The vulnerability of the FFmpeg multimedia library, related to deficiencies in access control, allows attackers to exploit their privileges.

The vulnerability of the FFmpeg multimedia library is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Discourse 访问控制错误漏洞

Discourse is an open source community discussion platform. The platform includes features such as community, email and chat rooms. Discourse suffers from a security vulnerability that can be exploited by an attacker to access a secure upload URL associated with a post...

CVE-2023-7223

A vulnerability classified as problematic has been found in Totolink T6 4.1.9cu.5241B20210923. This affects an unknown part of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input showSyslog leads to improper access controls. It is possible to initiate the attac...

CVE-2023-50341

HCL DRYiCE MyXalytics is impacted by Improper Access Control Obsolete web pages vulnerability. Discovery of outdated and accessible web pages, reflects a "Missing Access Control" vulnerability, which could lead to inadvertent exposure of sensitive information and/or exposing a vulnerable endpoint...

PT-2023-23279 · Unknown · Sesami Cash Point & Transport Optimizer

Name of the Vulnerable Software and Affected Versions: Sesami Cash Point & Transport Optimizer CPTO version 6.3.8.6 Description: An issue was discovered that allows remote attackers to obtain sensitive information and bypass profile restriction via improper access control in the Reader system...

PT-2023-25016 · Tp Link · Tp-Link Tapo

Name of the Vulnerable Software and Affected Versions: TP-Link Tapo versions prior to 3.1.315 Description: The issue is related to incorrect access control, allowing attackers to access user credentials in plaintext. Recommendations: For versions prior to 3.1.315, update to version 3.1.315 or lat...

The vulnerability of the dropbearpwd component in the TP-Link TL-WR841N router’s microprogramming software allows a intruder to gain unauthorized access to protected information.

The vulnerability of the dropbearpwd component in the TP-Link TL-WR841N router’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2023-32841 · Kylinsoft · Hedron-Domain-Hook

Name of the Vulnerable Software and Affected Versions: KylinSoft hedron-domain-hook versions up to 3.8.0.12-0k0.5 Description: A critical issue affects the init kcm function of the DBus Handler component, leading to improper access controls. The manipulation requires local attacking. The exploit...

The vulnerability of the missingobjects.php script in the Nagios XI monitoring tool allows a hacker to modify the CCM settings and clear the “Missing Objects” list.

The vulnerability of the missingobjects.php script in the Nagios XI monitoring tool is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to modify the CCM settings and remove items from the “Missing Objects” list...

The vulnerability of the application software interface for XML-based operating systems like PAN-OS allows a perpetrator to trigger a service failure.

The vulnerability of the XML application programming interface of the PAN-OS operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service failures by resetting the current valid API keys...

GitLab Security Breach

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. A security vulnerability exists in GitLab that stems from allowing project...

CVE-2023-50918

app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs...

The vulnerability of the IBM DB2 database management system, related to deficiencies in access control, allows a perpetrator to execute arbitrary commands.

The vulnerability of the IBM DB2 database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...

The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.

The vulnerability of the Windows operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

UBUNTU-CVE-2023-49938

An issue was discovered in SchedMD Slurm 22.05.x and 23.02.x. There is Incorrect Access Control: an attacker can modified their extended group list that is used with the sbcast subsystem, and open files with an unauthorized set of extended groups. The fixed versions are 22.05.11 and 23.02.7...

Dell PowerProtect Data Domain 安全漏洞

Dell PowerProtect Data Domain Dell PowerProtect DD is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell, USA. An access control error vulnerability exists in Dell PowerProtect Data Domain, which stems from the inclusion of improper access controls. A...

Silverpeas Security Vulnerabilities

Silverpeas is an open source business collaboration platform. The platform includes applications for project management, blogs, forums, and document management. A security vulnerability exists in Silverpeas Core version 6.3.1, which stems from the vulnerability of the Porlet Deployer to incorrect...

PT-2023-30414

Name of the Vulnerable Software and Affected Versions Silverpeas Core version 6.3.1 Description The issue is related to Incorrect Access Control via the "Porlet Deployer" which allows administrators to deploy .WAR portlets. Recommendations For Silverpeas Core version 6.3.1, consider restricting...

PT-2023-32764 · Thecosy · Icecms

Name of the Vulnerable Software and Affected Versions: Thecosy IceCMS versions up to 2.0.1 Description: A vulnerability has been found in the User Data Handler component, leading to improper access controls. The attack may be initiated remotely. This issue affects some unknown processing of the...

The vulnerability of software for internal threat modeling in the AXIS Security Development Model of the operating system AXIS OS, due to deficiencies in access control, allows attackers to circumvent existing security restrictions.

The software vulnerability for internal threat modeling is a flaw in Axis Security’s operating system development model. Exploiting this vulnerability allows a remote attacker to bypass existing security restrictions...