1597 matches found
PT-2023-6600 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a permissions bypass in the Bluetooth component of the Android operating system. This could allow a paired Bluetooth device to access a long-term identifier for an...
PT-2023-6031 · Apple · Ios +3
Name of the Vulnerable Software and Affected Versions: tvOS versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17 watchOS versions prior to 10 Description: The issue is related to insufficient access control in the Photos Storage of tvOS, iOS, iPadOS, and watchOS operating...
PT-2023-27896 · Unknown · Mediaplaybackcontroller
Name of the Vulnerable Software and Affected Versions: MediaPlaybackController affected versions not specified Description: The issue is related to a permission control vulnerability in the MediaPlaybackController module. Successful exploitation of this vulnerability may affect availability...
Huawei EMUI Security Vulnerability
Huawei EMUI is an Android-based mobile operating system developed by Chinese company Huawei Huawei. A security vulnerability exists in Huawei EMUI version 13.0.0, EMUI 12.0.0, and EMUI 11.0.1, which stems from an issue with permission control in the XLayout component...
OPENSUSE-SU-2023:0215-1 Security update for perl-Net-Netmask
This update for perl-Net-Netmask fixes the following issues: CVE-2021-29424: Leading zeros are no longer allowed for IPv4 octets. This in some situations allows attackers to bypass access control that is based on IP addresses.boo1184425...
CVE-2023-38958
An access control issue in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to arbitrarily close and open the doors managed by the platform remotely via sending a crafted web request...
PT-2023-13413 · Dell · Dell Xtremio X2 Xms
Name of the Vulnerable Software and Affected Versions: Dell XtremIO X2 XMS versions prior to 6-4-1.11 Description: The issue is related to improper access control, allowing a remote read-only user to potentially exploit it and perform actions such as adding or deleting QoS policies, which are...
SUSE-SU-2023:3015-1 Security update for qemu
This update for qemu fixes the following issues: - CVE-2021-4207: Fixed double fetch in qxlcursor that could lead to heap buffer overflow bsc1198037. - CVE-2023-0330: Fixed DMA reentrancy issue that could lead to stack overflow bsc1207205. - CVE-2023-2861: Fixed improper access control on special...
July 27, 2023, update for Office 2016 (KB5002458)
None None...
CVE-2023-36339: Incorrect Authorization
An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request...
CVE-2023-36339
An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request...
PT-2023-26369 · Omnis · Omnis Studio
Name of the Vulnerable Software and Affected Versions: Omnis Studio version 10.22.00 Description: The issue is related to incorrect access control in Omnis Studio. It has a feature to make Omnis libraries "always private", which is supposed to be an irreversible operation. However, due to...
PT-2023-3709 · Unknown · Easyappointments
Name of the Vulnerable Software and Affected Versions: easyappointments versions prior to 1.5.0 Description: The issue is related to improper access control in the easyappointments application, which can allow a remote attacker to gain unauthorized access to restricted functions. This is due to a...
PT-2023-3491 · Citrix · Citrix Secure Access +1
Name of the Vulnerable Software and Affected Versions: Citrix Secure Access formerly Citrix Gateway versions affected versions not specified Citrix Secure Access client for Ubuntu affected versions not specified Description: The issue is related to incorrect code generation management in the acce...
PT-2023-22874 · Samsung · Samsung Pass
Name of the Vulnerable Software and Affected Versions: Samsung Pass versions prior to 4.2.03.1 Description: The issue is related to improper access control in Samsung Pass, allowing physical attackers to access Samsung Pass data on an unlocked device under certain conditions. Recommendations: For...
CVE-2023-29711: Origin Validation Error
An incorrect access control issue was discovered in Interlink PSG-5124 version 1.0.4, allows attackers to execute arbitrary code via crafted GET request...
CVE-2023-29711
An incorrect access control issue was discovered in Interlink PSG-5124 version 1.0.4, allows attackers to execute arbitrary code via crafted GET request...
CVE-2023-27243
An access control issue in Makves DCAP v3.0.0.122 allows unauthenticated attackers to obtain cleartext credentials via a crafted web request to the product API...
Termenos CWX 安全漏洞
Termenos CWX is a financial services application from Termenos Switzerland. A security vulnerability exists in Termenos CWX version v8.5.6, which originates from a corrupted access control on the registration page and allows an attacker to access sensitive information...
