PT-2024-29874 · Hargal · Hargal

Name of the Vulnerable Software and Affected Versions: Hargal affected versions not specified Description: The issue is related to improper access control, which is classified as CWE-284. This is a critical issue with a high severity score. No information is provided about the estimated number of...

applystagetesting.nalsar.ac.in Improper Access Control vulnerability OBB-3959115

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

aisdoms.nalsar.ac.in Improper Access Control vulnerability OBB-3959116

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

blogs.nalsar.ac.in Improper Access Control vulnerability OBB-3959112

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

applytesting.nalsar.ac.in Improper Access Control vulnerability OBB-3959114

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

legalaffairstesting.nalsar.ac.in Improper Access Control vulnerability OBB-3959109

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-7921

A vulnerability has been found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /report/ParkOutRecord/GetDataList. The manipulation leads to improper access...

pwipapp.4schools.net Improper Access Control vulnerability OBB-3957935

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SAP NetWeaver AS ABAP Improper Access Control (3468102)

SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to craft a URL link that could bypass allowlist controls. Depending on the web applications provided by this server, the attacker might inject CSS code or links into the web application that could allow the attacker to read ...

CVE-2024-28050

Improper access control in some IntelR ArcTM & IrisR Xe Graphics software before version 31.0.101.4824 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-26022

Improper access control in some IntelR UEFI Integrator Tools on Aptio V for IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-43489

Improper access control for some IntelR CIP software before version 2.4.10717 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-43489

Improper access control for some IntelR CIP software before version 2.4.10717 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-28050

Improper access control in some IntelR ArcTM & IrisR Xe Graphics software before version 31.0.101.4824 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-36446

The provisioning manager component of Mitel MiVoice MX-ONE through 7.6 SP1 could allow an authenticated attacker to conduct an authentication bypass attack due to improper access control. A successful exploit could allow an attacker to bypass the authorization schema...

CVE-2024-36505

An improper access control vulnerability CWE-284 in FortiOS 7.4.0 through 7.4.3, 7.2.5 through 7.2.7, 7.0.12 through 7.0.14 and 6.4.x may allow an attacker who has already successfully obtained write access to the underlying system via another hypothetical exploit to bypass the file integrity...

CVE-2024-36505

An improper access control vulnerability CWE-284 in FortiOS 7.4.0 through 7.4.3, 7.2.5 through 7.2.7, 7.0.12 through 7.0.14 and 6.4.x may allow an attacker who has already successfully obtained write access to the underlying system via another hypothetical exploit to bypass the file integrity...

CVE-2024-36505

An improper access control vulnerability CWE-284 in FortiOS 7.4.0 through 7.4.3, 7.2.5 through 7.2.7, 7.0.12 through 7.0.14 and 6.4.x may allow an attacker who has already successfully obtained write access to the underlying system via another hypothetical exploit to bypass the file integrity...

Improper Access Control

Apache DolphinScheduler is vulnerable to Improper Access Control. The vulnerability is due to there is no proper validation on access controls that allowing authenticated users to illegally access additional resource files...

Improper Access Control

github.com/clastix/kamaji is vulnerable to Improper Access Control. The vulnerability is due to inadequate use of an "open at the top" range definition in RBAC for etcd roles, which allows some TCPs API servers to read, write, and delete data of other control planes...