CVE-2023-35667

In updateList of NotificationAccessSettings.java, there is a possible way to hide approved notification listeners in the settings due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2023-31411

A remote unprivileged attacker can modify and access configuration settings on the EventCam App due to the absence of API authentication. The lack of authentication in the API allows the attacker to potentially compromise the functionality of the EventCam App...

CVE-2023-21135

In onCreate of NotificationAccessSettings.java, there is a possible failure to persist notifications settings due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2023-21135

In onCreate of NotificationAccessSettings.java, there is a possible failure to persist notifications settings due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

The vulnerability of the GMapFP extension of the Joomla! content management system allows attackers to increase their privileges.

The vulnerability of the GMapFP extension in the Joomla! content management system is related to incorrect default access settings. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

PT-2022-20036 · WordPress · Bitcoin / Altcoin Faucet Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: Bitcoin / Altcoin Faucet WordPress plugin versions prior to 1.6.1 Description: The issue concerns a lack of CSRF check when saving settings, allowing an attacker to make a logged-in admin change them via a CSRF attack. Additionally, due to th...

The vulnerability of the rsyslog configuration file in the Ansible configuration management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the rsyslog configuration file in the Ansible configuration management system is related to incorrect default access settings. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of Intel Graphics Drivers relates to incorrect default access settings, which allow attackers to exploit their privileges.

The vulnerability of Intel Graphics Drivers is related to incorrect default access settings. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the fly-admin-printer package allows unauthorized changes to the general access settings for printers on the Astra Linux operating system. This vulnerability enables a hacker to modify these settings without authorization.

The vulnerability of the fly-admin-printer package for configuring the printing system and printer options in the Astra Linux operating system is related to incorrect configuration of general access parameters. Exploiting this vulnerability may allow a malicious individual to unauthorizedly modif...

Unspecified Vulnerability in IBM Rational Collaborative Lifecycle Management RSA DM

IBM Rational Collaborative Lifecycle Management CLM is a suite of collaborative lifecycle management solutions from IBM in the United States. The solution combines three products, RTC, RQM, and RRC, in an IBM SmartCloud Enterprise cloud environment image to provide requirements management, change...

CVE-2017-1602

IBM RSA DM IBM Rational Collaborative Lifecycle Management 5.0 and 6.0 could allow an authenticated user to access settings that they should not be able to using a specially crafted URL. IBM X-Force ID: 132625...

Newport XPS-Cx, XPS-Qx

CVSS v3 7.5 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Newport Equipment: XPS-Cx, XPS-Qx Vulnerability: Improper Authentication AFFECTED PRODUCTS The following versions of XPS-Cx and XPS-Qx, a universal motion controller, are affected: XPS-Cx all versions, and XPS-Qx all...

WePay: Invited users can modify and/or remove account owner

Summary -------------- If an invited user in an account has "can modify" privileges, he can modify the privileges of the owner of the account or even just completely remove him. Steps to reproduce -------------- 1. Create an account and got to...

The vulnerability of the Firefox browser, which allows a hacker to modify general access settings

The vulnerability of the Firefox Health Reports FHR, about:healthreport browser extension is related to improper event source restrictions. Exploiting this vulnerability allows a remote attacker to modify general access settings by gaining access to the IFrame element...

Comodo Internet Security authentication bypass

It's possible to access settings without enteing password if desktop widget is enabled...

Microsoft SharePoint Portal and Team Services

There is a bug in how the authentication mode works with the web-based administration page. This page resides, in the Web Servers with Sharepoint, in http://www.example.com/layouts/settings.htm or http://www.example.com/somedirectory/layouts/settings.htm This page is usually protected by NT Basic...