62168 matches found
Improper Access Control
github.com/google/exposure-notifications-server is vulnerable to Improper Access Control. The vulnerability is due to the service incorrectly assuming that the source server had properly embargoed keys for at least 2 hours after their expiry, which could allow expired keys to be re-published and...
Improper Access Control
S3 Gateway is vulnerable to Improper Access Control. The vulnerability is due to inadequate authorization checks, allowing authenticated users to send requests to the delete-objects API and delete files they are not authorized to access...
CVE-2024-46280
PIX-LINK LV-WR22 RE3002-P1-01V117.0 is vulnerable to Improper Access Control. The TELNET service is enabled with weak credentials for a root-level account, without the possibility of changing them...
PIX-LINK LV-WR22 安全漏洞
The PIX-LINK LV-WR22 is a wireless repeater from PIX-LINK. A security vulnerability exists in the PIX-LINK LV-WR22 RE3002-P1-01V117.0 version, which stems from vulnerability to improper access control attacks...
CVE-2024-46280
PIX-LINK LV-WR22 RE3002-P1-01V117.0 is vulnerable to Improper Access Control. The TELNET service is enabled with weak credentials for a root-level account, without the possibility of changing them...
CVE-2024-46280
PIX-LINK LV-WR22 RE3002-P1-01_V117.0 is affected by Improper Access Control due to TELNET being enabled with root-level credentials that cannot be changed. The issue is documented across multiple sources (NVD/Red Hat/CVE listings) with a CVSS v3.1 base score of 8.8 (High) and adjacent attack vect...
CVE-2024-46280
PIX-LINK LV-WR22 RE3002-P1-01V117.0 is vulnerable to Improper Access Control. The TELNET service is enabled with weak credentials for a root-level account, without the possibility of changing them...
PT-2024-31948 · Sourcecodester · Sourcecodester Online Medicine Ordering System
Name of the Vulnerable Software and Affected Versions: Sourcecodester Online Medicine Ordering System version 1.0 Description: The issue is related to Incorrect Access Control, where there is a lack of authorization checks for admin operations. Specifically, an attacker can perform admin-level...
CVE-2024-9298 SourceCodester Online Railway Reservation System Ticket ?page=tickets access control
A vulnerability was found in SourceCodester Online Railway Reservation System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /?page=tickets of the component Ticket Handler. The manipulation of the argument id leads to improper access...
Improper Access Control
Mautic is vulnerable to Improper Access Control. The vulnerability is due to the lack of mechanisms to verify user permissions during the update process via the user interface, allowing an attacker to access sensitive information...
CVE-2022-25768 Improper Access Control in UI upgrade process
The logic in place to facilitate the update process via the user interface lacks access control to verify if permission exists to perform the tasks. Prior to this patch being applied it might be possible for an attacker to access the Mautic version number or to execute parts of the upgrade proces...
Mautic vulnerable to Improper Access Control in UI upgrade process
Impact The logic in place to facilitate the update process via the user interface lacks access control to verify if permission exists to perform the tasks. Prior to this patch being applied it might be possible for an attacker to access the Mautic version number or to execute parts of the upgrade...
Improper Access Control
Overview Affected versions of this package are vulnerable to Improper Access Control due to the UI upgrade process. An attacker can access the version number or execute parts of the upgrade process without proper permissions. Note: As upgrading in the user interface is deprecated, this...
GHSA-X3JX-5W6M-Q2FC Mautic vulnerable to Improper Access Control in UI upgrade process
Impact The logic in place to facilitate the update process via the user interface lacks access control to verify if permission exists to perform the tasks. Prior to this patch being applied it might be possible for an attacker to access the Mautic version number or to execute parts of the upgrade...
Improper Access Control
Overview Affected versions of this package are vulnerable to Improper Access Control due to the UI upgrade process. An attacker can access the version number or execute parts of the upgrade process without proper permissions. Note: As upgrading in the user interface is deprecated, this...
CVE-2024-38183
An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network...
CVE-2024-38183
CVE-2024-38183 affects GroupMe with an improper access control vulnerability that allows an unauthenticated attacker to elevate privileges over a network. Multiple connected entries describe the issue as an elevation-of-privilege via insufficient access control and note that exploitation involves...
GroupMe Elevation of Privilege Vulnerability
An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network...
BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the HID over GATT Profile. The issue results from the lack of...