Incorrect Default Permissions

Liferay Portal is vulnerable to Incorrect Default Permissions. This vulnerability is due to insufficient access control mechanisms for guest users. The guest users can view any web content template by default. An attackers can exploit this to view any template via the UI or API...

PT-2024-2122 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insufficient access control in the Windows operating system installer, allowing an attacker to elevate their privileges. This can affect the system,...

PT-2024-2078 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Windows kernel, allowing an attacker to bypass security restrictions and elevate their privileges. This can affect the system,...

PT-2024-2193 · Microsoft · Sonic

Name of the Vulnerable Software and Affected Versions: Software for Open Networking in the Cloud SONiC affected versions not specified Description: The issue is related to insufficient access control in the system, which can allow an attacker to elevate their privileges. Recommendations: At the...

PT-2024-2075 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Kernel, which is associated with insufficient access control. This vulnerability can be exploited by an attack...

PT-2024-2187 · Microsoft · Windows Ntfs +1

Name of the Vulnerable Software and Affected Versions: Windows NTFS affected versions not specified Description: The issue is related to the NTFS file system in Windows operating systems and is associated with insufficient access control. It allows an attacker to elevate their privileges. The...

PT-2024-2286 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to insufficient access control in the Windows operating system's SCSI device handler, allowing an attacker to potentially elevate their privileges. This could...

PT-2024-2191 · Microsoft · Azure Data Studio

Name of the Vulnerable Software and Affected Versions: Azure Data Studio affected versions not specified Description: The issue is related to insufficient access control in Azure Data Studio, which can be exploited to elevate privileges. Recommendations: At the moment, there is no information abo...

PT-2024-2101 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Windows kernel, allowing an attacker to elevate their privileges using specially crafted malicious COM objects. This can affect th...

PT-2024-4848 · Dell · Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 Description: The issue is related to improper privilege management in the PowerScale OneFS operating system, which could allow a local high-privileged attacker to gain unauthorized...

PT-2024-1986 · Ibm · Ibm Filenet Content Manager

Name of the Vulnerable Software and Affected Versions: IBM CP4BA - Filenet Content Manager Component versions 5.5.8.0 through 5.5.11.0 Description: The issue is related to insufficient access control in the IBM FileNet Content Manager component, which could allow a user to gain the privileges of...

PT-2024-1860 · Cisco · Cisco Unified Intelligence Center

Name of the Vulnerable Software and Affected Versions: Cisco Unified Intelligence Center affected versions not specified Description: A vulnerability in the Live Data server could allow an unauthenticated, local attacker to read and modify data in a repository that belongs to an internal service ...

PT-2024-3449 · Oracle +5 · Mysql Server +4

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.34 and prior Description: The issue is related to insufficient access control in the MySQL Server product of Oracle MySQL, specifically in the Server: DML component. This allows a high-privileged attacker with networ...

PT-2024-1946 · Commend · Commend Ws203Vicm

Name of the Vulnerable Software and Affected Versions: Commend WS203VICM affected versions not specified Description: The issue is related to insufficient access control in the Commend WS203VICM IP station's firmware. A remote attacker may be able to bypass access control by creating a malicious...

PT-2024-3526 · Oracle +5 · Mysql Server +4

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.35 and prior Description: The issue is related to insufficient access control in the Server: Optimizer component of Oracle MySQL Server. It allows a high-privileged attacker with network access via multiple protocols...

PT-2024-3452 · Oracle +5 · Mysql Server +4

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.34 and prior Description: The issue is related to insufficient access control in the MySQL Server product of Oracle MySQL, specifically in the Server: DML component. This allows a high-privileged attacker with networ...

PT-2024-3917 · Ge Healthcare · Ge Healthcare Echopac

Name of the Vulnerable Software and Affected Versions: GE HealthCare EchoPAC products affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in GE HealthCare EchoPAC products. It is associated with insufficient access control, which could allo...

PT-2024-1824

Name of the Vulnerable Software and Affected Versions Microsoft Defender for Endpoint affected versions not specified Description The issue is related to insufficient access control in Microsoft Defender for Endpoint, which can be exploited to elevate privileges. There is no information provided...

PT-2024-1884 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Microsoft Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access control in Microsoft Azure Site Recovery, which can be exploited to bypass existing security restrictions and elevate...

PT-2024-1866 · Microsoft · Outlook

Name of the Vulnerable Software and Affected Versions: Microsoft Outlook affected versions not specified Description: The issue is related to insufficient access control in Microsoft Outlook, which can be exploited to bypass existing security restrictions and elevate privileges. Recommendations: ...