Tomofun Furbo 360和Tomofun Furbo Mini 访问控制错误漏洞

Tomofun Furbo 360 and Tomofun Furbo Mini are both smart pet cameras from Tomofun Corporation of Taiwan, China. An access control error vulnerability exists in Tomofun Furbo 360 FB0035FW036 and earlier versions and Tomofun Furbo Mini MC0020FW074 and earlier versions, which stems from incorrect...

Microsoft Entra ID 访问控制错误漏洞

Microsoft Entra ID is a cloud-based identity and management solution from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Entra ID that stems from an elevation of privilege vulnerability...

Juniper Networks Junos OS 访问控制错误漏洞

Juniper Networks Junos OS is a Juniper Networks, Inc. network operating system dedicated to the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. An Access Control Error vulnerability exists in Juniper Networks Junos OS on EX4600 Series and QFX5000 Seri...

Juniper Security Director Policy Enforcer 访问控制错误漏洞

Juniper Security Director Policy Enforcer is a Juniper module that enables centralized issuance of security policies and automation of threat response. An access control error vulnerability exists in Juniper Security Director Policy Enforcer versions prior to 23.1R1 Hotpatch v3, which stems from ...

KaiFangQian 访问控制错误漏洞

KaiFangQian is the front-end page of an open-sign e-signature system of kaifangqian open source. An access control error vulnerability exists in KaiFangQian, which stems from an incorrect operation of the getAllUsers function and could lead to information disclosure...

WordPress plugin Integrate Dynamics 365 CRM 访问控制错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. An access control erro...

IBM Transformation Extender Advanced 访问控制错误漏洞

IBM Transformation Extender Advanced is a data transformation, validation and standardization tool software from International Business Machines IBM. An access control error vulnerability exists in IBM Transformation Extender Advanced version 10.0.1 that stems from improper access control and cou...

NVIDIA Delegated Licensing Service 访问控制错误漏洞

NVIDIA Delegated Licensing Service is a licensing service from NVIDIA Corporation. An access control error vulnerability exists in NVIDIA Delegated Licensing Service, which originates from the possibility that an attacker could perform an authorized operation that could lead to information...

IBM License Metric Tool 访问控制错误漏洞

The IBM License Metric Tool is a free tool from International Business Machines IBM that helps IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs. An Access Control Error vulnerability exists in IBM License Metric Tool...

Vasion Print Virtual Appliance Host 访问控制错误漏洞

Vasion Print Virtual Appliance Host is a print management software from Vasion USA. An access control error vulnerability exists in Vasion Print Virtual Appliance Host versions prior to 22.0.1049, which stems from a misconfigured SSH client and could allow an attacker to capture forwarded private...

Syrotech SY-GPON-2010-WADONT 访问控制错误漏洞

The Syrotech SY-GPON-2010-WADONT is an optical network termination device from Syrotech India. An access control error vulnerability exists in the Syrotech SY-GPON-2010-WADONT that stems from improper access control of the FTP service, which could lead to unauthorized access...

ML-Logger 访问控制错误漏洞

ML-Logger is a logger, server and visualization dashboard for machine learning projects by Ge Yang Personal Developer. An access control error vulnerability exists in ML-Logger acf255bade5be6ad88d90735c8367b28cbe3a743 and prior versions, which stems from an incorrect manipulation of the parameter...

Horilla 访问控制错误漏洞

Horilla is a free and open source human resources software from Horilla, Inc. An access control error vulnerability exists in Horilla version 1.3.0 that originates from an unauthenticated user being able to access an uploaded resume file by guessing or predicting the file URL, which could result ...

Magnetism Studios Endurance 访问控制错误漏洞

Magnetism Studios Endurance is a battery management tool from Magnetism Studios, Inc. An access control error vulnerability exists in Magnetism Studios Endurance version 3.3.0 and earlier, which stems from a lack of authentication in the loadModuleNamedWithReply function in the NSXPC Interface...

WAGO Device Sphere和WAGO Solution Builder 访问控制错误漏洞

WAGO Device Sphere and WAGO Solution Builder are products of WAGO, a device management system, and WAGO Solution Builder, a project configuration and engineering platform. An Access Control Error vulnerability exists in WAGO Device Sphere and WAGO Solution Builder. The vulnerability arises from...

WAGO Device Sphere和WAGO Solution Builder 访问控制错误漏洞

WAGO Device Sphere and WAGO Solution Builder are products of WAGO, a device management system, and WAGO Solution Builder, a project configuration and engineering platform. An Access Control Error vulnerability exists in WAGO Device Sphere and WAGO Solution Builder, which stems from a lack of...

LibreChat 访问控制错误漏洞

LibreChat is an enhanced ChatGPT clone by Danny Avila Personal Developer. LibreChat suffers from an Access Control Error vulnerability that stems from the checkAccess function in api/server/middleware/roles/access.js that uses permissions.some for permission validation, resulting in improper acce...

i-Educar 访问控制错误漏洞

i-Educar is a free educational software from Portábilis Open Source. An access control error vulnerability exists in i-Educar version 2.10 and earlier, which stems from improper access control of unknown functions in the file /enrollment-history/, which could lead to a remote attack...

i-Educar 访问控制错误漏洞

i-Educar is a free educational software from Portábilis Open Source. An access control error vulnerability exists in i-Educar version 2.10 and earlier, which stems from improper manipulation of unknown functions in the file /module/Avaliacao/diarioApi, which could lead to information disclosure...

Dragonfly 访问控制错误漏洞

Dragonfly is an open source framework from DragonflyDB that allows dynamic processing of any content type. An access control error vulnerability exists in Dragonfly versions prior to 2.1.0, which stems from the /api/v1/jobs and /preheats endpoints being accessible without authentication,...