3413 matches found
CVE-2024-2428
The Ultimate Video Player For WordPress WordPress plugin before 2.2.3 does not have proper capability check when updating its settings via a REST route, allowing Contributor and above users to update them. Furthermore, due to the lack of escaping in one of the settings, this also allows them to...
The vulnerability of microprogrammed software for Intel Optane PMem 100 Series, Intel Optane PMem 200 Series, and Intel Optane PMem 300 Series modules arises from lack of access control mechanisms, allowing attackers to exploit their privileges.
The vulnerability of microprogramming software for Intel Optane PMem 100 Series, Intel Optane PMem 200 Series, and Intel Optane PMem 300 Series modules is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Telnet service of the microprogramming-based router AdTran NetVanta 3120 allows a intruder to gain unauthorized access to the device.
The vulnerability of the Telnet service provided by the microprogramming-based router software AdTran NetVanta 3120 is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the device...
CVE-2023-52388
Permission control vulnerability in the clock module. Impact: Successful exploitation of this vulnerability will affect availability...
Voltronic Power ViewPower Denial of Service Vulnerability (CNVD-2025-21590)
Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. A denial of service vulnerability exists in Voltronic Power ViewPower Pro, which is caused due to a lack of authentication before allowing access to functionality. An attacker could exploit the...
The vulnerability of NETGEAR DGND4000’s built-in software allows a hacker to increase their privileges.
The vulnerability of NETGEAR DGND4000 router’s built-in software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges by using the nextfile parameter...
PT-2024-21918 · Unknown · Zlmediakit
Name of the Vulnerable Software and Affected Versions: ZLMediaKit versions 1.0 through 8.0 Description: The issue allows remote attackers to escalate privileges and obtain sensitive information due to an Incorrect Access Control vulnerability. The application system enables the http API interface...
The vulnerability of the Downloads component of the Google Chrome web browser allows a hacker to replace the user interface.
The vulnerability of the Downloads component in the Google Chrome web browser is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to replace the user interface through a specially created URL address...
The vulnerability of the debuginfo.htm component in Netgear’s integrated router software—Netgear CBR40, Netgear CBK40, and Netgear CBK43—allows attackers to disclose sensitive information that should be protected.
The vulnerability of the debuginfo.htm component in Netgear’s integrated router software, such as Netgear CBR40, Netgear CBK40, and Netgear CBK43, is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected ...
Mattermost Server 安全漏洞
Mattermost Server is an open source messaging platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost Server versions prior to 9.5.2, prior to 9.4.4, prior to 9.3.3, and prior to 8.1.11, which stems from a lack of proper access control in /api/v4/, where...
ITB-GmbH TradePro 安全漏洞
ITB-GmbH TradePro is a complete B2B e-shop from ITB-GmbH. A security vulnerability exists in ITB-GmbH TradePro version v9.5, which stems from incorrect access control. A remote attacker uses the vulnerability to receive all order confirmations from the online store via the printmail plugin...
NEC Aterm 安全漏洞
NEC Aterm is a series of wireless routers from Nippon Electric NEC. A security vulnerability exists in NEC Aterm that stems from improper access control. The following products are affected: WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX-MS, WG1200H...
PT-2024-2559 · Thales · Thales Imperva Securesphere
Name of the Vulnerable Software and Affected Versions: Thales Imperva SecureSphere WAF versions 14.7.0.40 and earlier, without the February 2024 update from the Application Delivery Controller ADC Thales Imperva SecureSphere versions prior to the February 2024 update Description: The issue is...
WordPress Plugin Testimonial Slider 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
CreateWiki 安全漏洞
CreateWiki is Miraheze's MediaWiki extension for requesting and creating wikis. A security vulnerability exists in CreateWiki that originates from exposing information to users who should not have access to that information...
CVE-2022-38057
Missing Authorization vulnerability in ThemeHunk Advance WordPress Search Plugin.This issue affects Advance WordPress Search Plugin: from n/a through 1.2.1...
CVE-2024-1564
The wp-schema-pro WordPress plugin before 2.7.16 does not validate post access allowing a contributor user to access custom fields on any post regardless of post type or status via a shortcode...
The vulnerability of the Nessus Plugin of the security and vulnerability assessment system, related to deficiencies in access control, allows attackers to write arbitrary files and increase their privileges.
The vulnerability of the Nessus Plugin of the security and vulnerability assessment system is related to deficiencies in access control for the cpLocation directory. Exploiting this vulnerability allows an attacker to write arbitrary files and enhance their privileges...
The vulnerability of the designated platform’s system management service for building cloud solutions on the OpenStack Platform allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Designate system management service for building cloud solutions on OpenStack platforms is related to deficiencies in access control when processing the /etc/designate/private and /etc/designate/private/bind1.conf files. Exploiting this vulnerability could allow an attack...
