The vulnerability of the MX-ONE Provisioning Manager tool, a corporate communication platform from Mitel MiVoice, allows a perpetrator to bypass authentication procedures and compromise the integrity of the protected information.

The vulnerability of the MX-ONE Provisioning Manager PM tool, a component of the corporate communication platform Mitel MiVoice MX-ONE, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to bypass authentication procedures and compromise the...

Microsoft Visual Studio Code 访问控制错误漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A remote code execution vulnerability exists in the Microsoft Visual Studio Code extension for Arduino, which can be exploited by an attacker to execute arbitrary code on a system...

The vulnerability of the Power Automate for Desktop automation platform on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Power Automate for Desktop automation platform for Windows operating systems is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PT-2024-31823 · Bandisoft · Bandiview

Name of the Vulnerable Software and Affected Versions: Bandisoft BandiView version 7.05 Description: The issue is related to incorrect access control via the sub 0x232bd8 function, resulting in a denial of service DOS. Recommendations: For Bandisoft BandiView version 7.05, consider disabling the...

The vulnerability of the QTS operating system and QNAP network devices, related to access control deficiencies, allows a hacker to execute arbitrary code within the system.

The vulnerability of the QTS operating system and QNAP network devices is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the system remotely...

CVE-2024-46097

TestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section. When a new TestPlan is created, an ID with an incremental value is automatically generated. Using the edit function you can change the tplanid parameter to another ID. The application does not carry out a...

CVE-2024-46610

An access control issue in IceCMS v3.4.7 and before allows attackers to arbitrarily modify users' information, including username and password, via a crafted POST request sent to the endpoint /User/ChangeUser/s in the ChangeUser function in UserController.java...

Multiple NTT EAST Home GateWay/Hikari Denwa routers fail to restrict access permissions

Overview Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION fail to restrict access permissions CWE-451. Keishi Awata of logicalmixed reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

CVE-2024-46610

An access control issue in IceCMS v3.4.7 and before allows attackers to arbitrarily modify users' information, including username and password, via a crafted POST request sent to the endpoint /User/ChangeUser/s in the ChangeUser function in UserController.java...

ROS-20240924-01

The vulnerability in Firefox and Firefox ESR browsers and Thunderbird email client is related to flaws in the in access control. Exploitation of the vulnerability could allow an attacker acting remotely, redirect a user to an arbitrary URL using a specially crafted extension The vulnerability in...

The vulnerability of Google Chrome’s Compositing component allows attackers to manipulate the user’s security interface without being detected.

The vulnerability of Google Chrome’s Compositing component is related to improper access control. Exploiting this vulnerability could allow attackers to forge the user’s security interface using a specially created HTML page...

VulnCheck KEV: CVE-2021-32172

Maian Cart v3.8 contains a preauthorization remote code execution RCE exploit via a broken access control issue in the Elfinder plugin...

The vulnerability in the user interfaces of Google Chrome and Microsoft Edge browsers allows attackers to disclose protected information.

The vulnerability of Google Chrome and Microsoft Edge browser user interfaces is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to disclose protected information through a specially crafted HTML page...

PT-2024-6469

Name of the Vulnerable Software and Affected Versions vCenter Server affected versions not specified Description vCenter Server contains a privilege escalation issue. A malicious actor with network access may escalate privileges to root by sending a specially crafted network packet...

The vulnerability of the LiteSpeed Cache plugin for WordPress (LSCWP), a content management system for WordPress websites, allows a hacker to gain unauthorized access to the debug log file “/wp-content/debug.log”.

The vulnerability of the LiteSpeed Cache plugin for WordPress LSCWP, a content management system for WordPress websites, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the debug log file...

Huawei HarmonyOS and EMUI Privilege Control Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. A privilege control vulnerability exists in Huawei...

Relyum RELY-PCIe 安全漏洞

Relyum RELY-PCIe is a smart pluggable board from Relyum Spain. A security vulnerability exists in Relyum RELY-PCIe versions v22.2.1 through v23.1.0, which stems from incorrect access control contained in the mService function of phpinf.php...

PT-2024-41606

Уязвимость функции handle misaligned load модуля arch/riscv/kernel/traps misaligned.c подсистемы управления модулями платформы с архитектурой RISC-V ядра операционной системы Linux связана с недостатками контроля доступа. Эксплуатация уязвимости может позволить нарушителю получить доступ к...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to deficiencies in access control. These flaws allow attackers to bypass security restrictions and compromise the confidentiality and integrity of protected information.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and affect the confidentiality and integrity of protected information by creatin...

PT-2024-31239 · Unknown · Shenzhou News Union Enterprise Management System

Name of the Vulnerable Software and Affected Versions: Shenzhou News Union Enterprise Management System versions 5.0 through 18.8 Description: The issue is related to incorrect access control in the component /servlet/SnoopServlet, allowing attackers to access sensitive information regarding the...