105 matches found
The vulnerability of the Extensions API of Microsoft Edge and Google Chrome browsers allows attackers to circumvent existing security restrictions.
The vulnerability of the Extensions API for Microsoft Edge and Google Chrome is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...
The vulnerability of the software registration process for Cisco Enterprise NFV Infrastructure Software (NFVIS) allows a perpetrator to execute arbitrary commands.
The vulnerability of the Cisco Enterprise NFV Infrastructure Software NFVIS software registration process is related to lack of access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by installing a virtual machine with created metadata...
The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to lack of access control, allows a perpetrator to gain access to confidential data and compromise its integrity.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the ability to update a secure branch. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data and compromise its integrity...
The vulnerability of the virtual learning environment Moodle, related to the lack of access control, allows a violator to modify course icons using criteria in the profile field.
The vulnerability of the virtual learning environment Moodle is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to modify course badges using criteria in the profile field...
Saraban 代码问题漏洞
Saraban is a file management system from Softvibe Thailand. It is used to transfer files and notifications to reduce unnecessary duplication.A file upload vulnerability exists in Saraban, which stems from the application's file upload feature that does not properly perform access control and file...
CVE-2021-40853
TCMAN GIM does not perform an authorization check when trying to access determined resources. A remote attacker could exploit this vulnerability to access URL that require privileges without having them. The exploitation of this vulnerability might allow a remote attacker to obtain sensible...
CVE-2021-3339
ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the Search Screen and the Profile Screen...
CVE-2020-28861
OpenAsset Digital Asset Management DAM 12.0.19 and earlier failed to implement access controls on /Stream/ProjectsCSV endpoint, allowing unauthenticated attackers to gain access to potentially sensitive project information stored by the application...
The vulnerability of the Intel Graphics Driver lies in its lack of access control mechanisms, allowing attackers to gain access to protected information.
The vulnerability of the Intel Graphics Driver lies in its lack of access control mechanisms. Exploiting this vulnerability can allow an attacker to gain access to protected information...
The vulnerability of the COPS component in Google Chrome web browsers allows a hacker to gain unauthorized access to confidential information.
The vulnerability of the COPS component in Google Chrome’s web browser is related to a lack of access control mechanisms. Exploiting this vulnerability allows an attacker who operates remotely to gain unauthorized access to confidential information through a specially created HTML page...
The vulnerability of the VMware Directory Service (vmdir), a management service for virtual infrastructure, allows a attacker to escalate their privileges.
The vulnerability of the VMware Directory Service vmdir, a component of the VMware vCenter Server virtualization infrastructure management tool, is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...
Intel Modular Server MFS2600KISPP Compute Module elevation of privilege vulnerability (CNVD-2020-28230)
Intel Modular Server MFS2600KISPP Compute Module is a computing module from Intel Corporation USA. A security vulnerability exists in Intel Modular Server MFS2600KISPP Compute Module, which stems from a failure of proper access control. The vulnerability can be exploited by an attacker to elevate...
Authorization Bypass
Symfony is vulnerable to authorization bypass. During the checking of access control rule by a firewall by iterating over each rule's attributes, it fails to enforce an unanimous strategy of checking next attributes when a decision to grant access on the attribute was made by the...
The vulnerability of the Message Display component of the Oracle Email Center software allows a malicious individual to gain access to modify, add, or delete data, or to gain unauthorized access to protected information.
The vulnerability of the Message Display component in the Oracle Email Center software lies in its lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to obtain unauthorized access to protected information usin...
The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system allows a hacker to gain access to modify, add, or delete data.
The vulnerability of the Preferences component in the Oracle CRM Technical Foundation system is related to lack of access control. Exploiting this vulnerability allows an attacker to gain access to modify, add, or delete data using the HTTPS network protocol...
The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system allows attackers to access, modify, add, or delete data, as well as gain unauthorized access to protected information.
The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system is related to lack of access control. Exploiting this vulnerability could allow an attacker to modify, add, or delete data, or gain unauthorized access to protected information using the HTTPS network...
The vulnerability of the web interface of the SIP phone Yealink SIP-T21P E2, related to insufficient access control checks, allows a perpetrator to gain access to configuration files.
The vulnerability of the web interface of the SIP phone Yealink SIP-T21P E2 is related to insufficient verification of access rights. Exploiting this vulnerability can allow an attacker to gain access to configuration files through a specially crafted GET request...
CVE-2019-7263
Linear eMerge E3-Series devices have a Version Control Failure...
