SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Dec-2022 Release 1, which stems from an incorrect access control...

PT-2022-27337 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda A18 version 15.13.07.09 Description: An access control issue allows unauthenticated attackers to access the Telnet service. Recommendations: For Tenda A18 version 15.13.07.09, consider restricting access to the Telnet service until a...

Aruba Networks AirWave Management Platform 安全漏洞

Aruba Networks AirWave Management Platform, from Aruba Networks, provides granular visibility into wired and wireless networks and is the leading multi-vendor management platform designed for local campus environments. A security vulnerability exists in the Aruba Networks AirWave Management...

CVE-2022-44929

An access control issue in D-Link DVG-G5402SP GE1.03 allows unauthenticated attackers to escalate privileges via arbitrarily editing VoIP SIB profiles...

CVE-2022-44211

In GL.iNet Goodcloud 1.1 Incorrect access control allows a remote attacker to access/change devices' settings...

PT-2022-22586 · Unknown · Ixp Data Easy Install

Name of the Vulnerable Software and Affected Versions: IXPdata EasyInstall version 6.6.14725 Description: The issue is related to an access control problem. Recommendations: For version 6.6.14725, at the moment, there is no information about a newer version that contains a fix for this issue...

The vulnerability of the Windows Win32 Kernel Subsystem, which allows a hacker to increase their privileges

The vulnerability of the Windows Win32 Kernel Subsystem in the operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2022-44037

An access control issue in APsystems ENERGY COMMUNICATION UNIT ECU-C Power Control Software V4.1NA, V3.11.4, W2.1NA, V4.1SAA, C1.2.2 allows attackers to access sensitive data and execute specific commands and functions with full admin rights without authenticating allows him to perform multiple...

WAVLINK WN531G3 安全漏洞

The WAVLINK WN531G3 is a wireless router from China's RuiYin Technology WAVLINK. The WAVLINK WN531G3 M31G3.V5030.201204 version and M31G3.V5030.200325 version contain an access control error vulnerability that can be exploited by an attacker to download configuration data and log files...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to elevate their privileges within the system

The vulnerability of the Windows operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain increased privileges within the system...

The vulnerability of the executed file stadosvr.exe in the AVEVA Edge SCADA system allows a intruder to execute arbitrary code.

The vulnerability of the stadosvr.exe executable file in the AVEVA Edge SCADA system is related to errors in access control. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Teachers Record Management System 安全漏洞

Teachers Record Management System is an open source Teachers Record Management System. Record Management System v1.0 suffers from an Access Control Error vulnerability that originates from improper access control in /Admin/dashboard.php. An attacker can exploit this vulnerability to access and...

CVE-2022-41446

An access control issue in /Admin/dashboard.php of Record Management System using CodeIgniter v1.0 allows attackers to access and modify user data...

PT-2022-25876 · Unknown · Record Management System +1

Name of the Vulnerable Software and Affected Versions: Record Management System using CodeIgniter version 1.0 Description: The issue allows attackers to access and modify user data due to an access control problem in the /Admin/dashboard.php endpoint. Recommendations: For Record Management System...

Maarch RM 安全漏洞

Maarch RM is an electronic filing system from Maarch. Streamline your certification processes, scientific and technical control in an efficient and optimized way. An Access Control Error vulnerability exists in Maarch RM 2.8.0 and later, versions prior to 2.8.6, which stems from an application...

D-Link DIR-878 安全漏洞

D-Link DIR-878 is a wireless router from D-Link China.The D-Link DIR-878 firmware version 1.02B05 contains an access control error vulnerability, which stems from the existence of incorrect access control. An attacker could use this vulnerability to log in with a blank password...

JetBrains Hub 安全漏洞

JetBrains Hub is a web-based application from the Czech company JetBrains. The program is capable of integrating multiple JetBrains team tools together. An access control error vulnerability exists in JetBrains Hub versions prior to 2022.3.15181, which originates from a user whose email sending t...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

WBCE CMS 安全漏洞

WBCE CMS is an open source content management system CMS based on PHP and MySQL. WBCE CMS suffers from an Access Control Error vulnerability that stems from the increaseattempts function in the wbce/framework/class.login.php file in its Header Handler component not appropriately restricting too...

The vulnerability of the web interface of the security and assessment system, as well as the Nessus tool for assessing vulnerabilities, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the web interface of security systems and the Nessus vulnerability assessment tool is related to deficiencies in access control. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information through embedded debuggi...