CVE-2023-0345 CVE-2023-0345

The Akuvox E11 secure shell SSH server is enabled by default and can be accessed by the root user. This password cannot be changed by the user...

Keycloak Code Execution

The vulnerability of the Keycloak identity and access management software is related to the default access rights settings. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Hitachi Tuning Manager File Read Write

The vulnerability of the Hitachi Tuning Manager resource management application relates to the default access rights settings. Exploiting this vulnerability could allow an attacker to read and write certain files...

PT-2023-1508 · Red Hat · Red Hat Single Sign-On

Name of the Vulnerable Software and Affected Versions: Red Hat Single Sign-On for OpenShift container images affected versions not specified Description: A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled...

SUSE CVE-2005-2801

xattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the nameindex fields when sharing xattr blocks, which could prevent default ACLs from being applied...

SUSE CVE-2007-2925

The default access control lists ACL in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recursion and allow-query-cache ACLs, which allows remote attackers to make recursive queries and query the cache...

usbguard: Fix unauthorized access via D-Bus

A flaw was found in usbguard. The vulnerability occurs due to the No default access control listACL on some D-Bus methods and leads to unauthorized access. This flaw allows an attacker to access and escape policy configuration...

usbguard: Fix unauthorized access via D-Bus

A flaw was found in usbguard. The vulnerability occurs due to the No default access control listACL on some D-Bus methods and leads to unauthorized access. This flaw allows an attacker to access and escape policy configuration...

usbguard: Fix unauthorized access via D-Bus

A flaw was found in usbguard. The vulnerability occurs due to the No default access control listACL on some D-Bus methods and leads to unauthorized access. This flaw allows an attacker to access and escape policy configuration...

usbguard: Fix unauthorized access via D-Bus

A flaw was found in usbguard. The vulnerability occurs due to the No default access control listACL on some D-Bus methods and leads to unauthorized access. This flaw allows an attacker to access and escape policy configuration...

usbguard: Fix unauthorized access via D-Bus

A flaw was found in usbguard. The vulnerability occurs due to the No default access control listACL on some D-Bus methods and leads to unauthorized access. This flaw allows an attacker to access and escape policy configuration...

GMapFP Joomla! Privilege Escalation

The vulnerability of the GMapFP extension in the Joomla! content management system is related to incorrect default access settings. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

Mozilla Firefox Thunderbird Access Rights Bypass

The vulnerability of Mozilla Firefox browser and Thunderbird email client is related to incorrect default access rights settings. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

Mozilla Firefox Thunderbird Access Rights Bypass

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to incorrect default access rights settings. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

PT-2022-15421 · Kuka · Kuka Systemsoftware V/Kss

Name of the Vulnerable Software and Affected Versions: KUKA SystemSoftware V/KSS versions prior to 8.6.5 Description: The issue is related to improper access control, allowing an unauthorized attacker to directly read and write robot configurations when access control is not available or not...

Advantech DeviceOn/iEdge Server Privilege Escalation

The vulnerability of the Advantech DeviceOn/iEdge Server software is related to incorrect default access permissions settings. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created file...

Advantech DeviceOn/iService Privilege Escalation

The vulnerability of the Advantech DeviceOn/iService software is related to incorrect default access rights settings. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created file...

Advantech SQ Manager Server Privilege Escalation

The vulnerability of the Advantech SQ Manager Server software is related to incorrect default access permissions settings. Exploiting this vulnerability can allow attackers to increase their privileges by using a specially created file...

JetBrains Kotlin Disclosure

The vulnerability of the JetBrains Kotlin programming language interpreter is related to incorrect default access rights settings. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...

Library Management System With QR Code 1.0 SQL Injection Vulnerability

Title: Library Management System with QR code Attendance 1.0 SQL Injection Author: Ashish Kumar https://www.linkedin.com/in/ashish-kumar-0b65a3184 Vendor: https://www.sourcecodester.com/users/kingbhob02 Software:...