CVE-2022-2063

Improper Privilege Management in GitHub repository nocodb/nocodb prior to 0.91.7+...

CVE-2022-30739

Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get an user email or phone number with a normal level permission...

Apple macOS Big Sur 权限许可和访问控制问题漏洞

Apple macOS Big Sur is the 17th major version of Apple's macOS Big Sur, the operating system used by Apple for the MAC operating system macOS. Apple macOS Big Sur suffers from a privilege permission and access control issue vulnerability that stems from improper security checks in the CoreTypes...

Microsoft Windows Kerberos 权限许可和访问控制问题漏洞

Microsoft Windows Kerberos is a software for authentication in network clusters from Microsoft Corporation, U.S.A. Kerberos also serves as a network authentication protocol designed to provide strong authentication services to client/server applications through a key system. A vulnerability exist...

Microsoft Windows App Store 权限许可和访问控制问题漏洞

Microsoft Windows App Store is an application store for downloading software from Microsoft Corporation USA. A vulnerability exists in the Microsoft Windows App Store with privilege license and access control issues. The following products and editions are affected: Windows 10 Version 20H2 for...

Microsoft Windows Common Log File System Driver 权限许可和访问控制问题漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

Microsoft Windows Print Spooler Components权限许可和访问控制问题漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Print Spooler Components with privilege permission and access control issues. The following products and editions are affected: Windows...

Microsoft Windows Print Spooler Components 权限许可和访问控制问题漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Print Spooler Components due to privilege permission and access control issues. The following products and editions are affected:Windows 1...

Microsoft Windows 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows PDEV with privilege license and access control issues. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

Microsoft Windows COM 权限许可和访问控制问题漏洞

Microsoft Windows COM is a technology for the purpose of reusing software from Microsoft Corporation, U.S.A. COM is described as a platform-independent, decentralized, object-oriented system for creating interactive binary software components. A vulnerability exists in Microsoft Windows COM with...

Zammad 安全漏洞

Zammad is a suite of ticket management software from the German company Zammad. version 5.0.1 of Zammad contains a security vulnerability that stems from an LDAP configuration with privilege issues and is vulnerable to an attack with unauthorized access to existing user accounts. No details of th...

util-linux 权限许可和访问控制问题漏洞

util-linux is an open source software package. A privilege-permission and access-control issue vulnerability exists in util-linux, where an attacker could cause a fatal error in util-linux via libmount to trigger a denial of service...

PT-2022-15177 · Microsoft · Local Security Authority Subsystem Service +1

Name of the Vulnerable Software and Affected Versions: Windows Local Security Authority Subsystem Service affected versions not specified Description: An elevation-of-privilege issue allows attackers to affect the system. Recommendations: At the moment, there is no information about a newer versi...

Microsoft Windows权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Task Flow Data Engine with privilege permission and access control issues. The following products and editions are affected: Windows 10 Version...

Microsoft Windows Virtual Machine 权限许可和访问控制问题漏洞

Microsoft Windows Virtual Machine is a virtualization technology from Microsoft USA. It allows you to run many virtual environments in a Windows environment. A vulnerability exists in the Microsoft Windows Virtual Machine IDE Drive with privilege permission and access control issues. The followin...

Microsoft Windows Remote Access Connection Manager 权限许可和访问控制问题漏洞

Microsoft Windows Remote Access Connection Manager is a Windows service from Microsoft that manages virtual private network VPN connections from your computer to the Internet. If you disable this service, the VPN client application If you disable this service, VPN client applications will not...

Puppet CD4PE 安全漏洞

Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs, which can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Enterprise is the enterprise version of Puppet. An access control error...

Microsoft Azure Real Time Operating System 权限许可和访问控制问题漏洞

Microsoft Azure is an open, enterprise-class cloud computing platform from Microsoft Corporation USA.A privilege permission and access control issue vulnerability exists in Microsoft Azure RTOS. The vulnerability stems from a lack of effective privilege permission and access control measures on t...

Microsoft Windows AppContainer 权限许可和访问控制问题漏洞

Microsoft Windows AppContainer is a sandboxing mechanism by Microsoft Corporation USA to control which resources UWP applications can or cannot access. A vulnerability exists in Microsoft Windows AppContainer with privilege permission and access control issues. The following products and editions...

CVE-2021-31843

Improper privileges management vulnerability in McAfee Endpoint Security ENS Windows prior to 10.7.0 September 2021 Update allows local users to access files which they would otherwise not have access to via manipulating junction links to redirect McAfee folder operations to an unintended locatio...