1557 matches found
PT-2023-26411 · Intel · Intel Smart Campus
Name of the Vulnerable Software and Affected Versions: Intel Smart Campus android application versions prior to 9.4 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations:...
PT-2023-10831 · Unknown · Vaerys-Dawn Discordsailv2
Name of the Vulnerable Software and Affected Versions: Vaerys-Dawn DiscordSailv2 versions up to 2.10.2 Description: A critical issue was found in the Tag Handler component, leading to improper access controls due to manipulation. This issue affects some unknown functionality of the component...
PT-2023-5999 · Fortinet · Fortios
Name of the Vulnerable Software and Affected Versions: Fortinet FortiOS versions 7.2.0 through 7.2.4 Fortinet FortiOS version 7.4.0 Description: The issue is related to improper access control in the FortiOS REST API component, allowing an attacker to access restricted resources from non-trusted...
PT-2023-28754 · 70Mai · 70Mai A500S
Name of the Vulnerable Software and Affected Versions: 70mai a500s version 1.2.119 Description: The issue is related to incorrect access control, allowing attackers to directly access and delete video files of the driving recorder through ftp and other protocols. Recommendations: For version...
PT-2023-6600 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a permissions bypass in the Bluetooth component of the Android operating system. This could allow a paired Bluetooth device to access a long-term identifier for an...
PT-2023-6031 · Apple · Ios +3
Name of the Vulnerable Software and Affected Versions: tvOS versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17 watchOS versions prior to 10 Description: The issue is related to insufficient access control in the Photos Storage of tvOS, iOS, iPadOS, and watchOS operating...
PT-2023-27896 · Unknown · Mediaplaybackcontroller
Name of the Vulnerable Software and Affected Versions: MediaPlaybackController affected versions not specified Description: The issue is related to a permission control vulnerability in the MediaPlaybackController module. Successful exploitation of this vulnerability may affect availability...
Huawei EMUI Security Vulnerability
Huawei EMUI is an Android-based mobile operating system developed by Chinese company Huawei Huawei. A security vulnerability exists in Huawei EMUI version 13.0.0, EMUI 12.0.0, and EMUI 11.0.1, which stems from an issue with permission control in the XLayout component...
OPENSUSE-SU-2023:0215-1 Security update for perl-Net-Netmask
This update for perl-Net-Netmask fixes the following issues: CVE-2021-29424: Leading zeros are no longer allowed for IPv4 octets. This in some situations allows attackers to bypass access control that is based on IP addresses.boo1184425...
CVE-2023-38958
An access control issue in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to arbitrarily close and open the doors managed by the platform remotely via sending a crafted web request...
PT-2023-13413 · Dell · Dell Xtremio X2 Xms
Name of the Vulnerable Software and Affected Versions: Dell XtremIO X2 XMS versions prior to 6-4-1.11 Description: The issue is related to improper access control, allowing a remote read-only user to potentially exploit it and perform actions such as adding or deleting QoS policies, which are...
SUSE-SU-2023:3015-1 Security update for qemu
This update for qemu fixes the following issues: - CVE-2021-4207: Fixed double fetch in qxlcursor that could lead to heap buffer overflow bsc1198037. - CVE-2023-0330: Fixed DMA reentrancy issue that could lead to stack overflow bsc1207205. - CVE-2023-2861: Fixed improper access control on special...
July 27, 2023, update for Office 2016 (KB5002458)
None None...
CVE-2023-36339
An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request...
PT-2023-26369 · Omnis · Omnis Studio
Name of the Vulnerable Software and Affected Versions: Omnis Studio version 10.22.00 Description: The issue is related to incorrect access control in Omnis Studio. It has a feature to make Omnis libraries "always private", which is supposed to be an irreversible operation. However, due to...
PT-2023-3709 · Unknown · Easyappointments
Name of the Vulnerable Software and Affected Versions: easyappointments versions prior to 1.5.0 Description: The issue is related to improper access control in the easyappointments application, which can allow a remote attacker to gain unauthorized access to restricted functions. This is due to a...
PT-2023-3491 · Citrix · Citrix Secure Access +1
Name of the Vulnerable Software and Affected Versions: Citrix Secure Access formerly Citrix Gateway versions affected versions not specified Citrix Secure Access client for Ubuntu affected versions not specified Description: The issue is related to incorrect code generation management in the acce...
PT-2023-22874 · Samsung · Samsung Pass
Name of the Vulnerable Software and Affected Versions: Samsung Pass versions prior to 4.2.03.1 Description: The issue is related to improper access control in Samsung Pass, allowing physical attackers to access Samsung Pass data on an unlocked device under certain conditions. Recommendations: For...
