The vulnerability of the Scalefusion MDM Agent, a software tool for managing endpoints, stems from deficiencies in access control. This allows attackers to open arbitrary websites.

The vulnerability of the Scalefusion MDM Agent software management tool is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to open arbitrary websites...

PT-2024-1972 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 12.0 through 16.7.6 GitLab EE versions 16.8 through 16.8.2 GitLab EE versions 16.9 through 16.9.0 Description: The issue discovered in GitLab EE is related to insufficient access control, allowing for the bypassing of 'grou...

Intel Thunderbolt DCH drivers security vulnerability

Intel Thunderbolt DCH drivers is a driver for Windows from Intel Corporation USA. A security vulnerability exists in previous versions of Intel Thunderbolt DCH drivers 88, which stems from an improper access control issue that could lead to privilege escalation via local access by an authenticate...

The vulnerability of the /cgi-bin/cstecgi.cgi file, a microprogramming system for the TOTOLink T6 mesh system, allows a perpetrator to increase their privileges.

The vulnerability of the /cgi-bin/cstecgi.cgi file of the mesh-system software TOTOLink T6 is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

The vulnerability of the Printing component in the macOS operating system, which allows a hacker to alter printer settings.

The vulnerability of the Printing component in the macOS operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to alter printer settings...

The vulnerability of the Security component in the operating systems macOS, iOS, and iPadOS allows a perpetrator to gain unauthorized access to users’ fingerprint records.

The vulnerability of the Security component in operating systems macOS, iOS, and iPadOS is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to users’ fingerprint records...

Reprise Software Reprise License Manager Security Vulnerability

Reprise Software Reprise License Manager is a software licensing toolkit from Reprise Software, Inc. that provides local and cloud-based license management, license enforcement and product activation solutions for publishers of commercial software applications. A security vulnerability exists in...

CVE-2023-38263

IBM SOAR QRadar Plugin App 1.0 through 5.0.3 could allow an authenticated user to perform unauthorized actions due to improper access controls. IBM X-Force ID: 260577...

The vulnerability of the Jenkins GitLab Branch Source Plugin, related to access control deficiencies, allows attackers to configure and jointly use arbitrary projects.

The vulnerability of the Jenkins GitLab Branch Source Plugin is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to configure and jointly use arbitrary projects...

The vulnerability in the set of tools for web development, DevTools, in Microsoft Edge and Google Chrome browsers allows a hacker to expose protected information.

The vulnerability of the DevTools suite for web development in Microsoft Edge and Google Chrome is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

Mitsubishi Electric Various Products Access Control Error Vulnerability

Mitsubishi Electric FR Configurator2 and others are products of Mitsubishi Electric, Japan.Mitsubishi Electric FR Configurator2 is an inverter drive configuration application.Mitsubishi Electric GT Designer3 is a set of human-machine interface programming software. Mitsubishi Electric GT Designer...

The vulnerability affects the implementation of the HSTS (HTTP Strict Transport Security) mechanism in Mozilla Firefox, Firefox ESR, and the Thunderbird email client, allowing attackers to circumvent these security measures.

The vulnerability of the HSTS HTTP Strict Transport Security mechanism implementation in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to bypass security measures remotely...

The vulnerability of cloud software for creating and using Nextcloud Server’s data storage solution lies in the improper assignment of permissions to files, allowing a hacker to delete any files they desire.

The vulnerability of cloud-based software for creating and using Nextcloud Server storage solutions is related to the improper assignment of permissions for files. Exploiting this vulnerability could allow a malicious actor to delete any files they desire...

PT-2024-5555 · Fortinet · Fortiextender

Name of the Vulnerable Software and Affected Versions: Fortinet FortiExtender versions 4.1.1 through 4.1.9 Fortinet FortiExtender versions 4.2.0 through 4.2.6 Fortinet FortiExtender version 5.3.2 Fortinet FortiExtender versions 7.0.0 through 7.0.4 Fortinet FortiExtender versions 7.2.0 through 7.2...

The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows attackers to disclose sensitive information.

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to deficiencies in the access control mechanism. Exploiting this vulnerability allows a malicious actor to disclose protected information remotely...

CVE-2024-0642

Inadequate access control in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to access the application as an administrator user through the application endpoint, due to lack of proper credential management...

The vulnerability of the Fortinet FortiPortal security analysis and management tool, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of the Fortinet FortiPortal security analysis and management tool is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges by sending specially crafted HTTP requests remotely...

VMware Aria Automation and VMware Cloud Foundation Security Vulnerabilities

VMware Cloud Foundation and VMware Aria Automation are both products of VMware, Inc. VMware Cloud Foundation is an all-in-one hybrid cloud platform. VMware Cloud Foundation is an all-in-one hybrid cloud platform that includes operations automation, infrastructure auto-configuration, and integrate...

CVE-2023-51071

An access control issue in QStar Archive Solutions Release RELEASE3-0 Build 7 Patch 0 allows unauthenticated attackers to arbitrarily disable the SMB service on a victim's Qstar instance by executing a specific command in a link...

QStar Archive Solutions Security Breach

QStar Archive Solutions is QStar's range of storage technologies for managing disk arrays, object storage, tape libraries, CD-ROM libraries, WORM, and clouds private and hybrid. A security vulnerability exists in QStar Archive Solutions RELEASE3-0 Build 7 release that stems from an access control...