SAMSUNG Mobile devices SemWifiApClient 安全漏洞

An access control error vulnerability exists in Samsung SemWifiApClient, a Wifi component of Samsung mobile devices, which stems from improper access control in SemWifiApClient and can be exploited by attackers to gain unauthorized access the Wi-Fi AP client MAC address...

Siemens Mendix Applications using Mendix 7和Siemens Mendix Applications using Mendix 9 安全漏洞

Mendix is a high-productivity application platform that enables mobile and web applications to be built and continuously improved at scale. Siemens Mendix is vulnerable to an access control error that could be exploited by an attacker to set weak passwords...

The vulnerability of the join.c component in the isolated Firejail programming environment, which allows a hacker to escalate their privileges.

The vulnerability of the join.c component in the isolated Firejail programming environment is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of Splunk Enterprise’s deployment servers allows a attacker to compromise the Universal Forwarder and execute arbitrary code.

The vulnerability of the Splunk Enterprise platform’s deployment servers is related to lack of access control. Exploiting this vulnerability allows a malicious actor to compromise the Universal Forwarder and execute arbitrary code...

CVE-2022-2243

An access control vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allows authenticated users to enumerate issues in non-linked sentry projects...

PT-2022-15427 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE/CE versions 14.8 through 14.10.4 GitLab EE/CE versions 15.0 through 15.0.3 GitLab EE/CE versions 15.1 through 15.1.0 Description: An access control issue affects GitLab EE/CE, allowing authenticated users to enumerate issues in...

Emerson DeltaV Distributed Control System 访问控制错误漏洞

Emerson DeltaV Distributed Control System is an automated distributed control system from Emerson. The system includes features such as network security management, alarm management, batch control, and change management. An access control error vulnerability exists in the Emerson DeltaV Distribut...

MyAdmin 安全漏洞

MyAdmin is a backend management system for cdfan personal developers. A security vulnerability exists in MyAdmin v1.0, which stems from an incorrect access control vulnerability when viewing the Personal Center in /api/user/userData?userCode=admin...

The vulnerability of the Citrix Application Delivery Management (ADM) platform’s management service, related to access control deficiencies, allows a hacker to bypass the administrator password and increase their privileges.

The vulnerability of the Citrix Application Delivery Management ADM delivery management platform is related to lack of access control mechanisms. Exploiting this vulnerability could allow a malicious actor to bypass the administrator’s password and gain increased privileges...

Advantech iView 访问控制错误漏洞

Advantech iView, a Simple Network Protocol SNMP based software from Advantech, China, manages B B SmartWorx devices. prior versions of Advantech iView 5.7.04.6469 are vulnerable to an access control error due to a lack of authentication, which could be exploited to read or modify sensitive data a...

Motorola Solutions MOSCAD IP Gateway和ACE IP Gateway 访问控制错误漏洞

The Motorola Solutions MOSCAD IP Gateway and Motorola Solutions ACE IP Gateway are both products of Motorola Solutions, Inc. A series of IP gateways. Use OPC to remotely and locally monitor, detect, alert, and protect any site.Motorola Solutions ACE IP Gateway is a series of IP gateways. An acces...

LDAP Account Manager 注入漏洞

LDAP Account Manager is a web front-end for managing entries e.g., users, groups, DHCP settings stored in the LDAP directory.An injection vulnerability exists in LDAP Account Manager LAM versions prior to 8.0, which stems from faulty access control and could be exploited by an attacker to pass th...

The vulnerability of the Windows Container Isolation FS Filter driver on operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Container Isolation FS Filter driver in operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Desktop Bridge application converter for Windows operating systems allows a hacker to escalate their privileges.

The vulnerability of the Desktop Bridge application converter for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2022-28612

Improper Access Control vulnerability leading to multiple Authenticated contributor or higher user role Stored Cross-Site Scripting XSS vulnerabilities in Muneeb's Custom Popup Builder plugin = 1.3.1 at WordPress...

CVE-2022-32256

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.1. The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to low privileged users accessing privileged information...

PT-2022-21181 · Siemens · Sinema Remote Connect Server

Name of the Vulnerable Software and Affected Versions: SINEMA Remote Connect Server versions prior to V3.1 Description: A vulnerability has been identified in the SINEMA Remote Connect Server, where a web service lacks proper access control for some endpoints, potentially leading to unauthorized...

The vulnerability of D-Link DIR816L router’s microprogramming software allows a hacker to gain access to the folder_view.php and category_view.php folders.

The vulnerability of D-Link DIR816L router’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to the folders folderview.php and categoryview.php...

CVE-2022-32562

An issue was discovered in Couchbase Server before 7.0.4. Operations may succeed on a collection using stale RBAC permission...

CVE-2022-30311

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection...