3670 matches found
VMware Carbon Black App Control 授权问题漏洞
Vmware VMware Carbon Black App Control is an application control product from Vmware USA. It is used to lock down servers and critical systems to prevent unwanted changes. An authorization issue vulnerability exists in VMware Carbon Black App Control 8.0, 8.1, 8.5 before 8.5.8, and 8.6 before...
Samsung Notes Incorrect Access Control Vulnerability
Samsung Notes is a Notes series of smartphone products from Samsung South Korea. An incorrect access control vulnerability exists in Samsung Notes, which can be exploited by an attacker to access local files...
WESEEK GROWI Access Control Error Vulnerability (CNVD-2021-43487)
Weseek GROWI is a suite of team collaboration software from Weseek Japan. An access control error vulnerability exists in WESEEK GROWI that originates from an error in the handling of authentication requests. A remote, authenticated attacker could exploit the vulnerability to view unauthorized...
CVE-2021-25397
An improper access control vulnerability in TelephonyUI prior to SMR MAY-2021 Release 1 allows local attackers to write arbitrary files of telephony process via untrusted applications...
Improper access control
A smart camera product of ZTE is impacted by a permission and access control vulnerability. Due to the defect of user permission management by the cloud-end app, users whose sharing permissions have been revoked can still control the camera, such as restarting the camera, restoring factory...
CVE-2021-22336
There is an Improper Control of Generation of Code vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause denial of security services on a rooted device...
CVE-2021-32460
The Trend Micro Maximum Security 2021 v17 consumer product is vulnerable to an improper access control vulnerability in the installer which could allow a local attacker to escalate privileges on a target machine. Please note than an attacker must already have local user privileges and access on t...
FortiWLC - Improper access control
An improper access control CWE-284 vulnerability in FortiWLC may allow an unauthenticated and remote attacker to access certain areas of the web management CGI functionality by just specifying the correct URL. The vulnerability applies only to limited CGI resources and might allow the...
The vulnerability of the Titanium CNC system, related to privilege management errors, allows a hacker to elevate their privileges within the system and execute arbitrary code.
The vulnerability of the Titanium CNC system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges within the system and execute arbitrary code...
3S-Smart Software Solutions CODESYS Control runtime system buffer overflow vulnerability
3S-Smart Software Solutions CODESYS Control runtime system is an application system from 3S-Smart Software Solutions, Germany. It is used for the conversion of any type of smart device into an IEC 61131-3 controller. A buffer overflow vulnerability exists in the 3S-Smart Software Solutions CODESY...
CVE-2021-29659
ownCloud 10.7 has an incorrect access control vulnerability, leading to remote information disclosure. Due to a bug in the related API endpoint, the attacker can enumerate all users in a single request by entering three whitespaces. Secondary, the retrieval of all users on a large instance could...
CVE-2020-36197
An improper access control vulnerability has been reported to affect earlier versions of Music Station. If exploited, this vulnerability allows attackers to compromise the security of the software by gaining privileges, reading sensitive information, executing commands, evading detection, etc. Th...
CVE-2020-36197
CVE-2020-36197 covers multiple QNAP products (Music Station and related MalwareRemover) with an improper access control/unauthorized file write and pre-auth command-injection chain. Affected: Music Station versions prior to 5.3.16 on QTS 4.5.2; prior to 5.2.10 on QTS 4.3.6; prior to 5.1.14 on QTS...
MOXA NPort IA5150A 访问控制错误漏洞
MOXA Moxa NPort IA5150A Series is an industrial control device server from China Moxa MOXA. for 1-port RS-232 / 422/485 industrial automation device server with serial/LAN/power surge protection, two 10/100BaseTX ports with single IP, and operating temperature from 0 to 60°C. The NPort IA5150A...
CVE-2021-26797
An access control vulnerability in Hame SD1 Wi-Fi firmware =V.20140224154640 allows an attacker to get system administrator through an open Telnet service...
CVE-2021-26797
An access control vulnerability in Hame SD1 Wi-Fi firmware =V.20140224154640 allows an attacker to get system administrator through an open Telnet service...
CVE-2021-20693
Improper access control vulnerability in Gurunavi App for Android ver.10.0.10 and earlier and for iOS ver.11.1.2 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...
Sonatype Nexus Repository Manager Pro Incorrect Access Control Vulnerability
Nexus Repository Manager is a repository manager from Sonatype that lets you proxy, collect, and manage your dependencies so you don't have to deal with a series of JARs as often, allowing you to distribute your software with ease.OSS is the open-source, free version, and Pro is the professional,...
Lex Li vscode-restructuredtext access control error vulnerability
Lex Li vscode-restructuredtext is a Lex Li open source application. This extension provides rich reStructuredText language support for Visual Studio Code.An access control error vulnerability exists in versions prior to Lex Li vscode-restructuredtext 146.0.0, which stems from the inclusion of an...