTOLink T6 is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

The vulnerability of the Printing component in the macOS operating system, which allows a hacker to alter printer settings.

The vulnerability of the Printing component in the macOS operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to alter printer settings...

The vulnerability of the Security component in the operating systems macOS, iOS, and iPadOS allows a perpetrator to gain unauthorized access to users’ fingerprint records.

The vulnerability of the Security component in operating systems macOS, iOS, and iPadOS is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to users’ fingerprint records...

Reprise Software Reprise License Manager Security Vulnerability

Reprise Software Reprise License Manager is a software licensing toolkit from Reprise Software, Inc. that provides local and cloud-based license management, license enforcement and product activation solutions for publishers of commercial software applications. A security vulnerability exists in...

CVE-2023-38263

IBM SOAR QRadar Plugin App 1.0 through 5.0.3 could allow an authenticated user to perform unauthorized actions due to improper access controls. IBM X-Force ID: 260577...

The vulnerability of the Jenkins GitLab Branch Source Plugin, related to access control deficiencies, allows attackers to configure and jointly use arbitrary projects.

The vulnerability of the Jenkins GitLab Branch Source Plugin is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to configure and jointly use arbitrary projects...

The vulnerability in the set of tools for web development, DevTools, in Microsoft Edge and Google Chrome browsers allows a hacker to expose protected information.

The vulnerability of the DevTools suite for web development in Microsoft Edge and Google Chrome is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

Mitsubishi Electric Various Products Access Control Error Vulnerability

Mitsubishi Electric FR Configurator2 and others are products of Mitsubishi Electric, Japan.Mitsubishi Electric FR Configurator2 is an inverter drive configuration application.Mitsubishi Electric GT Designer3 is a set of human-machine interface programming software. Mitsubishi Electric GT Designer...

The vulnerability affects the implementation of the HSTS (HTTP Strict Transport Security) mechanism in Mozilla Firefox, Firefox ESR, and the Thunderbird email client, allowing attackers to circumvent these security measures.

The vulnerability of the HSTS HTTP Strict Transport Security mechanism implementation in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to bypass security measures remotely...

The vulnerability of cloud software for creating and using Nextcloud Server’s data storage solution lies in the improper assignment of permissions to files, allowing a hacker to delete any files they desire.

The vulnerability of cloud-based software for creating and using Nextcloud Server storage solutions is related to the improper assignment of permissions for files. Exploiting this vulnerability could allow a malicious actor to delete any files they desire...