CVE-2023-49978

Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative pages and execute actions reserved for administrators...

The vulnerability of software for adjusting Intel XTU performance, related to deficiencies in access control, allows attackers to enhance their privileges.

The vulnerability of software for adjusting Intel XTU performance is related to lack of access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2023-6725

An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information...

OpenStack Designate Security Vulnerability

OpenStack is a cloud platform management program of the National Aeronautics and Space Administration NASA in the U.S. Designate is one of the components used to provide DNSaaS DNS-as-a-Service services for OpenStack. A security vulnerability exists in OpenStack Designate that stems from an acces...

CVE-2023-6725: Insufficient Granularity of Access Control

An access-control flaw was found in the OpenStack Designate component where private configuration information including access keys to BIND were improperly made world readable. A malicious attacker with access to any container could exploit this flaw to access sensitive information...

The vulnerability of Windows operating system installers allows a hacker to increase their privileges.

The vulnerability of Windows operating system installers is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the CLI interface of ArubaOS operating systems allows a hacker to gain access to delete any files they desire and to cause service interruptions.

The vulnerability of the CLI interface of ArubaOS operating systems is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access and delete any files they desire, as well as cause service failures...

Delinea PAM Secret Server 安全漏洞

Delinea PAM Secret Server is a key service manager from Delinea. An Access Control Error vulnerability exists in Delinea PAM Secret Server version 11.4, which can be exploited by an attacker to view system reports and modify customized reports via the Reports feature in the Web UI when Unrestrict...

The vulnerability of the Windows operating system’s kernel allows attackers to circumvent security restrictions and gain increased privileges.

The vulnerability of Windows operating system kernels is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass security restrictions and enhance their privileges...

CVE-2024-28215

nGrinder before 3.5.9 allows an attacker to create or update webhook configuration due to lack of access control, which could be the cause of information disclosure and limited Server-Side Request Forgery...

BIT-GITLAB-2021-39911

An improper access control flaw in all versions of GitLab CE/EE starting from 13.9 before 14.2.6, all versions starting from 14.3 before 14.3.4, and all versions starting from 14.4 before 14.4.1 exposes private email address of Issue and Merge Requests assignee to Webhook data consumers...

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition, related to access control deficiencies, allows a hacker to disclose protected information.

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

VulnCheck KEV: CVE-2024-25735

An access control credential disclosure is present in WyreStorm Apollo VX20...

CVE-2024-25063

Due to insufficient server-side validation, a successful exploit of this vulnerability could allow an attacker to gain access to certain URLs that the attacker should not have access to...

CVE-2023-49543

Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute administrative functions without authenticating...

Commend WS203VICM Access Control Error Vulnerability

The Commend WS203VICM is a vandal resistant station with camera and call button from Commend. An access control error vulnerability exists in Commend WS203VICM version 1.7 and prior versions, which originated to allow remote attackers to bypass the access control of the Commend WS203VICM by...

Field Logic DataCube3 Security Vulnerability

Field Logic DataCube4 is a small measurement terminal system from Field Logic. A security vulnerability exists in Field Logic DataCube3 version 1.0 that stems from incorrect directory access restrictions and is susceptible to incorrect access control...

The vulnerability of the Azure Site Recovery disaster recovery tool, related to deficiencies in access control, allows attackers to bypass existing security restrictions and enhance their privileges.

The vulnerability of the Azure Site Recovery recovery mechanism is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to bypass existing security restrictions and enhance their privileges...

The vulnerability of the Live Data server software used for creating Cisco Unified Intelligence Center reports allows a perpetrator to read and modify data stored in the internal service storage.

The vulnerability of the Live Data server of the Cisco Unified Intelligence Center software relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker to read and modify data in the internal service storage using a specially created CLI configuration query...

The vulnerability of the Microsoft Outlook email client, related to deficiencies in access control, allows attackers to circumvent existing security restrictions and enhance their privileges.

The vulnerability of the Microsoft Outlook email client is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass existing security restrictions and enhance their privileges...