CVE-2022-27331

An access control issue in Zammad v5.0.3 broadcasts administrative configuration changes to all users who have an active application instance, including settings that should only be visible to authenticated users...

CVE-2021-46167

An access control issue in the authentication module of wizplat PD065 v1.19 allows attackers to access sensitive data and cause a Denial of Service DoS...

PT-2022-12599 · Unknown · Wizplat Pd065

Name of the Vulnerable Software and Affected Versions: wizplat PD065 version 1.19 Description: An access control issue in the authentication module allows attackers to access sensitive data and cause a Denial of Service DoS. Recommendations: For wizplat PD065 version 1.19, consider temporarily...

undertow: potential security issue in flow control over HTTP/2 may lead to DOS

A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of service in the server. The highest threat from this vulnerability is availability...

Microsoft Windows Print Spooler Components权限许可和访问控制问题漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. Microsoft Windows Print Spooler Components is vulnerable to privilege permission and access control issues. The following products and versions are affected:Windows 10 Version 1607 f...

Microsoft Windows Print Spooler Components 权限许可和访问控制问题漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Print Spooler Components due to privilege permission and access control issues. The following products and editions are affected:Windows 1...

CVE-2022-27128

An incorrect access control issue at /admin/runajax.php in zbzcms v1.0 allows attackers to arbitrarily add administrator accounts...

VMware Horizon 权限许可和访问控制问题漏洞

VMware Horizon is a suite of foundation platforms for virtual desktops and applications from VMware. The product enables end users to access all of their virtual desktops, applications and online services through a digital workspace. The VMware Horizon Client is vulnerable to a privilege-granting...

SOURCEFORGE Adminer安全漏洞

SOURCEFORGE Adminer is an application from the American SOURCEFORGE community. It provides database management in a single PHP file. A security vulnerability exists in Adminer version 4.6.2 and prior versions that stems from the presence of improper access control. An attacker can exploit the...

CVE-2022-25521

NUUO v03.11.00 was discovered to contain access control issue...

CVE-2022-25521

NUUO v03.11.00 was discovered to contain access control issue...

CVE-2022-25521

NUUO v03.11.00 is affected by an access control issue (described across multiple sources as a control/authorization problem). The CVE entry itself notes a high-severity impact with a 9.8/10 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H vector, indicating potential exposure of confidential data, integrity, ...

PT-2022-17349 · Nuuo · Nuuo

Name of the Vulnerable Software and Affected Versions: NUUO version 03.11.00 Description: The issue is related to an access control problem. Recommendations: For NUUO version 03.11.00, at the moment, there is no information about a newer version that contains a fix for this issue...

CVE-2022-26254

CVE-2022-26254 affects WoWonder The Ultimate PHP Social Network Platform v4.0.0. The connected Red Hat and CVE sources corroborate a post-authentication bypass of access controls that lets unauthenticated attackers arbitrarily change group ID names. The description consistently states an access c...

CVE-2021-46390

An access control issue in the authentication module of LexarF35 v1.0.34 allows attackers to access sensitive data and cause a Denial of Service DoS. An attacker without access to securely protected data on a secure USB flash drive can bypass user authentication without having any information...

Apple Mac OS X Security Update (HT212979)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Fastfat Driver 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Fastfat Driver with privilege permission and access control issues. The following products and editions are affected:Windows 10 Version 1809 fo...

Microsoft Windows Ancillary Function Driver for WinSock 权限许可和访问控制问题漏洞

Microsoft Windows Ancillary Function Driver for WinSock is an auxiliary function driver for Winsock from Microsoft. WinSock contains an elevation of privilege vulnerability that could be exploited by attackers to execute arbitrary code with elevated privileges...

OPENSUSE-SU-2022:0724-1 Security update for go1.16

This update for go1.16 fixes the following issues: - CVE-2022-23806: Fixed incorrect returned value in crypto/elliptic IsOnCurve bsc1195838. - CVE-2022-23772: Fixed overflow in Rat.SetString in math/big can lead to uncontrolled memory consumption bsc1195835. - CVE-2022-23773: Fixed incorrect acce...

PT-2022-10955 · Zulip · Zulip

Name of the Vulnerable Software and Affected Versions: zulip/zulip versions prior to 4.10 Description: The issue is related to improper access control in the GitHub repository zulip/zulip. Recommendations: For versions prior to 4.10, update to version 4.10 or later to resolve the issue...