3379 matches found
CVE-2022-22394
The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by improper enforcement of access controls. By signing in, an attacker could exploit this vulnerability to bypass security and gain unauthorized administrator or node access to the...
WAVLINK AC1200 访问控制错误漏洞
WAVLINK AC1200 is a dual-band, high-power wireless router from WAVLINK China.WAVLINK AC1200 WAVLINK-A42W-1.27.6-20180418 is vulnerable due to a lack of authentication on the wx.html page. An unauthenticated attacker could use this vulnerability to access this page...
The vulnerability of the Windows Encrypting File System (EFS) component of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Windows Encrypting File System EFS component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The vulnerability of the Distribution Service for automatic deployment of installation files of backup and replication software for cloud, virtual, and physical systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Distribution Service for automatic deployment of installation files of backup and replication solutions from Veeam is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by loading specially...
Jenkins Plugin Semantic Versioning 安全漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.An access control error vulnerability exis...
WordPress plugin 输入验证错误漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Page Builder KingComposer plugin version...
The vulnerability of the Microsoft Windows operating system’s kernel, which allows a hacker to increase their privileges
The vulnerability of the Microsoft Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
FreeTAKServer 访问控制错误漏洞
FreeTAKServer is an open source lightweight server from the FreeTAKTeam team. It is used to connect to TAK clients. FreeTAKServer suffers from an access control error vulnerability, which stems from the fact that Endpoint/ManageRoute/postRoute can be accessed without authentication, and can be...
Orchard Core 安全漏洞
Orchard Core is an open source modular and multi-tenant application framework built with Asp.Net Core and a content management system Cms built on top of the framework from Orchard Core, Inc. Orchard Core is vulnerable to privilege permission and access control issues that could be exploited by a...
CVE-2022-24609
Luocms v2.0 is affected by an incorrect access control vulnerability. Through /admin/templates/templatemanage.php, an attacker can write an arbitrary shell file...
CVE-2021-40059
There is a permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect confidentiality...
CVE-2021-40049
There is a permission control vulnerability in the PMS module. Successful exploitation of this vulnerability can lead to sensitive system information being obtained without authorization...
CVE-2021-28488
Ericsson Network Manager ENM before 21.2 has incorrect access-control behavior that only affects the level of access available to persons who were already granted a highly privileged role. Users in the same AMOS authorization group can retrieve managed-network data that was not set to be accessib...
Mcafee WebAdvisor 访问控制错误漏洞
McAfee WebAdvisor, an organization of Mcafee, Inc. that evaluates Web site security, also refers to the services it provides. attackers can use this vulnerability to obtain detailed information about McAfee WebAdvisor settings and user systems...
Shopware 授权问题漏洞
Shopware is a suite of open source e-commerce software from the German company Shopware. Shopware is vulnerable to an access control error that stems from not properly setting sensitive HTTP headers to non-cacheable, which could be exploited by an attacker to enable HTTP caching and then have...
Microsoft Windows 权限许可和访问控制问题漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows PDEV with privilege license and access control issues. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...
WordPress plugin 安全漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A security vulnerability in the WordPress plugin UsersWP...
WordPress plugin Custom Content Shortcode 数据伪造问题漏洞
WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is a WordPress application plugin. WordPress plugin Custom Content Shortcode versions prior to 4.0.2 are vulnerable to an access control error, which stems from the plugin's...
PT-2022-2177 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-12 Description: The issue is related to a function gatt process notification in gatt cl.cc of the Android operating system kernel, which is associated with inadequate access control. This could allow a remote attacker...