The vulnerability of the microprogramming software of Zyxel LTE3202-M437 and LTE3316-M604 allows attackers to enhance their privileges and gain access to the device.

The vulnerability of Zyxel LTE3202-M437 and LTE3316-M604 router microprogramming software is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to enhance their privileges and gain access to the device via the TELNET network protocol...

The vulnerability of the IBM AIX operating system’s kernel allows a hacker to execute arbitrary code and gain superuser privileges.

The vulnerability of the IBM AIX operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain superuser privileges and execute arbitrary code...

The vulnerability of the UI Desktop software lies in its lack of access control mechanisms, allowing a perpetrator to execute arbitrary commands.

The vulnerability of the UI Desktop software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

CVE-2022-46890

Weak access control in NexusPHP before 1.7.33 allows a remote authenticated user to edit any post in the forum this is caused by a lack of checks performed by the /forums.php?action=post page...

The vulnerability of the Portainer container management platform, related to deficiencies in access control, allows a hacker to gain full access to the host’s file system.

The vulnerability of the Portainer container management platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full access to the host’s file system...

CVE-2022-4711

The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wprsavemegamenusettings' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to enable and modify Mega Menu...

The vulnerability of FortiOS operating systems, related to access control deficiencies, allows attackers to modify interface settings.

The vulnerability of FortiOS operating systems is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to modify interface settings remotely through APIs...

PT-2022-7091 · Pi-Hole · Pi-Hole

Name of the Vulnerable Software and Affected Versions: Pi-Hole affected versions not specified Description: The issue is related to a lack of validation in the code on a root server path: /admin/scripts/pi-hole/phpqueryads.php. This allows a potential threat actor to perform an unauthorized query...

The vulnerability of the Windows Print Spooler daemon in the Windows operating system allows a hacker to escalate their privileges.

The vulnerability of the Windows Print Spooler service in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to circumvent existing security restrictions and upload or delete certain files.

The vulnerability of the Cisco Identity Services Engine ISE’s web management interface is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and upload or delete certain files using a specially created HTTP...

The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of Group Policy Services in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of Group Policy Services in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the HTTP.sys driver on Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the HTTP.sys driver on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Windows Group Policy Preference Client component of the operating system allows a perpetrator to increase their privileges.

The vulnerability of the Windows Group Policy Preference Client component of the operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the command-line interface (CLI) of microprogramming software for Cisco TelePresence Collaboration Endpoint conference call control devices and Cisco RoomOS operating systems allows a hacker to overwrite arbitrary files.

The vulnerability of the command-line interface CLI of microprogramming software for Cisco TelePresence Collaboration Endpoint conference call controllers and Cisco RoomOS operating systems is related to access control deficiencies. Exploiting this vulnerability could allow a attacker to re-recor...

The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the SuiteCRM system for managing customer relationships, related to deficiencies in access control, allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability of the SuiteCRM customer relationship management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or cause service failures using the username of the...

The vulnerability of the command-line interface of the Brocade Fabric OS allows a hacker to gain increased privileges.

The vulnerability of the command-line interface of the Brocade Fabric OS is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges using commands such as “supportlink”, “firmwaredownload”, “portcfgupload”, and “fosexec”...

The vulnerability of the NIS-HAP11AC wireless access point’s microprogramming software, due to lack of access control mechanisms, allows a intruder to execute arbitrary code.

The vulnerability of the NIS-HAP11AC wireless access point’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through an external port using the Telnet protocol...