The vulnerability of D-Link DSL-2750U and DSL-2730U router microprogramming software, related to access control deficiencies, allows attackers to circumvent access restriction measures.

The vulnerability of D-Link DSL-2750U and DSL-2730U router microprogramming software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to circumvent access restriction measures from a remote location...

IBM Sterling Partner Engagement Manager 访问控制错误漏洞

IBM Sterling Partner Engagement Manager is an automated management tool from International Business Machines IBM. An authentication error vulnerability exists in IBM Sterling Partner Engagement Manager versions 6.1.2, 6.2.0, and 6.2.2, which stems from the program improperly authenticating a remo...

carRental Security Vulnerability

carRental is a car rental software from carRental, Inc. A security vulnerability exists in version 1.0 of carRental that stems from the system's susceptibility to incorrect access control arbitrary file reads on the back-end system...

CVE-2023-46033

D-Link Non-US DSL-2750U N300 ADSL2+ and Non-US DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control. The UART/Serial interface on the PCB, provides log output and a root terminal without proper access control...

The vulnerability of the Apache Oozie data processing automation system, Azure HDInsight, allows attackers to escalate their privileges.

The vulnerability of the Apache Oozie data processing automation system, used in Azure HDInsight analytics services, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

The vulnerability of the Win32k.sys component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability in the implementation of the IKE protocol for Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the IKE protocol implementation in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the MobileStorageMounter component for operating systems such as tvOS, iOS, iPadOS, and watchOS allows attackers to escalate their privileges.

The vulnerability of the MobileStorageMounter component for operating systems such as tvOS, iOS, iPadOS, and watchOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the management interface of Fortinet’s FortiManager device, related to access control deficiencies, allows a perpetrator to add or remove CLI scripts from other ADOMs.

The vulnerability of the Fortinet FortiManager device management interface is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to add or remove CLI scripts from other ADOMs remotely...

CVE-2023-5240

Improper access control in PAM propagation scripts in Devolutions Server 2023.2.8.0 and ealier allows an attack with permission to manage PAM propagation scripts to retrieve passwords stored in it via a GET request...

PT-2023-31968 · Devolutions · Devolutions Server

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions 2023.2.8.0 and earlier Description: The issue is related to improper access control in PAM propagation scripts, allowing an attack with permission to manage these scripts to retrieve stored passwords via a GET...

The vulnerability of the Pure Storage Purity software for managing flash drives is related to deficiencies in access control, allowing attackers to increase their privileges.

The vulnerability of the Pure Storage Purity flash storage controller software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker operating remotely to enhance their privileges...

The vulnerability of the software development environment for automating and managing production processes in Omron Sysmac Studio, related to access control errors, allows a perpetrator to modify arbitrary files.

The vulnerability of Omron Sysmac Studio, a software for automating and managing manufacturing processes, is related to access control errors. Exploiting this vulnerability could allow an attacker to modify arbitrary files...

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition, related to access control deficiencies, allows a violator to bypass code owners’ approval by modifying the master branch.

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass code owners’ approvals by modifying the master branch...

The vulnerability of the Elasticsearch search system in the Cisco Catalyst SD-WAN Manager (formerly Cisco SD-WAN vManage) centralized network management system allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Elasticsearch search system in the Cisco Catalyst SD-WAN Manager formerly Cisco SD-WAN vManage centralized network management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protecte...

The vulnerability of the PackageKit component in macOS operating systems allows a hacker to execute arbitrary code.

The vulnerability of PackageKit for macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the displayengine module in the EMUI operating system of HarmonyOS, which allows for screen darkening

The vulnerability of the displayengine module in the EMUI operating system of HarmonyOS is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to perform a screen darkening operation remotely...

PT-2023-5848 · Pure Storage +1 · Flasharray +3

Name of the Vulnerable Software and Affected Versions: Pure Storage VASA affected versions not specified Description: A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation. The issue is related to...

The vulnerability of the application software interface of the Cisco DNA Center allows a hacker to read and modify data in its internal repository.

The vulnerability of the Cisco DNA Center’s application programming interface is related to errors in access management. Exploiting this vulnerability allows a malicious actor to remotely read and modify data in the internal repository by sending specially crafted API requests...

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to deficiencies in access control, allows access to confidential information.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to confidential information...