Automox Alive Automox Agent 安全特征问题漏洞

Automox Alive Automox Agent is an application from the Automox Alive community. An agent software. An Access Control Error vulnerability exists in versions prior to Automox Agent 31 that stems from the use of inadequately protected S3 bucket endpoints to store sensitive files, which can be...

Cscape Access Control Error Vulnerability

Cscape is an application that can program the full range of OCS. An Access Control Error vulnerability exists in Cscape versions prior to 9.90 SP4. The vulnerability stems from the default configuration of the affected product being installed with unpartitioned user permissions, with all users...

NVIDIA Windows GPU Display Driver 访问控制错误漏洞

NVIDIA GPU Display Driver for Windows is a driver from NVIDIA Corporation that is used for interactive support of graphics card display modules in Windows systems. An access control error vulnerability exists in the NVIDIA Windows GPU Display Driver for Windows, which can be exploited by an...

SolarWinds Orion Platform Access Control Error Vulnerability (CNVD-2021-33052)

Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. An...

Juniper Networks Paragon 访问控制错误漏洞

Juniper Networks Paragon is a software application from Juniper, USA. A real-time network topology view. An Access Control Error vulnerability exists in Paragon Active Assurance Control Center version 2.36, which allows remote attackers to bypass the authentication process. The following products...

Eclipse Mosquitto Access Control Error Vulnerability

Eclipse Mosquitto is the Eclipse Foundation's set of open source messaging agent software . An access control error vulnerability exists in Eclipse Mosquitto version 1.3.0 and prior versions, which can be exploited by a low-privileged attacker with local access to certain Windows versions to inse...

Eclipse Mosquitto Access Control Error Vulnerability (CNVD-2021-36852)

Eclipse Mosquitto is the Eclipse Foundation's set of open source messaging agent software . An Access Control Error vulnerability exists in Eclipse Mosquitto, which can be exploited by an attacker to insert malware using the component's elevated privileges...

ShopXO Access Control Error Vulnerability

ShopXO is an open source enterprise-level open source e-commerce system. Shopxo v1.4.0 and v1.5.0 has an Access Control Error vulnerability, which can be exploited to obtain privileges in "index.php" by manipulating the parameter "user id" in the HTML request...

Zulip 访问控制错误漏洞

Zulip server is an open source team chat application from the American company Zulip. An Access Control Error vulnerability exists in versions of Zulip Server prior to 3.4, which results in a user with this privilege being able to send messages. No details of the vulnerability are provided at thi...

ShopXO 安全漏洞

ShopXO is an open source enterprise-level open source e-commerce system. Shopxo v1.4.0 and v1.5.0 has an Access Control Error vulnerability, which can be exploited to obtain privileges in "index.php" by manipulating the parameter "user id" in the HTML request...

Eclipse Mosquitto 访问控制错误漏洞

Eclipse Mosquitto is the Eclipse Foundation's set of open source messaging agent software . An access control error vulnerability exists in Eclipse Mosquitto version 1.3.0 and prior versions, which can be exploited by a low-privileged attacker with local access to certain Windows versions to inse...

Google Chrome 访问控制错误漏洞

Chrome is a web browsing tool developed by Google. A security vulnerability exists in Google Chrome versions prior to 90.0.4430.72. A remote attacker can leak cross-origin data through a carefully crafted HTML page...

Eclipse Mosquitto 访问控制错误漏洞

Eclipse Mosquitto is the Eclipse Foundation's set of open source messaging agent software . An Access Control Error vulnerability exists in Eclipse Mosquitto, which can be exploited by an attacker to insert malware using the component's elevated privileges...

Bitdefender Safepay Access Control Error Vulnerability

Bitdefender SafePay is a secure browser. The Access Control Error vulnerability, which previously existed in Bitdefender Safepay version 25.0.7.29, stems from an Authentication Error vulnerability in Bitdefender Safepay, which can be exploited by an attacker to manipulate the browser's file uploa...

D-Link DAP-1880AC Access Control Error Vulnerability

The D-Link DAP-1880AC is a wireless access point from AUO D-Link of Taiwan, China. It provides to build a simultaneous dual-band wireless network that enables a wide range of wireless areas in the 2.4GHz and 5GHz bands. An access control error vulnerability exists in DAP-1880AC firmware version...

Pegasystem PEGA Platform 安全漏洞

Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem UK. The platform is used to develop applications for BPM Business Process Management, Case Management, Real Time Decision Making and CRM Customer Relationship Management. An access control error vulnerability...

Bitdefender SafePay 访问控制错误漏洞

Bitdefender SafePay is a secure browser. The Access Control Error vulnerability, which previously existed in Bitdefender Safepay version 25.0.7.29, stems from an Authentication Error vulnerability in Bitdefender Safepay, which can be exploited by an attacker to manipulate the browser's file uploa...

Cohesity DataPlatform 访问控制错误漏洞

Cohesity DataPlatform is a suite of platforms from Cohesity for managing ancillary data and applications. The platform is primarily used for data backup, instant recovery, and more. Cohesity DataPlatform An access control error vulnerability exists that allows an attacker to access a Cohesity...

Pegasystem PEGA Platform 访问控制错误漏洞

Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem UK. The platform is used to develop applications for BPM Business Process Management, Case Management, Real Time Decision Making and CRM Customer Relationship Management. An access control error vulnerability...

OAuth2 Proxy Access Control Error Vulnerability

OAuth2 Proxy is a reverse proxy that provides authentication with Google, Github or other providers. OAuth2 Proxy suffers from an access control error vulnerability that stems from the fact that none of the authorizations are restricted. No details of the vulnerability are available at this time...