HGiga MailSherlock 安全漏洞

Hgiga MailSherlock is an enterprise mail auditing system from China Henderson Technology Hgiga. A security vulnerability exists in HGiga MailSherlock version 4.5, which stems from an insufficient access control issue. The vulnerability can be exploited by an attacker to access parts of other user...

The vulnerability in the implementation of the Google Chrome browser’s Web Payments application interface allows a perpetrator to circumvent security restrictions.

The vulnerability of the Google Chrome browser’s Web Payments application interface is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions through a specially created HTML page...

The vulnerability of the access control function in Netgear Orbi RBR750 software allows a hacker to execute arbitrary code.

The vulnerability of the access control function of Netgear Orbi RBR750 software exists due to the lack of measures taken to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a speciall...

WisdomGarden Tronclass 代码问题漏洞

WisdomGarden Tronclass ilearn is a teaching platform from China WisdomGarden, Inc. A security vulnerability exists in WisdomGarden Tronclass that stems from improper access control when uploading files. Affected products and versions: Tronclass ilearn app version 2.3.2 and Tronclass ilearn web...

The vulnerability of the stat() function in the OverlayFS subsystem of Linux kernels allows attackers to increase their privileges.

The vulnerability of the stat function in the OverlayFS subsystem of Linux operating systems is related to deficiencies in access control when processing setuid and setgid attributes. Exploiting this vulnerability can allow attackers to enhance their privileges...

The software for creating music or podcasts in Apple GarageBand on the MacOS operating system is vulnerable, allowing attackers to exploit this vulnerability to gain higher privileges.

The vulnerability of the Apple GarageBand software for creating music or podcasts on the MacOS operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the AMD Ryzen Master utility for adjusting AMD Ryzen processors allows a hacker to increase their privileges.

The vulnerability of the AMD Ryzen Master tool for adjusting AMD Ryzen processors is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...

answer 代码问题漏洞

answer is an open source knowledge-based community software. An access control error vulnerability exists in versions of answer prior to 1.0.6 that stems from insufficient session expiration. An attacker could exploit the vulnerability by using a token to gain unauthorized access to an applicatio...

CVE-2023-1489

A vulnerability has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54 and classified as critical. Affected by this vulnerability is the function 0x9C402088 in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to improper access controls. The...

CVE-2023-21464

Improper access control in Samsung Calendar prior to versions 12.4.02.9000 in Android 13 and 12.3.08.2000 in Android 12 allows local attacker to configure improper status...

SAMSUNG Mobile Devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile Devices Samsung Calendar version 12.4.02.9000, which stems from an improper access control issue...

IBM Aspera 安全漏洞

IBM Aspera is an IBM FASP protocol-based fast file transfer and streaming solution from International Business Machines IBM. IBM Aspera Faspex version 5.0.4 is vulnerable to an access control error, which stems from the existence of improper access control of the application. An authenticated...

SAP NetWeaver Application Server 访问控制错误漏洞

SAP NetWeaver AS is a SAP Web Application Server from SAP Germany. It not only provides network services, but also is the basic platform for SAP software. An access control error vulnerability exists in SAP NetWeaver AS version 7.50, which stems from the fact that no authentication checks are...

PT-2023-2482

Name of the Vulnerable Software and Affected Versions PaperCut MF versions prior to 20.1.7 PaperCut MF versions prior to 21.2.11 PaperCut MF versions prior to 22.0.9 PaperCut NG versions prior to 20.1.7 PaperCut NG versions prior to 21.2.11 PaperCut NG versions prior to 22.0.9 PaperCut NG version...

PT-2023-1713

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2018 Update 15 and earlier and 2021 Update 5 and earlier Description The vulnerability in Adobe ColdFusion is related to improper access control and deserialization of untrusted data, which could result in arbitrary...

The vulnerability of the threat detection mechanism for Microsoft Defender for IoT, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of the Microsoft Defender for IoT threat detection mechanism is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...

The vulnerability of the optimizing compiler oneAPI DPC++/C++ Compiler, related to access control deficiencies, allows attackers to increase their privileges.

The vulnerability of the optimizing compiler oneAPI DPC++/C++ Compiler is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...

BlogEngine 安全漏洞

BlogEngine is an open source ASP.NET blog system . The system supports Ajax comments, custom themes, and more. A security vulnerability exists in BlogEngine.NET version 3.3.8.0, which stems from incorrect access control. An attacker exploiting this vulnerability can access the files of unpublishe...

H3C A210-G A210-GV100R005 授权问题漏洞

The H3C A210-G is a ceiling-mounted wireless access point from China's Xinhua San H3C. A security vulnerability exists in the H3C A210-G A210-GV100R005 version that stems from an access control issue that allows an attacker to authenticate without a password...

WordPress plugin WP Private Message 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...