1597 matches found
PT-2022-25091 · Unknown · Iiccphonebook
Name of the Vulnerable Software and Affected Versions: IIccPhoneBook versions prior to SMR Dec-2022 Release 1 Description: The issue is related to improper access control, allowing attackers to access certain information from the usim. Recommendations: For versions prior to SMR Dec-2022 Release 1...
CVE-2022-44929
An access control issue in D-Link DVG-G5402SP GE1.03 allows unauthenticated attackers to escalate privileges via arbitrarily editing VoIP SIB profiles...
Improper access control
IXPdata EasyInstall 6.6.14725 contains an access control issue...
CVE-2022-35120
IXPdata EasyInstall 6.6.14725 contains an access control issue...
CVE-2022-35120: Cleartext Storage of Sensitive Information
IXPdata EasyInstall 6.6.14725 contains an access control issue...
CVE-2022-44356
WAVLINK Quantum D4G WL-WN531G3 running firmware versions M31G3.V5030.201204 and M31G3.V5030.200325 has an access control issue which allows unauthenticated attackers to download configuration data and log files...
CVE-2022-44037
An access control issue in APsystems ENERGY COMMUNICATION UNIT ECU-C Power Control Software V4.1NA, V3.11.4, W2.1NA, V4.1SAA, C1.2.2 allows attackers to access sensitive data and execute specific commands and functions with full admin rights without authenticating allows him to perform multiple...
Design/Logic Flaw
An access control issue in APsystems ENERGY COMMUNICATION UNIT ECU-C Power Control Software V4.1NA, V3.11.4, W2.1NA, V4.1SAA, C1.2.2 allows attackers to access sensitive data and execute specific commands and functions with full admin rights without authenticating allows him to perform multiple...
CVE-2022-44356: Files or Directories Accessible to External Parties
WAVLINK Quantum D4G WL-WN531G3 running firmware versions M31G3.V5030.201204 and M31G3.V5030.200325 has an access control issue which allows unauthenticated attackers to download configuration data and log files...
PT-2022-27192 · Wavlink · Wavlink Quantum D4G
Name of the Vulnerable Software and Affected Versions: WAVLINK Quantum D4G WL-WN531G3 versions M31G3.V5030.200325 through M31G3.V5030.201204 Description: The issue allows unauthenticated attackers to download configuration data and log files due to an access control problem. Recommendations: For...
CVE-2022-44356
WAVLINK Quantum D4G WL-WN531G3 running firmware versions M31G3.V5030.201204 and M31G3.V5030.200325 has an access control issue which allows unauthenticated attackers to download configuration data and log files...
CVE-2022-44037
An access control issue in APsystems ENERGY COMMUNICATION UNIT ECU-C Power Control Software V4.1NA, V3.11.4, W2.1NA, V4.1SAA, C1.2.2 allows attackers to access sensitive data and execute specific commands and functions with full admin rights without authenticating allows him to perform multiple...
CVE-2022-41446
CVE-2022-41446 is an access control vulnerability in Record Management System using CodeIgniter v1.0. The issue resides in /Admin/dashboard.php, enabling attackers to access and modify user data due to improper access control. Affects CodeIgniter-based Teachers/Record Management System v1.0; CVSS...
PT-2022-7164 · Manageengine · Manageengine Servicedesk Plus +2
Name of the Vulnerable Software and Affected Versions: ManageEngine ServiceDesk Plus versions 14104 and earlier ManageEngine ServiceDesk Plus MSP versions 14000 and earlier ManageEngine Support Center Plus versions 14000 and earlier ManageEngine Asset Explorer versions 6987 and earlier Descriptio...
CVE-2022-41918 Issue with fine-grained access control of indices backing data streams
OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana. There is an issue with the implementation of fine-grained access control rules document-level security, field-level security and field masking where they are not correctly applied to the indices that back data streams...
CVE-2022-33973
Improper access control in the IntelR WAPI Security software for Windows 10/11 before version 22.2150.0.1 may allow an authenticated user to potentially enable information disclosure via local access...
The vulnerability of D-Link DIR878 router’s microprogramming software, related to the lack of measures taken to clean data at the management level, allows a hacker to execute arbitrary code.
The vulnerability of D-Link DIR878 router’s microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the /bin/proc.cgi parameter...
CVE-2022-43364: Undefined Security Weakness
An access control issue in the password reset page of IP-COM EW9 V15.11.0.149732 allows unauthenticated attackers to arbitrarily change the admin password...
CVE-2022-43364
CVE-2022-43364 affects IP-COM EW9 (firmware V15.11.0.14(9732)). An access-control flaw on the password-reset page allows unauthenticated attackers to arbitrarily change the admin password. CVSSv3.1 metrics in NVD/CVE entries: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N (base score 7.5, HIGH). Attack vect...