CVE-2021-37234

Incorrect Access Control vulnerability in Modern Honey Network commit 0abf0db9cd893c6d5c727d036e1f817c02de4c7b allows remote attackers to view sensitive information via crafted PUT request to Web API...

The vulnerability of InHand Networks InRouter 302 and InRouter 615’s microprogramming software, related to deficiencies in access control, allows attackers to execute arbitrary commands.

The vulnerability of InHand Networks InRouter 302 and InRouter 615 microprogrammed software lies in the lack of access control mechanisms. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

ASUS RT-AC68U 安全漏洞

ASUS RT-AC68U is a router from Asus China. A security vulnerability exists in ASUS RT-AC68U router firmware versions prior to 3.0.0.4.386.41634, which stems from incorrect access control. An attacker can exploit the vulnerability to write arbitrary files to perform COPY and MOVE operations...

CVE-2022-48079

Monnai aaPanel host system v1.5 contains an access control issue which allows attackers to escalate privileges and execute arbitrary code via uploading a crafted PHP file to the virtual host directory of the system...

aaPanel 安全漏洞

aaPanel is an open source hosting control panel. A security vulnerability exists in aaPanel v1.5, which stems from an access control issue that can be exploited by an attacker to elevate privileges and execute arbitrary code by uploading a crafted PHP file to the system's virtual host directory...

The vulnerability of anti-virus protection tools such as Avast Antivirus, AVG Antivirus, and Avira Security for Windows operating systems is related to deficiencies in access control. This allows attackers to increase their privileges.

The vulnerability of antivirus protection tools such as Avast Antivirus, AVG Antivirus, and Avira Security for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2022-39811

Italtel NetMatch-S CI 5.2.0-20211008 has incorrect Access Control under NMSCI-WebGui/advancedsettings.jsp and NMSCIWebGui/SaveFileUploader. By not verifying permissions for access to resources, it allows an attacker to view pages that are not allowed, and modify the system configuration, bypassin...

Dell Client 安全漏洞

The Dell Client platforms are a client platform from Dell USA. A security vulnerability exists in Dell Client, which stems from an incorrect access control vulnerability in the Realtek audio driver, where a malicious, locally authenticated user may be able to elevate system privileges by waiting...

PT-2023-12286 · Instructure · Instructure Canvas Lms

Name of the Vulnerable Software and Affected Versions: Instructure Canvas LMS affected versions not specified Description: The issue concerns improper access control in Instructure Canvas LMS, where unprivileged users can access locked or unpublished files through the DocViewer based file preview...

PT-2023-2989 · Cisco +1 · Cisco Spark +1

Name of the Vulnerable Software and Affected Versions: Jenkins Cisco Spark Notifier Plugin versions 1.1.1 and earlier Description: The issue is related to a missing permission check in the Jenkins Cisco Spark Notifier Plugin, which allows attackers with Overall/Read permission to enumerate...

TP-LINK Tapo C200 安全漏洞

The TP-LINK Tapo C200 is a webcam device from China P&L TP-LINK. A security vulnerability exists in TP-LINK Tapo C200 version V1, which stems from an access control issue that allows a physically proximate attacker to gain root access by connecting to the UART pin, interrupting the boot process,...

The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.

The vulnerability of the Windows operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the command-line interface (CLI) of the microprogramming software for Cisco TelePresence Collaboration Endpoint conference call control devices and the Cisco RoomOS operating system allows a hacker to re-write any files at will.

The vulnerability of the command-line interface CLI of the microprogramming software for Cisco TelePresence Collaboration Endpoint conference call controllers and the Cisco RoomOS operating system is related to access control deficiencies. Exploiting this vulnerability could allow a attacker to...

PT-2023-13988 · Tp Link · Tp-Link Tapo C200

Name of the Vulnerable Software and Affected Versions: TP-Link Tapo C200 version V1 Description: An access control issue allows physically proximate attackers to obtain root access by connecting to the UART pins, interrupting the boot process, and setting an init=/bin/sh value. Recommendations: F...

ONLYOFFICE 授权问题漏洞

Ascensio System ONLYOFFICE is an office software from Ascensio System, Latvia. A security vulnerability exists in all versions of ONLYOFFICE prior to 2021-11-08 that stems from being affected by incorrect access control. An attacker can use the default JWT signature key to authenticate to the Web...

The vulnerability of the Bind Filter driver for Windows operating systems allows attackers to bypass security restrictions and gain increased privileges.

The vulnerability of the Bind Filter driver for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass security restrictions and enhance their privileges...

MISP 安全漏洞

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP version 2.4.167 that stems from incorrect access...

The vulnerability of FortiWLC wireless access controller software, related to deficiencies in access control, allows attackers to execute arbitrary commands and increase their privileges.

The vulnerability of the microprogrammed software of FortiWLC wireless access controllers is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely and elevate their privileges to the root level, bypassing the...

The vulnerability of the print spooler daemon on Microsoft Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows Print Spooler in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2022-2155

A vulnerability exists in the affected versions of Lumada APM’s User Asset Group feature due to a flaw in access control mechanism implementation on the “Limited Engineer” role, granting it access to the embedded Power BI reports feature. An attacker that manages to exploit the vulnerability on a...