CVE-2023-25791

Missing Authorization vulnerability in Cadus Pro Fontiran allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fontiran: from n/a through 2.1...

CVE-2023-25037

Missing Authorization vulnerability in CodePeople Booking Calendar Contact Form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booking Calendar Contact Form: from n/a through 1.2.34...

CVE-2023-23715

CVE-2023-23715 affects WordPress plugin JobBoardWP – Job Board Listings and Submissions (versions

CVE-2024-53813

Missing Authorization vulnerability in WP Travel WP Travel wp-travel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Travel: from n/a through = 9.6.0...

JetBrains YouTrack 2024.3.51866 Multiple Vulnerabilities (2024_3_51866)

The version of JetBrains YouTrack installed on the remote host is prior to 2024.3.51866. It is, therefore, affected by multiple vulnerabilities as referenced in the 2024351866 advisory. - In JetBrains YouTrack before 2024.3.51866, unauthenticated database backup download was possible via a...

CVE-2024-12235 Shenzhen Dashi Tongzhou Information Technology AgileBPM AuthorizationTokenCheckFilter.java doFilter access control

A vulnerability was found in Shenzhen Dashi Tongzhou Information Technology AgileBPM up to 1.0.0. It has been declared as critical. Affected by this vulnerability is the function doFilter of the file...

Access to Archived Argo Workflows with Fake Token in `client` mode

Summary When using --auth-mode=client, Archived Workflows can be retrieved with a fake or spoofed token via the GET Workflow endpoint: /api/v1/workflows/namespace/name When using --auth-mode=sso, all Archived Workflows can be retrieved with a valid token via the GET Workflow endpoint:...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-7120-2)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7120-2 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

PT-2024-35201 · Ibm · Ibm Concert

Name of the Vulnerable Software and Affected Versions: IBM Concert Software versions 1.0.0 through 1.0.2.1 Description: The issue allows an authenticated user to perform unauthorized actions that should be reserved for administrators due to improper access controls. Recommendations: For versions...

PT-2024-27375 · Unknown · Theme4Press Demo Awesome

Name of the Vulnerable Software and Affected Versions: Theme4Press Demo Awesome versions 1.0.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Theme4Press De...

Vivavis 权限许可和访问控制问题漏洞

Vivavis is an automated control system from Vivavis, Inc. Vivavis suffers from a Permission Permission and Access Control Issues vulnerability that stems from an authorization issue contained in prunsrv.exe that could lead to arbitrary code execution...

TOTOLINK A3600R cstecgi.cgi file setUpgradeFW function buffer overflow vulnerability

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3600R suffers from a buffer overflow vulnerability that originates from improper handling of the FileName parameter in the setUpgradeFW function of the /cgi-bin/cstecgi.cgi file. An attacker...

CVE-2024-21469 Permissions, Privileges, and Access Control issues in TZ Secure OS

Memory corruption when an invoke call and a TEE call are bound for the same trusted application...

June 28, 2024—KB5039304 (OS Build 26100.1000) Preview

None None...

PT-2024-26428 · Yubico · Yubico Security Key Series +3

Name of the Vulnerable Software and Affected Versions: Yubico YubiKey 5 Series versions 5.0.0 through 5.6.x Yubico Security Key Series versions 5.0.0 through 5.6.x Yubico YubiKey Bio Series versions 5.0.0 through 5.6.3 Yubico YubiKey 5 FIPS versions 5.0.0 through 5.7.1 Description: The issue is...

ALLDATA 安全漏洞

ALLDATA is an online resource for automotive OEM information from ALLDATA, Inc. It provides diagnostic and repair information for vehicle manufacturers. A security vulnerability exists in ALLDATA version V0.4.6, which stems from the disclosure of interface documentation for multiple modules, e.g....

IBM FileNet Content Manager Privilege Permission and Access Control Issues Vulnerability

IBM FileNet Content Manager is a content management solution for the FileNet P8 platform from International Business Machines IBM. The solution combines document management with ready-to-use workflow tools to manage images, video, Web content, compliance documents, and more. IBM FileNet Content...

PT-2023-28690 · Dell · Dell Command Configure

Name of the Vulnerable Software and Affected Versions: Dell Command | Configure versions prior to 4.11.0 Description: The issue is related to improper access control, allowing a local malicious user to potentially modify files inside the installation folder during an application upgrade. This cou...

PT-2023-14014 · Intel · Intel In-Band Manageability

Name of the Vulnerable Software and Affected Versions: Intel In-Band Manageability software versions prior to 3.0.14 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations:...

PT-2023-7766 · Nagios · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI affected versions not specified Description: The issue is related to the User macros function in Nagios XI, which has insufficient access control. This can be exploited by a remote attacker to read, modify, or delete data, or cause ...