PT-2024-26034 · Smr · Smr

Name of the Vulnerable Software and Affected Versions: System property versions prior to SMR Aug-2024 Release 1 Description: The issue is related to improper access control, allowing local attackers to access cell-related information. Recommendations: For versions prior to SMR Aug-2024 Release 1,...

PT-2024-26029 · Samsung · Galaxy Watch

Name of the Vulnerable Software and Affected Versions: Galaxy Watch versions prior to SMR Aug-2024 Release 1 Description: The issue is related to improper access control, allowing local attackers to access sensitive information on the Galaxy Watch. This could potentially expose user data to...

PT-2024-26019 · Unknown · Ledcoverservice

Name of the Vulnerable Software and Affected Versions: LedCoverService versions prior to SMR Aug-2024 Release 1 Description: The issue is related to improper access control in the LedCoverService, allowing local attackers to bypass restrictions on starting services from the background...

PT-2024-26020 · Samsung · Samsunghealthservice

Name of the Vulnerable Software and Affected Versions: SamsungHealthService versions prior to SMR Aug-2024 Release 1 Description: The issue is related to improper access control in SamsungHealthService, allowing local attackers to bypass restrictions on starting services from the background...

Exploit for CVE-2024-6782

CVE-2024-6782 Calibre 远程代码执行（CVE-2024-6782）Improper access...

CVE-2024-6782

Improper access control in Calibre 6.9.0 7.14.0 allow unauthenticated attackers to achieve remote code execution...

CVE-2024-6782

Improper access control in Calibre 6.9.0 7.14.0 allow unauthenticated attackers to achieve remote code execution...

UBUNTU-CVE-2024-6782

Improper access control in Calibre 6.9.0 7.14.0 allow unauthenticated attackers to achieve remote code execution...

CVE-2024-6782

Improper access control in Calibre 6.9.0 7.14.0 allow unauthenticated attackers to achieve remote code execution...

CVE-2024-6782 Calibre Remote Code Execution

Improper access control in Calibre 6.9.0 7.14.0 allow unauthenticated attackers to achieve remote code execution...

cetsd.iitj.ac.in Improper Access Control vulnerability OBB-3953639

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bioschool.iitd.ac.in Improper Access Control vulnerability OBB-3953629

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cart.iitd.ac.in Improper Access Control vulnerability OBB-3953628

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-33027 Improper Access Control in Graphics Linux

Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from the Graphics Linux module containing an improper access control issue...

(0Day) (Pwn2Own) ChargePoint Home Flex onboardee Improper Access Control Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the onboardee module. The issue results from improper...

Insecure Permissions

github.com/kumahq/kuma is vulnerable to insecure permissions. The vulnerability is due to improper access control that allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

giftstoindia24x7.com Improper Access Control vulnerability OBB-3951222

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

JVN#84326763: Multiple vulnerabilities in SKYSEA Client View

SKYSEA Client View provided by Sky Co.,LTD. is an Enterprise IT Asset Management Tool. SKYSEA Client View contains multiple vulnerabilities listed below. Improper access control in the specific process CWE-266 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Base Score 7.8 CVE-2024-41139 Origin...

Improper Access Control

github.com/fabedge/fabedge is vulnerable to Improper Access Control. The vulnerability is due to improperly configured permissions allowing access to sensitive data and escalate privileges by obtaining the service account's token. Attackers can exploit this vulnerability to access sensitive...