DRUPAL-CONTRIB-2021-002

The Social User Export module enables users within Open Social to create an export of users and download this to a CSV file. The module doesn't sufficiently check access when building the CSV file, allowing logged-in users without the manage members permission to be able to export all data from a...

newbee-mall 访问控制错误漏洞

newbee-mall is an e-commerce system. An access control error vulnerability exists in all versions of newbee-mall, where an attacker cannot remotely gain privileges via NewBeeMallIndexConfigServiceImpl. java, but can make unauthorized changes to any user information via userID...

newbee-mall Authorization Issues Vulnerability

newbee-mall is an e-commerce system. A security vulnerability exists in newbee-mall that stems from the program being affected by incorrect access controls that cannot be remotely privileged via AdminLoginInterceptor.java. The authentication logic for the system's backend administrator is in the...

Oracle MySQL 访问控制错误漏洞

Oracle MySQL is an open source relational database management system.MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. An unspecified vulnerability exists in the Information Schema component in Oracle MySQL Server 5.7.32, 8.0.22, and...

Oracle Fusion Middleware 组件访问控制错误漏洞

Oracle BI Publisher is a reporting solution that makes it easier and faster than traditional reporting tools to produce, manage and deliver all reports and documents. An unspecified vulnerability exists in the E-Business Suite - XDO component in Oracle BI Publisher 5.5.0.0.0, 11.1.1.9.0,...

The vulnerability of the Windows operating system driver LUAFV (luafv.sys), which allows a hacker to increase their privileges

The vulnerability of the Windows operating system driver LUAFV luafv.sys is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

TotoLink A702r 访问控制错误漏洞

The Totolink A702r is a router device from the Chinese company Totolink. The Totolink A702r V1.0.0-B20161227.1023 suffers from an access control error vulnerability that allows an attacker to access the icon directory via the GET parameter. No detailed vulnerability details are provided at this...

Citrix Secure Mail For Android 访问控制错误漏洞

Citrix Secure Mail For Android is an email client software from Citrix. An access control error vulnerability exists in Citrix Secure Mail for Android in versions prior to 20.11.0. The vulnerability is related to the affected version allowing unauthenticated users to read calendar-related data...

Dell EMC PowerStore 访问控制错误漏洞

The Dell EMC PowerStore is a storage device from Dell USA. A security vulnerability exists in Dell EMC PowerStore version 1.0.3.0.5.007 and earlier versions, which can be exploited by an attacker to gain access to compromised applications with privileges of the compromised account using publicly...

CVE-2021-3006

The breed function in the smart contract implementation for Farm in Seal Finance Seal, an Ethereum token, lacks access control and thus allows price manipulation, as exploited in the wild in December 2020 and January 2021...

Seal Finance Farm Security Breach

Seal Finance Farm is a network protocol used by the Seal Finance community to support decentralized trading.SEAL An experimental protocol that acts as an intermediary between the main DeFi protocol tokens, creating deeper liquidity between the two Seal Finance Farm has a security vulnerability. T...

License and Access Control Issues in Multiple Huawei Products Vulnerability

Huawei Mate 10, among others, is a smartphone from China's Huawei Huawei. Several Huawei smartphones are vulnerable to a privilege-granting and access-control issue vulnerability that stems from a design flaw with a privilege escalation vulnerability. An attacker could exploit the vulnerability b...

Terramaster TOS Access Control Error Vulnerability

Terramaster TOS is a Linux-based operating system dedicated to the erraMaster Cloud Storage NAS server from Shenzhen Tumi Electronic Technology Terramaster Company in China. An access control error vulnerability exists in TerraMaster TOS version 4.2.06 and earlier versions, which can be exploited...

Odoo Security Vulnerability

Odoo is a set of enterprise resource planning ERP and customer relationship management CRM system from Odoo Belgium. The system is developed in Python, with PostgreSQL as the database, and includes modules for sales management, inventory management, and financial management. A security...

CVE-2020-26176

An issue was discovered in tangro Business Workflow before 1.18.1. No or broken access control checks exist on the /api/document//attachments API endpoint. Knowing a document ID, an attacker can list all the attachments of a workitem, including their respective IDs. This allows the attacker to...

Mitel Networks MiCollab 访问控制错误漏洞

Mitel MiCollab is an enterprise collaboration software and tools platform solution. An information disclosure vulnerability exists in the AWV component of Mitel MiCollab versions prior to 9.2. The vulnerability stems from insufficient access control to the meeting code. An attacker could exploit...

The vulnerability of the microprogramming software of Cisco IOS XE routing devices in the Cisco Catalyst 9800 Series is related to access control errors. This vulnerability allows a attacker to send ICMPv6 traffic until the client enters a RUN state.

The vulnerability of the microprogramming software in Cisco IOS XE wireless communication controller and Cisco Catalyst 9800 Series routers is related to access control errors. Exploiting this vulnerability allows a malicious actor to send ICMPv6 traffic until the client enters a RUN state...

NZXT CAM Permission License and Access Control Issues Vulnerability

NZXT CAM is a performance monitoring software for gaming computers from NZXT USA. The software can be used to manage computer performance, temperature, and devices to ensure that the computer is at optimal performance. NZXT CAM version 4.8.0 suffers from a Privilege Permission and Access Control...

Logrhythm Platform Manager 安全漏洞

Logrhythm Platform Manager is a component of the Logrhythm application from Logrhythm USA. The component is responsible for centralized management of alerts, notifications and case and security event management. Supports real-time dashboards, SmartResponse operations and reports. An Access Contro...

Docker Images Official Chronograf Access Control Error Vulnerability

Docker is an open source application container engine from the American company Docker. It supports the creation of a container lightweight virtual machine and the deployment and running of applications on Linux systems, as well as the automated installation, deployment, and upgrading of...