BlueZ 访问控制错误漏洞

BlueZ is an open source Bluetooth protocol stack written in C by BlueZ. It is used to provide support for the core Bluetooth layers and protocols. BlueZ suffers from an Access Control Error vulnerability that stems from improper authorization controls in the HID over GATT Profile implementation,...

Red Hat Ansible Automation Platform 访问控制错误漏洞

Red Hat Ansible Automation Platform Red Hat AAP is a unified solution for enabling strategic automation from Red Hat USA. A security vulnerability exists in Red Hat Ansible Automation Platform. An attacker could exploit the vulnerability to elevate privileges...

IBM Concert 安全漏洞

IBM Concert is a new tool from International Business Machines IBM Inc. that uses generative AI to help manage complex cloud-native applications. An Access Control Error vulnerability exists in versions prior to IBM Concert 1.0.3 that stems from improper access control and can be exploited by an...

OpenCTI 访问控制错误漏洞

OpenCTI is an open source cyber threat intelligence platform from OpenCTI Open Source. An access control error vulnerability exists in OpenCTI versions prior to 6.1.9, which stems from the ability to bypass regular expression validation used to block Introspection queries by removing redundant...

WAGO多款产品 访问控制错误漏洞

WAGO PFC100 and others are products of WAGO, Germany.WAGO PFC100 is a programmable logic controller PLC.WAGO CC100 0751-9x01 is a compact controller.WAGO Edge Controller 0752-8303/8000-0002 is a controller. An access control error vulnerability exists in various WAGO products. The vulnerability...

Moodle Access Control Error Vulnerability

Moodle is Moodle open source set of free e-learning software platform, also known as course management system, learning management system or virtual learning environment. Moodle suffers from an Access Control Error vulnerability that stems from insufficient access control over the inclusion of an...

Calibre-Web 访问控制错误漏洞

Calibre-Web is a web application for browsing, reading, and downloading eBooks from the Calibre database by Jan B, an individual developer. An access control error vulnerability exists in Calibre-Web that stems from the createshelf method in shelf.py not verifying that a user has the required...

Fortinet FortiOS Access Control Error Vulnerability (CNVD-2024-49648)

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. An access control error...

Nextcloud 访问控制错误漏洞

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. Nextcloud suffers from an Access Control Error vulnerability that stems from the fact that when a file is blocked by access control, users can still copy an...

python_book 安全漏洞

pythonbook is an online book lending website, book management system by Tim Green, an individual developer. A security vulnerability exists in pythonbook version V1.0, which stems from an access control error. An attacker can exploit the vulnerability to obtain sensitive information about users...

Baxter Life2000 访问控制错误漏洞

The Baxter Life2000 is a mask-less non-invasive ventilator from Baxter. An access control error vulnerability exists in Baxter Life2000 version 06.08.00.00 and prior, which stems from unsupported user authentication, allowing an attacker to obtain diagnostic information or manipulate device...

Intel Server Board M70KLP 访问控制错误漏洞

Intel Server Board M70KLP is a server motherboard from Intel Corporation, USA. An Access Control Error vulnerability exists in Intel Server Board M70KLP UEFI, which stems from improper access control. An attacker can exploit the vulnerability to elevate privileges...

Intel Thunderbolt 访问控制错误漏洞

Intel Thunderbolt is an application from Intel Corporation USA. An access control error vulnerability exists in Intel Thunderbolt versions prior to 1.0.49.9, which stems from improper access control. An attacker could exploit the vulnerability to elevate privileges...

Intel EMA 访问控制错误漏洞

Intel EMA is an application from Intel Corporation USA. designed to make Intel AMT easy to configure and use so that IT departments can manage devices equipped with Intel vPro platform technology without interrupting workflow, thereby simplifying customer management and helping to reduce manageme...

Intel DSA 访问控制错误漏洞

Intel DSA is a driver update tool from Intel Intel. It can detect user drivers, update the installed drivers to the latest version, support intel series of graphics cards, audio, network cards and chipset drivers, i-card users must have. An Access Control Error vulnerability exists in Intel DSA...

Intel Server M20NTP 访问控制错误漏洞

Intel Server M20NTP is a server motherboard from Intel Corporation USA. An access control error vulnerability exists in Intel Server M20NTP that stems from improper access control. An attacker can exploit the vulnerability to gain access to sensitive information...

Access Control Error Vulnerability in Multiple Siemens Products (CNVD-2024-45209)

SCALANCE M-800, MUM-800 and S615 and RUGGEDCOM RM1224 are industrial routers. An access control error vulnerability exists in multiple Siemens products that can be exploited by an attacker to cause a temporary denial of service condition...

Mattermost Access Control Error Vulnerability (CNVD-2024-45313)

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an Access Control Error vulnerability that stems from a failure to properly query ElasticSearch when searching for a channel name in the channel switcher, which can be exploited...

Microsoft Visual Studio Code 访问控制错误漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Visual Studio Code. An attacker can exploit this vulnerability to elevate privileges. No information about this vulnerability is available at this...

Appspace 安全漏洞

Appspace is a software application from Appspace, Inc. provides built-in content policies to easily implement and enforce team communication programs. A security vulnerability exists in Appspace version 6.2.4 that stems from an access control error...