The vulnerability of the MobileStorageMounter component for operating systems such as tvOS, iOS, iPadOS, and watchOS allows attackers to escalate their privileges.

The vulnerability of the MobileStorageMounter component for operating systems such as tvOS, iOS, iPadOS, and watchOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the management interface of Fortinet’s FortiManager device, related to access control deficiencies, allows a perpetrator to add or remove CLI scripts from other ADOMs.

The vulnerability of the Fortinet FortiManager device management interface is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to add or remove CLI scripts from other ADOMs remotely...

CVE-2023-5240

Improper access control in PAM propagation scripts in Devolutions Server 2023.2.8.0 and ealier allows an attack with permission to manage PAM propagation scripts to retrieve passwords stored in it via a GET request...

PT-2023-31968 · Devolutions · Devolutions Server

Name of the Vulnerable Software and Affected Versions: Devolutions Server versions 2023.2.8.0 and earlier Description: The issue is related to improper access control in PAM propagation scripts, allowing an attack with permission to manage these scripts to retrieve stored passwords via a GET...

The vulnerability of the software development environment for automating and managing production processes in Omron Sysmac Studio, related to access control errors, allows a perpetrator to modify arbitrary files.

The vulnerability of Omron Sysmac Studio, a software for automating and managing manufacturing processes, is related to access control errors. Exploiting this vulnerability could allow an attacker to modify arbitrary files...

The vulnerability of the Pure Storage Purity software for managing flash drives is related to deficiencies in access control, allowing attackers to increase their privileges.

The vulnerability of the Pure Storage Purity flash storage controller software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker operating remotely to enhance their privileges...

The vulnerability of the Elasticsearch search system in the Cisco Catalyst SD-WAN Manager (formerly Cisco SD-WAN vManage) centralized network management system allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Elasticsearch search system in the Cisco Catalyst SD-WAN Manager formerly Cisco SD-WAN vManage centralized network management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protecte...

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition, related to access control deficiencies, allows a violator to bypass code owners’ approval by modifying the master branch.

The vulnerability of the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass code owners’ approvals by modifying the master branch...

The vulnerability of the displayengine module in the EMUI operating system of HarmonyOS, which allows for screen darkening

The vulnerability of the displayengine module in the EMUI operating system of HarmonyOS is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to perform a screen darkening operation remotely...

The vulnerability of the PackageKit component in macOS operating systems allows a hacker to execute arbitrary code.

The vulnerability of PackageKit for macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary code...

PT-2023-5848 · Pure Storage +1 · Flasharray +3

Name of the Vulnerable Software and Affected Versions: Pure Storage VASA affected versions not specified Description: A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation. The issue is related to...

The vulnerability of the application software interface of the Cisco DNA Center allows a hacker to read and modify data in its internal repository.

The vulnerability of the Cisco DNA Center’s application programming interface is related to errors in access management. Exploiting this vulnerability allows a malicious actor to remotely read and modify data in the internal repository by sending specially crafted API requests...

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to deficiencies in access control, allows access to confidential information.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to confidential information...

The vulnerability of the HPE Aruba Networking Virtual Intranet Access Client (VIA) VPN service, related to deficiencies in access control, allows a hacker to gain access to the interface and execute arbitrary commands with root privileges.

The vulnerability of the HPE Aruba Networking Virtual Intranet Access Client VIA VPN service is related to deficiencies in access control. Exploiting this vulnerability could allow a attacker to gain access to the underlying system and execute arbitrary commands with root privileges...

Huawei HarmonyOS Security Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in HarmonyOS, which stems from an improper privilege control issue in the MediaPlaybackController module. Affected products a...

WordPress Plugin ldap-login-for-intranet-sites Access Control Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control error...

PT-2023-6824 · Glpi +2 · Glpi +2

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.10 Description: The issue is related to inadequate access control in the GLPI system, which provides ITIL Service Desk features, licenses tracking, and software auditing. A user with write access to another user's...

The vulnerability of cloud-based software for creating and using Nextcloud storage solutions is related to improper access control, which allows attackers to gain unauthorized access to protected information.

The vulnerability of cloud-based software for creating and using Nextcloud storage solutions is related to improper access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information by sending a DAV request that reveals...

Schneider Electric IGSS Access Control Error Vulnerability

Schneider Electric IGSS is a multi-player collaborative application from Schneider Electric France. An access control error vulnerability exists in Schneider Electric IGSS Update Service v16.0.0.23211 and prior versions, which originates from a service that allows a local attacker to change the...

Movim Access Control Error Vulnerability

Movim is a syndicated blogging and chat platform that acts as a web front end for the XMPP protocol. A security vulnerability exists in Movim versions prior to 0.22Z, which stems from a lack of header validation, leading to a cross-site WebSocket hijacking issue...