The vulnerability of the Kernel-mode operating system driver in Windows allows a hacker to increase their privileges.

The vulnerability of the Kernel-mode operating system drivers in Windows is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of CoreMedia’s component in the macOS operating system allows a intruder to gain unauthorized access to the camera.

The vulnerability of CoreMedia’s macOS component is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the camera...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from improper access control in HAB leading to memory corruption in automotive multimedia...

The vulnerability of the AppSandbox component of the macOS operating system, which allows a hacker to disclose protected information

The vulnerability of the AppSandbox component of the macOS operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a perpetrator to execute arbitrary control commands...

The vulnerability of the AIX operating system, related to deficiencies in access control, allows attackers to escalate their privileges or cause service failures.

The vulnerability of the AIX operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges or cause service interruptions using the qdaemon command...

The vulnerability of the Windows Message Queuing system, which allows a perpetrator to disclose protected information

The vulnerability of Windows’ Message Queuing service stems from deficiencies in the access control mechanism. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

The vulnerability of Windows operating system-based Cryptographic Services allows attackers to disclose protected information.

The vulnerability of Windows operating system-based Cryptographic Services is related to deficiencies in access control mechanisms. Exploiting this vulnerability can allow attackers to disclose protected information...

PT-2024-1148 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the TCP/IP protocol in Windows operating systems, specifically due to shortcomings in the access control mechanism. This allows a remote attack...

The vulnerability of the RADIUS (Remote Authentication in Dial-In User Service) protocol implementation of the FortiMail email security system allows a perpetrator to bypass the authentication process.

The vulnerability of the RADIUS Remote Authentication in Dial-In User Service protocol implementation of the FortiMail email security system is related to deficiencies in access control when the Remotewildcard configuration is used. Exploiting this vulnerability allows a malicious actor to bypass...

The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the command-line interface (CLI) of the Ericsson Evolved Packet Gateway (EPG) allows a attacker to execute arbitrary commands.

The vulnerability of the command-line interface CLI of the Ericsson Evolved Packet Gateway EPG is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...

The vulnerability of the CGI microprogramming interface of Zyxel ATP, USG FLEX, and VPN devices allows a intruder to gain unauthorized access to protected information.

The vulnerability of the CGI microprogramming interface of Zyxel ATP, USG FLEX, and VPN network devices is related to deficiencies in access control for personal information. Exploiting this vulnerability can allow unauthorized actors to gain unauthorized access to protected information...

PT-2023-26030 · Softing · Softing Opc Suite

Name of the Vulnerable Software and Affected Versions: Softing OPC Suite versions 5.25 and before Description: The issue is related to Incorrect Access Control, allowing attackers to obtain sensitive information via weak permissions in the OSF discovery service. This could enable changes to the...

The vulnerability of the TFTP protocol implementation in ASUS RT-AC87U router microsoftware allows a hacker to gain access to read, modify, or delete files.

The vulnerability of the TFTP protocol implementation in ASUS RT-AC87U router microsoftware is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain read, modify, or delete file access rights remotely...

The vulnerability of the command-line interface (CLI) of microprogramming software for network devices such as ZyXEL VPN, USG FLEX, and ATP allows a intruder to gain unauthorized access to protected information.

The vulnerability of the command-line interface CLI of microprogrammed network devices such as ZyXEL VPN, USG FLEX, and ATP is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the software for managing devices in the Zoho ManageEngine Device Control Plus system, related to insufficient access control, allows a perpetrator to circumvent restrictions on USB drives usage.

The vulnerability of the software for managing devices in the Zoho ManageEngine Device Control Plus network is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to circumvent restrictions on the use of USB drives...

The vulnerability of D-Link DIR-820L router’s microprogramming software, due to lack of access control mechanisms, allows a hacker to execute arbitrary code.

The vulnerability of D-Link DIR-820L router microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Photos storage system in operating systems such as tvOS, iOS, iPadOS, and watchOS allows attackers to gain access to photographs stored in the temporary catalog.

The vulnerability of Photos storage in operating systems such as tvOS, iOS, iPadOS, and watchOS is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain access to photos stored in the temporary catalog...

The vulnerability of the file edit_update.php script in the SourceCodester Inventory Management System allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the file editupdate.php script in the SourceCodester Inventory Management System is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2023-20223

A vulnerability in Cisco DNA Center could allow an unauthenticated, remote attacker to read and modify data in a repository that belongs to an internal service on an affected device. This vulnerability is due to insufficient access control enforcement on API requests. An attacker could exploit th...