CVE-2025-3398 lenve VBlog WebSecurityConfig.java configure access control

A vulnerability classified as critical was found in lenve VBlog up to 1.0.0. Affected by this vulnerability is the function configure of the file blogserver/src/main/java/org/sang/config/WebSecurityConfig.java. The manipulation leads to improper access controls. The attack can be launched remotel...

Adobe Commerce 访问控制错误漏洞

Adobe Commerce is a leading global digital commerce solution for merchants and brands. Adobe Commerce suffers from an Access Control Error vulnerability that stems from improper access control, and no detailed vulnerability details are available at this time...

SAMSUNG Mobile devices 安全漏洞

The Samsung Galaxy Watch is a smartwatch that offers a variety of features, including fitness tracking, notifications, and mobile payments. An Improper Access Control vulnerability exists in Samsung Galaxy Watch. The vulnerability stems from improper access control. An attacker could exploit the...

Adobe Commerce 访问控制错误漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce suffers from an Access Control Error vulnerability that stems from improper access control, no details of the vulnerability are available...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Apr-2025 Release 1, which stems from improper access control and could...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Apr-2025 Release 1, which stems from improper access control and could...

CVE-2025-21425

Memory corruption may occur due top improper access control in HAB process...

CVE-2025-21425 Improper Access Control in Automotive Linux OS

Memory corruption may occur due top improper access control in HAB process...

CVE-2025-21425 Improper Access Control in Automotive Linux OS

Memory corruption may occur due top improper access control in HAB process...

CVE-2025-21425

CVE-2025-21425 affects Qualcomm chipsets (HAB process) with memory corruption caused by improper access control. Impact is high (confidentiality, integrity, availability per sources). Exploitation status not indicated in the provided documents; details on affected versions are not consistently pr...

CVE-2024-45556 Improper Access Control for Register Interface in TZ Firmware

Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR...

CVE-2024-45556

CVE-2024-45556 describes an improper access control issue in TZ (TrustZone) firmware affecting Qualcomm chipsets, where the access configuration permits Linux to read key registers in the TCSR. This cryptographic vulnerability exposes confidential data due to unauthorized access to critical key r...

CVE-2024-11071 Improper Access Control In DestinyECM

Permissive Cross-domain Policy with Untrusted Domains vulnerability in local API server of DestinyECM solutionversions described below which is developed and maintained by Cyberdigm may allow Cross-Site Request Forgery CSRF attack, which probabilistically enables JSON Hijacking aka JavaScript...

CVE-2024-11071 Improper Access Control In DestinyECM

Permissive Cross-domain Policy with Untrusted Domains vulnerability in local API server of DestinyECM solutionversions described below which is developed and maintained by Cyberdigm may allow Cross-Site Request Forgery CSRF attack, which probabilistically enables JSON Hijacking aka JavaScript...

CVE-2025-3236

A vulnerability was found in Tenda FH1202 1.2.0.14408. It has been declared as critical. This vulnerability affects unknown code of the file /goform/VirSerDMZ of the component Web Management Interface. The manipulation leads to improper access controls. The attack can be initiated remotely. The...

iboot 安全漏洞

iboot is a general purpose IoT gateway, industrial IoT gateway system by iteaj individual developer. A security vulnerability exists in iboot version 1.1.3, which stems from improper access control...

CVE-2025-3305

A vulnerability has been found in 1902756969/code-projects IKUNLibrary 1.0 and classified as problematic. This vulnerability affects the function addInterceptors of the file MvcConfig.java of the component Borrow Handler. The manipulation leads to improper access controls. The attack can be...

CVE-2025-3305

A vulnerability has been found in 1902756969/code-projects IKUNLibrary 1.0 and classified as problematic. This vulnerability affects the function addInterceptors of the file MvcConfig.java of the component Borrow Handler. The manipulation leads to improper access controls. The attack can be...

CVE-2025-3298

A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /oews/classes/Master.php?f=saveproduct of the component Registration Handler. The manipulation of the argument email leads...

Code-Projects IKUN_Library 安全漏洞

Code-Projects IKUNLibrary is an administration site for Code-Projects open source. A security vulnerability exists in Code-Projects IKUNLibrary version 1.0 that stems from improper access control...