CVE-2025-24314

Improper access control for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may...

CVE-2025-63667

Incorrect access control in SIMICAM v1.16.41-20250725, KEVIEW v1.14.92-20241120, ASECAM v1.14.10-20240725 allows attackers to access sensitive API endpoints without authentication...

Frappe Learning 信息泄露漏洞

Frappe Learning is an easy-to-use open source learning management system from Frappe Open Source. An information disclosure vulnerability exists in Frappe Learning version 2.0.0 through versions prior to 2.41.0, which stems from improper access control and could lead to viewing other students'...

PT-2025-46711

Name of the Vulnerable Software and Affected Versions Dell Data Lakehouse versions prior to 1.6.0.0 Description Dell Data Lakehouse is affected by an Improper Access Control issue. A remotely accessible attacker with high privileges could potentially exploit this, leading to Elevation of...

Gladinet Triofox Improper Access Control Vulnerability

Gladinet Triofox contains an improper access control vulnerability that allows access to initial setup pages even after setup is complete...

Vatilon IP camera 安全漏洞

Vatilon IP camera is a series of IP cameras from China-based Vatilon Vatilon. A security vulnerability exists in Vatilon IP camera that stems from improper access control and could lead to unauthorized access to sensitive API endpoints...

EUVD-2025-93523

Improper access control for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may...

EUVD-2025-93526

Improper access control for some SigTest before version 6.1.10 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially...

EUVD-2025-93519

Improper access control for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may...

EUVD-2025-93420

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-59512

Improper access control in Customer Experience Improvement Program CEIP allows an authorized attacker to elevate privileges locally...

EUVD-2025-93445

Improper access control in Customer Experience Improvement Program CEIP allows an authorized attacker to elevate privileges locally...

CVE-2025-32037

Improper access control for some IntelR PresentMon before version 2.3.1 within Ring 3: User Applications may allow a denial of service. Network adversary with a privileged user combined with a high complexity attack may enable denial of service. This result may potentially occur via adjacent acce...

CVE-2025-24516

Improper access control for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may...

CVE-2025-32037

CVE-2025-32037 describes an improper access control vulnerability in Intel® PresentMon software prior to 2.3.1. The issue is listed as a DoS risk (low impact on availability) with an attacker requiring adjacent access, high attack complexity, and the attacker needing privileged user rights, with ...

CVE-2025-32037

Improper access control for some IntelR PresentMon before version 2.3.1 within Ring 3: User Applications may allow a denial of service. Network adversary with a privileged user combined with a high complexity attack may enable denial of service. This result may potentially occur via adjacent acce...

CVE-2025-24516

Intel CIP software prior to WIN_DCA_2.4.0.11001 is affected by an improper access control vulnerability that may cause information disclosure. The issue allows an unprivileged user, combined with a privileged user and a low-complexity attack, to expose data via adjacent access without user intera...

CVE-2025-24516

Improper access control for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may...

CVE-2025-24314

Improper access control for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an information disclosure. Unprivileged software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may...

CVE-2025-22391

CVE-2025-22391 concerns an improper access control issue in SigTest . Multiple sources (Intel advisory, Red Hat, CNNVD, PT Security) identify the vulnerability as an elevation of privilege that could be triggered by an unprivileged, authenticated user with a high-complexity, locally-executed atta...