CVE-2024-27187 [20240804] - Core - Improper ACL for backend profile view

Improper Access Controls allows backend users to overwrite their username when disallowed...

Security Bulletin: IBM Global Configuration Management - Vulnerable to archiving a global baseline by an authenticated user having improper access controls

Summary IBM Global Configuration Management is vulnerable to archiving a global baseline by an authenticated user having improper access controls/permissions. This bulletin contains information regarding the vulnerability and remediation actions. Vulnerability Details CVEID:CVE-2024-41773...

Thousands of Oracle NetSuite Sites at Risk of Exposing Customer Information

Cybersecurity researchers are warning about the discovery of thousands of externally-facing Oracle NetSuite e-commerce sites that have been found susceptible to leaking sensitive customer information. "A potential issue in NetSuite's SuiteCommerce platform could allow attackers to access sensitiv...

Johnson Controls ExacqVision Web Server Installed (Linux)

Binary data johnsoncontrolsexacqvisionwebservernixinstalled.nbin...

PT-2024-21722 · Joomla +2 · Joomla! +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to improper access controls, allowing backend users to overwrite their username even when it is disallowed. Recommendations: At the moment, there is no information abo...

PT-2024-29557 · Ibm · Ibm Global Configuration Management

Name of the Vulnerable Software and Affected Versions: IBM Global Configuration Management versions 7.0.2 through 7.0.3 Description: The issue is related to improper access controls, allowing an authenticated user to archive a global baseline. This could potentially lead to privilege escalation d...

CVE-2024-6348

Predictable seed generation in the security access mechanism of UDS in the Blind Spot Protection Sensor ECU in Nissan Altima 2022 allows attackers to predict the requested seeds and bypass security controls via repeated ECU resets and seed requests...

CVE-2024-6348 Predictable seed generation after ECU reset

Predictable seed generation in the security access mechanism of UDS in the Blind Spot Protection Sensor ECU in Nissan Altima 2022 allows attackers to predict the requested seeds and bypass security controls via repeated ECU resets and seed requests...

CVE-2024-6348

CVE-2024-6348 affects the Nissan Altima 2022 Blind Spot Protection Sensor ECU, specifically the UDS security access seed generation. The root cause is predictable seed generation, enabling an attacker to forecast the requested seeds and bypass security controls by repeatedly resetting the ECU and...

CVE-2024-6348 Predictable seed generation after ECU reset

Predictable seed generation in the security access mechanism of UDS in the Blind Spot Protection Sensor ECU in Nissan Altima 2022 allows attackers to predict the requested seeds and bypass security controls via repeated ECU resets and seed requests...

CVE-2024-7921

A vulnerability has been found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /report/ParkOutRecord/GetDataList. The manipulation leads to improper access...

CVE-2024-7921

CVE-2024-7921 affects Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805. The vulnerability concerns an improper access control in the file /report/ParkOutRecord/GetDataList, exposing an unknown functionality that can be manipulated remotely. Public exploit disclosure i...

CVE-2024-7920

A vulnerability, which was classified as problematic, was found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805. Affected is an unknown function of the file /Report/ParkCommon/GetParkInThroughDeivces. The manipulation leads to improper access controls. It is...

CVE-2024-7919

A vulnerability, which was classified as critical, has been found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805. This issue affects some unknown processing of the file /report/ParkChargeRecord/GetDataList. The manipulation leads to improper access controls. The...

CVE-2024-7919

A vulnerability, which was classified as critical, has been found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805. This issue affects some unknown processing of the file /report/ParkChargeRecord/GetDataList. The manipulation leads to improper access controls. The...

CVE-2024-7920

CVE-2024-7920 affects Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805, with an access-control flaw in the file /Report/ParkCommon/GetParkInThroughDeivces. The issue is exploitable remotely and the exploit has been disclosed publicly. Multiple connected documents conf...

CVE-2024-7919 Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 GetDataList access control

A vulnerability, which was classified as critical, has been found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805. This issue affects some unknown processing of the file /report/ParkChargeRecord/GetDataList. The manipulation leads to improper access controls. The...

CVE-2024-7919

CVE-2024-7919 affects Anhui Deshun Intelligent Technology’s Jieshun JieLink+ JSOTC2016 up to 20240805. The issue arises in the processing of the file /report/ParkChargeRecord/GetDataList, causing improper access controls. An attacker may exploit this remotely; the vulnerability has been disclosed...

SUSE CVE-2024-43819

In the Linux kernel, the following vulnerability has been resolved: kvm: s390: Reject memory region operations for ucontrol VMs This change rejects the KVMSETUSERMEMORYREGION and KVMSETUSERMEMORYREGION2 ioctls when called on a ucontrol VM. This is necessary since ucontrol VMs have kvm-arch.gmap s...

PT-2024-38688 · Anhui Deshun Intelligent Technology · Jielink+ Jsotc2016

Name of the Vulnerable Software and Affected Versions: Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805 Description: A vulnerability has been found in the software, classified as problematic, and affects an unknown functionality of the file...