3646 matches found
CVE-2022-47559 Cross-Site Request Forgery in Ormazabal products
Lack of device control over web requests in ekorCCP and ekorRCI, allowing an attacker to create customised requests to execute malicious actions when a user is logged in, affecting availability, privacy and integrity...
PT-2023-24895 · Ami · Ami Aptiov
Name of the Vulnerable Software and Affected Versions: AMI AptioV affected versions not specified Description: The issue is related to improper access control in the BIOS of AMI AptioV, which can be exploited via the physical network. A successful exploit may lead to a loss of confidentiality...
CVE-2023-4487
CVE-2023-4487 affects GE Digital CIMPLICITY 2023. A process-control vulnerability could allow a local attacker to insert malicious configuration files into the web server execution path, escalating privileges and gaining full control of the HMI software. Affected product: CIMPLICITY 2023. Impact:...
Huawei HarmonyOS Security Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a privilege control vulnerability in the windows module. Successful exploitation of thi...
icms security breach
iCMS is a software application. An efficient and simple content management system built with PHP and MySQL. A security vulnerability exists in icms version 2.16.1-git, which is caused by an External Control of System or Configuration Setting vulnerability...
USN-6331-1 linux-azure vulnerabilities
It was discovered that the netlink implementation in the Linux kernel did not properly validate policies when parsing attributes in some situations. An attacker could use this to cause a denial of service infinite recursion. CVE-2020-36691 Billy Jheng Bing Jhong discovered that the CIFS network...
An improper access control vulnerability has been discovered in Apache Spark
In all versions of Apache Spark, its standalone resource manager accepts code to execute on a 'master' host, that then runs that code on 'worker' hosts. The master itself does not, by design, execute user code. A specially-crafted request to the master can, however, cause the master to execute co...
IBM Security Guardium Data Encryption 安全漏洞
IBM Security Guardium Data Encryption is a software from International Business Machines IBM that is used to secure sensitive data within an organization. The software protects assets located in cloud, virtual, big data and physical environments by controlling access to databases, files,...
Metal3 Ironic Container 访问控制错误漏洞
The Metal3 Ironic Container is the file required to build Ironic images used by Metal3. An access control error vulnerability exists in Metal3 Ironic Container versions prior to capm3-v1.4.3, which stems from a vulnerability that allows an unauthenticated attacker to access Ironic APIs that are n...
USN-6300-1 linux, linux-aws, linux-aws-5.15, linux-gcp, linux-hwe-5.15, linux-ibm, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities
William Zhao discovered that the Traffic Control TC subsystem in the Linux kernel did not properly handle network packet retransmission in certain situations. A local attacker could use this to cause a denial of service kernel deadlock. CVE-2022-4269 It was discovered that the NTFS file system...
Design/Logic Flaw
Permission control vulnerability in the XLayout component. Successful exploitation of this vulnerability may cause apps to forcibly restart...
CVE-2023-39380
Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause audio devices to perform abnormally...
Improper access control
Improper access control vulnerability in TelephonyUI prior to SMR Aug-2023 Release 1 allows local attacker to connect BLE without privilege...
CVE-2023-30698
Improper access control vulnerability in TelephonyUI prior to SMR Aug-2023 Release 1 allows local attacker to connect BLE without privilege...
CVE-2023-30685
Improper access control vulnerability in Telecom prior to SMR Aug-2023 Release 1 allows local attakcers to change TTY mode...
CVE-2023-24471 Information disclosure via the debug function in assertions in Guardian/CMC before 22.6.2
An access control vulnerability was found, due to the restrictions that are applied on actual assertions not being enforced in their debug functionality. An authenticated user with reduced visibility can obtain unauthorized information via the debug functionality, obtaining data that would normal...
PT-2023-6783 · Intel +6 · Intel Xeon Scalable Processors +6
Name of the Vulnerable Software and Affected Versions: IntelR XeonR Scalable processors affected versions not specified Description: The issue is related to improper access control in some 3rd Generation IntelR XeonR Scalable processors, which may allow a privileged user to potentially enable...
Huawei HarmonyOS Authorization Issues Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a privilege control vulnerability in the audio module, resulting in an abnormal audio...