Anti-Cheat Expert 安全漏洞

Anti-Cheat Expert is a professional handheld security solution from Anti-Cheat Expert. A security vulnerability exists in Anti-Cheat Expert version 1.0.2202.6217, which stems from a failure to enforce proper access control when handling system resources, allowing a local attacker to escalate...

PT-2024-4534

Name of the Vulnerable Software and Affected Versions: ZenML Server versions prior to 0.46.7 ZenML Server versions 0.44.4, 0.43.1, and 0.42.2 are patched and not vulnerable, so the actual vulnerable range is any version before 0.46.7, excluding the mentioned patched versions. However, since 0.44....

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from deficiencies in access control. This allows attackers to gain read, edit, or delete access to data.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in restricting access to the CODEOWNERS file. Exploiting this vulnerability could allow a malicious actor to gain read, edit, or delete access to data...

The "Power Status" of all VDAs are displayed as "Unknown"

In DaaS management, the "Power Status" of all VDAs was displayed as "Unknown",Power control startup, shutdown, restart, etc. could not be performed. Also, when power control was executed, the log on the Citrix side would show "Success".However, the power action was not executed on the Azure VDA...

The vulnerability of the cloud-based personal assistant Siri in operating systems such as macOS, watchOS, iOS, and iPadOS allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the cloud-based personal assistant Siri in operating systems such as macOS, watchOS, iOS, and iPadOS is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Dell Command | Monitor software, which manages various computer parameters, stems from lack of access control mechanisms. This allows attackers to delete any files they desire.

The vulnerability of the Dell Command | Monitor software, which allows for monitoring and controlling various computer parameters, is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to delete arbitrary files...

CVE-2023-46662

Sielco PolyEco1000 is vulnerable to an information disclosure vulnerability due to improper access control enforcement. An unauthenticated remote attacker can exploit this via a specially crafted request to gain access to sensitive information...

CVE-2023-28656

NGINX Management Suite may allow an authenticated attacker to gain access to configuration objects outside of their assigned environment. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

[H-3] Any account can mint or burn an unlimited number of vault tokens and drain the Kangaroo Vault.

Lines of code Vulnerability details Impact This is a failure in setting up access control. Anyone could set the vault address to their address and call the mint/burn function to mint and burn vault tokens. The impact is severe since all the funds in Kangaroo vault can be withdrawn by anyone. Proo...

CVE-2022-48305

There is an identity authentication bypass vulnerability in Huawei Children Smart Watch Simba-AL00 1.1.1.274. Successful exploitation of this vulnerability may cause the access control function of specific applications to fail...

SUSE CVE-2014-8136

The 1 qemuDomainMigratePerform and 2 qemuDomainMigrateFinish2 functions in qemu/qemudriver.c in libvirt do not unlock the domain when an ACL check fails, which allow local users to cause a denial of service via unspecified vectors...

The vulnerability of the Extensions API of Microsoft Edge and Google Chrome browsers allows attackers to circumvent existing security restrictions.

The vulnerability of the Extensions API for Microsoft Edge and Google Chrome is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the software registration process for Cisco Enterprise NFV Infrastructure Software (NFVIS) allows a perpetrator to execute arbitrary commands.

The vulnerability of the Cisco Enterprise NFV Infrastructure Software NFVIS software registration process is related to lack of access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by installing a virtual machine with created metadata...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to lack of access control, allows a perpetrator to gain access to confidential data and compromise its integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the ability to update a secure branch. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data and compromise its integrity...

The vulnerability of the virtual learning environment Moodle, related to the lack of access control, allows a violator to modify course icons using criteria in the profile field.

The vulnerability of the virtual learning environment Moodle is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to modify course badges using criteria in the profile field...

Saraban 代码问题漏洞

Saraban is a file management system from Softvibe Thailand. It is used to transfer files and notifications to reduce unnecessary duplication.A file upload vulnerability exists in Saraban, which stems from the application's file upload feature that does not properly perform access control and file...

CVE-2021-40853

TCMAN GIM does not perform an authorization check when trying to access determined resources. A remote attacker could exploit this vulnerability to access URL that require privileges without having them. The exploitation of this vulnerability might allow a remote attacker to obtain sensible...

CVE-2021-3339

ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the Search Screen and the Profile Screen...

CVE-2020-28861

OpenAsset Digital Asset Management DAM 12.0.19 and earlier failed to implement access controls on /Stream/ProjectsCSV endpoint, allowing unauthenticated attackers to gain access to potentially sensitive project information stored by the application...

The vulnerability of the Intel Graphics Driver lies in its lack of access control mechanisms, allowing attackers to gain access to protected information.

The vulnerability of the Intel Graphics Driver lies in its lack of access control mechanisms. Exploiting this vulnerability can allow an attacker to gain access to protected information...