CVE-2023-1490

A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1 and classified as critical. Affected by this issue is the function 0x220020 in the library SDActMon.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. An attack has to be approached...

CVE-2023-1491

CVE-2023-1491 affects Max Secure Anti Virus Plus 19.0.2.1. The vulnerability resides in the IoControlCode Handler’s MaxCryptMon.sys library, specifically function 0x220020, causing improper access controls. Local access is required to exploit, and the issue has been publicly disclosed (VDB-223377...

CVE-2023-1490

CVE-2023-1490 affects Max Secure Anti Virus Plus 19.0.2.1. The issue is in the IoControlCode Handler’s function 0x220020 in SDActMon.sys, causing improper access controls. Exploitation is local and the vulnerability has been publicly disclosed. Reported impact is access control bypass with potent...

CVE-2023-1489

CVE-2023-1489 affects Lespeed WiseCleaner Wise System Monitor 1.5.3.54 via WiseHDInfo64.dll IoControlCode Handler function 0x9C402088, causing improper access controls. Local attack vector; exploit publicly disclosed. Multiple sources corroborate the vulnerability and its high impact (CVE details...

CVE-2023-1486

CVE-2023-1486 affects Lespeed WiseCleaner Wise Force Deleter 1.5.3.54. The issue resides in the IoControlCode Handler’s WiseUnlock64.sys library, specifically function 0x220004, causing improper access controls. Local access is required, and exploitation has been disclosed publicly. Connected sou...

CVE-2023-1453

A vulnerability was found in Watchdog Anti-Virus 1.4.214.0. It has been rated as critical. Affected by this issue is the function 0x80002008 in the library wsdk-driver.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Attacking locally is a requiremen...

CVE-2023-1453 Watchdog Anti-Virus IoControlCode wsdk-driver.sys 0x80002008 access control

A vulnerability was found in Watchdog Anti-Virus 1.4.214.0. It has been rated as critical. Affected by this issue is the function 0x80002008 in the library wsdk-driver.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Attacking locally is a requiremen...

CVE-2023-0811

Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII...

CVE-2023-1432

A vulnerability was found in SourceCodester Online Food Ordering System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /fos/admin/ajax.php?action=savesettings of the component POST Request Handler. The manipulation leads to improper access control...

CVE-2023-27875

IBM Aspera Faspex 5.0.4 could allow a user to change other user's credentials due to improper access controls. IBM X-Force ID: 249847...

CVE-2023-1432

SourceCodester Online Food Ordering System 2.0 has a vulnerability in the POST Request Handler, specifically the file path /fos/admin/ajax.php?action=save_settings. The issue is an improper access control in this endpoint, which could allow a remote attacker to exploit it without authentication. ...

CVE-2023-27875 IBM Aspera Faspex improper access controls

IBM Aspera Faspex 5.0.4 could allow a user to change other user's credentials due to improper access controls. IBM X-Force ID: 249847...

CVE-2023-27875 IBM Aspera Faspex improper access controls

IBM Aspera Faspex 5.0.4 could allow a user to change other user's credentials due to improper access controls. IBM X-Force ID: 249847...

PT-2023-16979 · Sourcecodester · Sourcecodester Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Food Ordering System version 2.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file "/fos/admin/ajax.php?action=save settings" of the component POST Request Handler...

PT-2023-21388 · Ibm · Ibm Aspera Faspex

Name of the Vulnerable Software and Affected Versions: IBM Aspera Faspex version 5.0.4 Description: The issue is related to improper access controls, allowing an authenticated user to change other users' credentials. Recommendations: For IBM Aspera Faspex version 5.0.4, at the moment, there is no...

CVE-2023-26284

IBM MQ Certified Container 9.3.0.1 through 9.3.0.3 and 9.3.1.0 through 9.3.1.1 could allow authenticated users with the cluster to be granted administration access to the MQ console due to improper access controls. IBM X-Force ID: 248417...

CVE-2023-26284

IBM MQ Certified Container Vulnerability (CVE-2023-26284) affects IBM MQ Certified Container versions 9.3.0.1–9.3.0.3 and 9.3.1.0–9.3.1.1. The issue is improper access controls that could allow authenticated cluster users to gain administration access to the MQ Console. Remediation is available i...

CVE-2023-26284 IBM MQ Certified Container improper access controls

IBM MQ Certified Container 9.3.0.1 through 9.3.0.3 and 9.3.1.0 through 9.3.1.1 could allow authenticated users with the cluster to be granted administration access to the MQ console due to improper access controls. IBM X-Force ID: 248417...

Atlassian Jira 7.12.x < 7.12.3 Multiple Vulnerabilities

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to version 7.6.10, 7.7.0 prior to 7.7.5, 7.8.0 prior to 7.8.5, 7.9.0 prior to7.9.3, 7.10.0 prior to 7.10.3, 7.11.0 prior to 7.11.3, 7.12.0 prior to 7.12.3 or 7.13.0 prior to...

Path Traversal Vulnerability in `LESS` Parser allows reading of sensitive server files

Impact If an admin account has already been compromised by an attacker, the LESS parser can be exploited to read sensitive files on the server through the use of path traversal techniques. An attacker can achieve this by providing an absolute path to a sensitive file in the custom LESS setting,...