3223 matches found
The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges
The vulnerability of the Windows operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
WBCE CMS 安全漏洞
WBCE CMS is an open source content management system CMS based on PHP and MySQL. WBCE CMS suffers from an Access Control Error vulnerability that stems from the increaseattempts function in the wbce/framework/class.login.php file in its Header Handler component not appropriately restricting too...
The vulnerability of the web interface of the security and assessment system, as well as the Nessus tool for assessing vulnerabilities, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the web interface of security systems and the Nessus vulnerability assessment tool is related to deficiencies in access control. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information through embedded debuggi...
The vulnerability of the microprogramming BIOS in Intel NUC Kit embedded software allows a perpetrator to enhance their privileges.
The vulnerability of the microprogramming BIOS in Intel NUC Kit embedded software is related to access control errors. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2022-39887
Improper access control vulnerability in clearAllGlobalProxy in MiscPolicy prior to SMR Nov-2022 Release 1 allows local attacker to configure EDM setting...
The vulnerability of the Microsoft Security Support Provider Interface (SSPI) implementation in the Windows operating system allows a perpetrator to disclose sensitive information.
The vulnerability of the Microsoft Security Support Provider Interface SSPI implementation in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information through a...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices SMR Nov-2022 Release 1, which stems from an incorrect access control vulnerability in clearAllGlobalProxy in...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices SMR Nov-2022 Release 1, which stems from an incorrect access control vulnerability in IImsService, which can be...
Vulnerability of the GDrv driver – a program for configuring Gigabyte Aorus Engine graphics cards. The GIGABYTE App Center, a program for managing applications. The Extreme Gaming Engine, a program for monitoring the status of graphics cards. It allows a hacker to execute arbitrary code.
The vulnerability of the GDrv driver, a program for configuring Gigabyte Aorus Engine graphics cards, the GIGABYTE App Center, and the Extreme Gaming Engine status monitoring program is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to execute arbitra...
CVE-2022-38582
Incorrect access control in the anti-virus driver wsdkd.sys of Watchdog Antivirus v1.4.158 allows attackers to write arbitrary files...
Watchdog Antivirus 安全漏洞
Watchdog Antivirus is an anti-malware program from Watchdog. Designed to neutralize viruses, trojans, rootkits, worms, spyware and adware. A security vulnerability exists in Watchdog Antivirus version v1.4.158, which stems from incorrect access control in the anti-virus driver wsdkd.sys, allowing...
CVE-2022-38168
Broken Access Control in User Authentication in Avaya Scopia Pathfinder 10 and 20 PTS version 8.3.7.0.4 allows remote unauthenticated attackers to bypass the login page, access sensitive information, and reset user passwords via URL modification...
IBM InfoSphere Information Server 安全漏洞
IBM InfoSphere Information Server is a data integration platform from IBM Corporation. IBM InfoSphere Information Server version 11.7 has an access control error vulnerability. An authenticated attacker could use the vulnerability to access information that only a more privileged user has access ...
Fortinet FortiSOAR 访问控制错误漏洞
Fortinet FortiSOAR is a security orchestration, automation and response SOAR solution from Fortinet, Inc. An access control error vulnerability exists in Fortinet FortiSOAR, stemming from a lack of authentication, which could be exploited by an attacker to compromise information by logging into t...
SICK SIM Series 访问控制错误漏洞
SICK SIM Series is a series of sensor integrators from SICK, Germany. An access control error vulnerability exists in SICK SIM Series Partnumber versions 2086502 and 1080579, which stems from a vulnerability that allows an unprivileged, remote attacker to access a user level defined as...
The vulnerability in the developer tools of browsers like Google Chrome and Microsoft Edge allows a hacker to bypass existing security restrictions and expose sensitive information.
The vulnerability of developer tools for web developers in Google Chrome and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and expose sensitive information through a specially created...
The vulnerability of the command-line interface of the Brocade Fabric OS, related to deficiencies in access control, allows attackers to escalate their privileges.
The vulnerability of the command-line interface of the Brocade Fabric OS is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges using commands such as “supportlink”, “firmwaredownload”, “portcfgupload”, and “fosexec”...
The vulnerability of the Apache Struts software platform, related to deficiencies in access control, allows attackers to modify any arbitrary files.
The vulnerability of the Apache Struts software platform is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to modify arbitrary files remotely...
nopCommerce 安全漏洞
nopCommerce is a set of open source general e-commerce platform. An Access Control Error vulnerability exists in nopCommerce 4.50.2 and prior versions. The vulnerability stems from the presence of improper access control in the application and can be exploited by an attacker to arbitrarily modify...
