CVE-2021-3987

CVE-2021-3987 (janeczku/calibre-web) is an improper access control flaw where the public shelf creation path (shelf.py: create_shelf) does not verify user permissions, allowing low-privilege users to create public shelves and perform unauthorized actions. Public disclosures in multiple feeds corr...

CVE-2021-3987 Improper Access Control in janeczku/calibre-web

An improper access control vulnerability exists in janeczku/calibre-web. The affected version allows users without public shelf permissions to create public shelves. The vulnerability is due to the createshelf method in shelf.py not verifying if the user has the necessary permissions to create a...

Cisco RoomOS Software和Cisco TelePresence Collaboration Endpoint Software 安全漏洞

Cisco RoomOS Software and Cisco TelePresence Collaboration Endpoint Software are both products of Cisco Corporation.Cisco RoomOS Software is a set of automated management software for Cisco devices. The software is mainly used for upgrading and managing the motherboard firmware of Cisco...

The vulnerability of the `changeFileRights` function in the `osUtils.cpp` module of the database management system “Red Database” is related to improper access control, allowing attackers to trigger a service failure for the DBMS.

The vulnerability of the changeFileRights function in the osUtils.cpp module of the database management system “Red Database” is related to the fact that if the server is run under the user’s identity other than the default user reddatabase, then running the server’s utilities under the root user...

The vulnerability of the application software interface of the GLPI system for managing requests, incidents, and inventory of computer equipment allows a perpetrator to disclose confidential information.

The vulnerability of the application software interface of the GLPI system for requests, incidents, and inventory management is related to improper access control. Exploiting this vulnerability could allow a malicious actor to disclose confidential information...

CVE-2024-36488

Improper Access Control in some IntelR DSA before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-32483

Improper access control for some IntelR EMA software before version 1.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-32044

Improper access control for some IntelR ArcTM Pro Graphics for Windows drivers before version 31.0.101.5319 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-29085

Improper access control for some BigDL software maintained by IntelR before version 2.5.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-32483

Improper access control for some IntelR EMA software before version 1.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36488

CVE-2024-36488 involves Intel® Driver & Support Assistant (Intel DSA). Multiple sources confirm an improper access control vulnerability in DSA versions before 24.3.26.8 that can allow an authenticated, local attacker to escalate privileges. The Red Hat, ZDI, CIRCL, and PT-Security entries align ...

CVE-2024-36488

Improper Access Control in some IntelR DSA before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-39609

CVE-2024-39609 concerns improper access control in the UEFI firmware of Intel Server Board M70KLP (and related Intel Server Boards). The Red Hat and Intel advisories identify the root cause as improper access control in UEFI, enabling a privileged user to potentially escalate privileges via local...

CVE-2024-29085

CVE-2024-29085 affects Intel BigDL software prior to version 2.5.0. The issue is improper access control that may allow an authenticated user to escalate privileges via adjacent access. Intel’s advisory confirms the affected product and recommends upgrading to BigDL 2.5.0 or later to mitigate. Af...

CVE-2024-29085

Improper access control for some BigDL software maintained by IntelR before version 2.5.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-29085

Improper access control for some BigDL software maintained by IntelR before version 2.5.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-27200

Improper access control in some IntelR GranulateTM software before version 4.30.1 may allow a authenticated user to potentially enable escalation of privilege via local access...

Improper Access Control

ICG.AspNetCore.Utilities.CloudStorage is vulnerable to Improper Access Control. The vulnerability is due to incorrect handling of the SAS Uri duration, which may result in a URL with an incorrect expiration time. It can allow an attacker to gain unauthorized access if the duration is too long, or...

Exploit for Improper Access Control in Getgrav Grav-Plugin-Admin

Exploit for: GravCMS 1.10.7 - Arbitrary YAML Write/...

PT-2024-25649 · Intel · Thunderbolt Share

Name of the Vulnerable Software and Affected Versions: ThunderboltTM Share software versions prior to 1.0.49.9 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For...