9665 matches found
CVE-2023-31003
IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1 could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254658...
CVE-2023-31003
IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1 could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254658...
CVE-2023-31003 IBM Security Access Manager Container privilege escalation
IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1 could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254658...
CVE-2023-31003 IBM Security Access Manager Container privilege escalation
IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1 could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254658...
CVE-2024-21773
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands on the product that has pre-specified target devices and blocked URLs in parental control settings...
CVE-2023-31003: Improper Link Resolution Before File Access
IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1 could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254658...
PT-2024-15535 · Deshang · Deshang Dsshop
Name of the Vulnerable Software and Affected Versions: DeShang DSShop versions up to 3.1.0 Description: A vulnerability was found in the HTTP GET Request Handler component, specifically affecting the file public/install.php. This issue leads to improper access controls and can be initiated...
PT-2024-15537
Name of the Vulnerable Software and Affected Versions DeShang DSCMS versions up to 3.1.2/7.1 Description A vulnerability has been found in DeShang DSCMS, affecting an unknown function of the file public/install.php. The manipulation leads to improper access controls. It is possible to launch the...
AMI MegaRAC Vulnerabilities - Lenovo Support US
No description provided...
CVE-2024-0358
A vulnerability was found in DeShang DSO2O up to 4.1.0. It has been classified as critical. This affects an unknown part of the file /install/install.php. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the publ...
CVE-2024-0356
A vulnerability has been found in Mandelo ssmshiroblog 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file updateRoles of the component Backend. The manipulation leads to improper access controls. The exploit has been disclosed to the public a...
CVE-2024-0358
CVE-2024-0358 affects DeShang DSO2O (up to version 4.1.0). The root cause is an improper access control flaw in an unknown section of /install/install.php, enabling a remote attacker to manipulate access without authentication. The vulnerability is remote-exploitable and has been publicly disclos...
CVE-2024-0358 DeShang DSO2O install.php access control
A vulnerability was found in DeShang DSO2O up to 4.1.0. It has been classified as critical. This affects an unknown part of the file /install/install.php. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the publ...
CVE-2024-0356
A vulnerability has been found in Mandelo ssmshiroblog 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file updateRoles of the component Backend. The manipulation leads to improper access controls. The exploit has been disclosed to the public a...
CVE-2024-0356 Mandelo ssm_shiro_blog Backend updateRoles access control
A vulnerability has been found in Mandelo ssmshiroblog 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file updateRoles of the component Backend. The manipulation leads to improper access controls. The exploit has been disclosed to the public a...
PT-2024-1197 · Ibm · Ibm Security Verify Access Appliance +2
Name of the Vulnerable Software and Affected Versions: IBM Security Access Manager Container versions 10.0.0.0 through 10.0.6.1 IBM Security Verify Access Appliance versions 10.0.0.0 through 10.0.6.1 IBM Security Verify Access Docker version 10.0.6.1 Description: The issue is related to improper...
CVE-2023-7223
CVE-2023-7223 affects Totolink T6 4.1.9cu.5241_B20210923. The vulnerability lies in /cgi-bin/cstecgi.cgi where manipulating the topicurl argument with input showSyslog causes improper access controls, allowing remote initiation. These details are corroborated across CVE records and vendor-agnosti...
PT-2024-15493
Name of the Vulnerable Software and Affected Versions DeShang DSO2O versions up to 4.1.0 Description A critical issue has been found, affecting an unknown part of the file /install/install.php. This leads to improper access controls and can be initiated remotely. The exploit has been disclosed...