PT-2023-6584 · Sielco · Sielco Polyeco1000

Name of the Vulnerable Software and Affected Versions: Sielco PolyEco1000 affected versions not specified Description: The issue is related to insufficient access control in the web interface of the Sielco PolyEco1000 digital fm-transmitter's firmware. This allows an attacker to bypass...

The vulnerability of SIMATIC CP communication module software, related to insufficient access control for DMA memory, allows a intruder to cause a service failure.

The vulnerability of the microprogramming software for SIMATIC CP communication modules is related to insufficient access control for DMA memory. Exploiting this vulnerability could allow an intruder to cause a service failure...

PT-2023-6131 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Win32k component of the Windows operating system. This can allow an attacker to elevate their privileges. Recommendations: At the...

PT-2023-9192 · Microsoft · Azure Devops Server

Name of the Vulnerable Software and Affected Versions: Azure DevOps Server affected versions not specified Description: The issue is related to insufficient access control in Azure DevOps Server, which can be exploited by a remote attacker to execute arbitrary code. Recommendations: At the moment...

PT-2023-6159 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Win32k component of the Windows operating system, which can be exploited to elevate privileges. This allows an attacker to affect...

PT-2023-5678 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 15.3 through 16.2.7 GitLab EE versions 16.3 through 16.3.4 GitLab EE versions 16.4 through 16.4.0 Description: An issue has been discovered in GitLab EE related to insufficient access control. The issue allows a remote...

Improper access control

A vulnerability in Cisco DNA Center could allow an unauthenticated, remote attacker to read and modify data in a repository that belongs to an internal service on an affected device. This vulnerability is due to insufficient access control enforcement on API requests. An attacker could exploit th...

PT-2023-5001 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to insufficient access control in Microsoft Visual Studio, which can be exploited to elevate privileges. Recommendations: At the moment, there is no...

PT-2023-5030 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to insufficient access control in the Windows Kernel, which can be exploited to elevate privileges. This allows an attacker to affect the system. There is no...

PT-2023-4808 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions prior to 14.10.9 XWiki Platform versions prior to 15.4RC1 Description: The XWiki Platform has a vulnerability related to insufficient access control. This can be exploited for remote code execution by an attacker with...

PT-2023-4454 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient access control in Microsoft Edge, allowing a remote attacker to elevate their privileges. Recommendations: At the moment, there is...

PT-2023-4372 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Kernel, which is associated with insufficient access control. This vulnerability can be exploited to...

PT-2023-4379 · Microsoft · Windows Cloud Files Mini Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Cloud Files Mini Filter Driver affected versions not specified Description: The issue is related to insufficient access control in the Windows Cloud Files Mini Filter driver, which can be exploited to elevate privileges. This could...

PT-2023-5394 · Adobe · Commerce +1

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.6-p1 and earlier Adobe Commerce versions 2.4.5-p3 and earlier Adobe Commerce versions 2.4.4-p4 and earlier Description: The issue is related to insufficient access control in Adobe Commerce and Magento Open Source,...

PT-2023-4370 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Windows operating system kernel, allowing an attacker to elevate their privileges. This can affect the system, potentially leading...

PT-2023-4295 · Microsoft +1 · Asp.Net Core Signalr +2

Name of the Vulnerable Software and Affected Versions: ASP.NET Core SignalR and Visual Studio affected versions not specified Description: The issue is related to insufficient access control in the software development tool Microsoft Visual Studio and the Microsoft .NET platform. This can...

CVE-2023-4140

The WP Ultimate CSV Importer plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 7.9.8 due to insufficient restriction on the 'getheadervalues' function. This makes it possible for authenticated attackers, with minimal permissions such as an author, if the...

PT-2023-8475 · Apple · Macos Monterey +5

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.7.9 iOS versions prior to 15.7.8 iPadOS versions prior to 15.7.8 macOS Monterey versions prior to 12.6.8 macOS Ventura versions prior to 13.5 Description: The issue is related to insufficient access control in the...

PT-2023-4224 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.5 Description: The issue is related to insufficient access control in a component of the macOS operating system, which may allow an attacker to gain unauthorized access to protected information. An app may be able t...

PT-2023-4268 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.7.9 macOS versions prior to 12.6.8 macOS versions prior to 13.5 Description: The issue is related to insufficient access control in the macOS operating system, which may allow an app to modify protected parts of the...