4130 matches found
Cisco Identity Services Engine 安全漏洞
Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The ISE collects real-time information about the network, users, and devices to formulate and enforce policies to regulate the network. A security vulnerability exists in the Cisco Identit...
CVE-2022-20918
The CVE-2022-20918 issue affects Cisco FirePOWER Software for ASA FirePOWER module, Firepower Management Center (FMC) Software, and NGIPS Software. Root cause: SNMP access controls rely on a default credential for SNMPv1/v2, enabling an unauthenticated, remote attacker to perform SNMP GET request...
Authorization Bypass
device-mapper-multipath is vulnerable to authorization bypass. The vulnerability exists because the library uses arithmetic ADD instead of bitwise OR, allowing an attacker to write to UNIX domain sockets and bypass access controls and manipulate the multipath setup by repeating a keyword...
CVE-2022-27673
Insufficient access controls in the AMD Link Android app may potentially result in information disclosure...
CVE-2022-27673
Insufficient access controls in the AMD Link Android app may potentially result in information disclosure...
Information disclosure
Insufficient access controls in the AMD Link Android app may potentially result in information disclosure...
CVE-2022-27673
Insufficient access controls in the AMD Link Android app may potentially result in information disclosure...
CVE-2022-27673
Insufficient access controls in the AMD Link Android app may potentially result in information disclosure...
CVE-2022-27673
CVE-2022-27673 : AMD Link Android App suffers from insufficient access controls, potentially enabling information disclosure. Concrete details from the AMD security bulletin (AMD-SB-1047) confirm the affected product is the AMD Link Android App, with a recommended fix: update to AMD Link Android/...
PT-2022-18564 · Amd · Amd Link Android App
Name of the Vulnerable Software and Affected Versions: AMD Link Android app affected versions not specified Description: The issue is related to insufficient access controls, which may potentially result in information disclosure. Recommendations: At the moment, there is no information about a...
PT-2022-5511 · Microsoft · Azure Cyclecloud
Name of the Vulnerable Software and Affected Versions: Azure CycleCloud affected versions not specified Description: The issue is related to insufficient access controls in Azure CycleCloud, a tool for organizing and managing high-performance computing HPC environments. This can allow a remote...
PT-2022-5513
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description The issue is related to insufficient access controls in Microsoft Exchange Server, allowing a remote attacker to elevate their privileges. This vulnerability has been...
AMD Link Android App
Bulletin ID: AMD-SB-1047 Potential Impact: Information Disclosure Severity: Medium Summary AMD Link is an AMD application designed for our gaming community and helps enable a user to stream Windows desktop and games to mobile devices, TVs and other Windows PCs. CVE-2022-27673 Insufficient access...
CVE-2022-3787
A vulnerability was found in the device-mapper-multipath. The device-mapper-multipath allows local users to obtain root access, exploited alone or in conjunction with CVE-2022-41973. Local users that are able to write to UNIX domain sockets can bypass access controls and manipulate the multipath...
CVE-2022-22442
"IBM InfoSphere Information Server 11.7 could allow an authenticated user to access information restricted to users with elevated privileges due to improper access controls. IBM X-Force ID: 224427."...
CVE-2022-22442
"IBM InfoSphere Information Server 11.7 could allow an authenticated user to access information restricted to users with elevated privileges due to improper access controls. IBM X-Force ID: 224427."...
CVE-2022-22442
"IBM InfoSphere Information Server 11.7 could allow an authenticated user to access information restricted to users with elevated privileges due to improper access controls. IBM X-Force ID: 224427."...
PT-2022-15434 · Ibm · Ibm Infosphere Information Server
Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue is related to improper access controls, which could allow an authenticated user to access information restricted to users with elevated privileges. Recommendations: For IBM...
PT-2022-6023 · Fortinet · Fortios
Name of the Vulnerable Software and Affected Versions: FortiOS versions 7.0.0 through 7.0.7 FortiOS version 7.2.0 Description: The issue is related to improper access control, which may allow a remote authenticated read-only user to modify interface settings via the API. This could potentially be...