1112 matches found
CVE-2022-34894
In JetBrains Hub before 2022.2.14799, insufficient access control allowed the hijacking of untrusted services...
PT-2022-5413 · Nessus +1 · Nessus
Name of the Vulnerable Software and Affected Versions: Nessus affected versions not specified Description: The issue is related to insufficient access control in the Nessus web interface, allowing an authenticated attacker to read Nessus Debug Log file attachments without proper privileges. This...
CVE-2020-4107
HCL Domino is affected by an Insufficient Access Control vulnerability. An authenticated attacker with local access to the system could exploit this vulnerability to attain escalation of privileges, denial of service, or information disclosure...
Improper access control
HCL Domino is affected by an Insufficient Access Control vulnerability. An authenticated attacker with local access to the system could exploit this vulnerability to attain escalation of privileges, denial of service, or information disclosure...
CVE-2020-4107 HCL Domino is affected by an Insufficient Access Control vulnerability
HCL Domino is affected by an Insufficient Access Control vulnerability. An authenticated attacker with local access to the system could exploit this vulnerability to attain escalation of privileges, denial of service, or information disclosure...
PT-2022-9034 · Hcl · Hcl Domino
Name of the Vulnerable Software and Affected Versions: HCL Domino affected versions not specified Description: The issue is related to an Insufficient Access Control vulnerability. An authenticated attacker with local access to the system could exploit this vulnerability to attain escalation of...
WordPress Jupiter premium theme <= 6.10.1 - Insufficient Access Control leading to Authenticated Arbitrary Plugin Deletion
Insufficient Access Control leading to Authenticated Arbitrary Plugin Deletion discovered by Ramuel Gall Wordfence in WordPress Jupiter premium theme versions = 6.10.1. Solution Update the WordPress Jupiter premium theme to the latest available version at least 6.10.2...
WordPress JupiterX premium theme <= 2.0.6 - Insufficient Access Control leading to Authenticated Arbitrary Plugin Deactivation and Settings Modification
Insufficient Access Control leading to Authenticated Arbitrary Plugin Deactivation and Settings Modification discovered by Ramuel Gall Wordfence in WordPress JupiterX premium theme versions = 2.0.6. Solution Update the WordPress JupiterX premium theme to the latest available version at least 2.0....
CVE-2022-29855
Mitel 6800 and 6900 Series SIP phone devices through 2022-04-27 have "undocumented functionality." A vulnerability in Mitel 6800 Series and 6900 Series SIP phones excluding 6970, versions 5.1 SP8 5.1.0.8016 and earlier, and 6.0 6.0.0.368 through 6.1 HF4 6.1.0.165, could allow a unauthenticated...
PT-2022-2449 · Microsoft · Windows Print Spooler +1
Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insufficient access control in the Windows Print Spooler, which can be exploited to elevate privileges. This allows an attacker to affect the system. N...
PT-2022-3212 · Microsoft · Windows Lsa +1
Name of the Vulnerable Software and Affected Versions: Windows Local Security Authority Subsystem Service LSASS affected versions not specified Description: The issue is related to insufficient access control in the Local Security Authority Subsystem Service LSASS of Windows operating systems. It...
PT-2022-2890 · Microsoft · Visual Studio Code
Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to insufficient access control in Visual Studio Code, allowing an attacker to potentially elevate their privileges. Recommendations: At the moment, there is ...
PT-2022-2747 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Win32k component of Windows operating systems. It allows an attacker to elevate their privileges. Recommendations: At the moment,...
PT-2022-2669 · Microsoft · Windows Ancillary Function Driver For Winsock +1
Name of the Vulnerable Software and Affected Versions: Windows Ancillary Function Driver for WinSock affected versions not specified Description: The issue is related to insufficient access control in the Windows Ancillary Function Driver for WinSock, which can be exploited to elevate privileges...
PT-2022-2857 · D Link · D-Link Dir-816L
Name of the Vulnerable Software and Affected Versions: D-Link DIR816L versions prior to FW206b01 Description: The issue is related to insufficient access control in the software of D-Link DIR816L routers. This allows remote attackers to access sensitive folders, specifically "folder view.php" and...
CVE-2022-20762 Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure Privilege Escalation Vulnerability
A vulnerability in the Common Execution Environment CEE ConfD CLI of Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure SMI software could allow an authenticated, local attacker to escalate privileges on an affected device. This vulnerability is due to insufficient access control in...
VulnCheck KEV: CVE-2021-21551
Dell dbutil driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial-of-service DoS, or information disclosure...
PT-2022-1962 · Cisco · Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure
Name of the Vulnerable Software and Affected Versions: Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure SMI affected versions not specified Description: The issue is related to insufficient access control in the Common Execution Environment CEE ConfD CLI, which could allow an...
PT-2022-1666 · Microsoft · Windows Print Spooler +1
Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insufficient access control in the Windows Print Spooler, which can be exploited to elevate privileges. This allows an attacker to affect the system. N...
PT-2022-2787 · Microsoft · Endpoint Configuration Manager +1
Name of the Vulnerable Software and Affected Versions: Microsoft Endpoint Configuration Manager affected versions not specified Description: The issue is related to insufficient access control in the Microsoft Endpoint Configuration Manager, part of the Microsoft Windows operating system. This ca...