The vulnerability of FortiOS operating systems, related to access control deficiencies, allows attackers to modify interface settings.

The vulnerability of FortiOS operating systems is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to modify interface settings remotely through APIs...

PT-2022-7091 · Pi-Hole · Pi-Hole

Name of the Vulnerable Software and Affected Versions: Pi-Hole affected versions not specified Description: The issue is related to a lack of validation in the code on a root server path: /admin/scripts/pi-hole/phpqueryads.php. This allows a potential threat actor to perform an unauthorized query...

The vulnerability of the Windows Print Spooler daemon in the Windows operating system allows a hacker to escalate their privileges.

The vulnerability of the Windows Print Spooler service in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to circumvent existing security restrictions and upload or delete certain files.

The vulnerability of the Cisco Identity Services Engine ISE’s web management interface is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and upload or delete certain files using a specially created HTTP...

The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the HTTP.sys driver on Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the HTTP.sys driver on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Group Policy Services in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of Group Policy Services in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows Group Policy Preference Client component of the operating system allows a perpetrator to increase their privileges.

The vulnerability of the Windows Group Policy Preference Client component of the operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the command-line interface (CLI) of microprogramming software for Cisco TelePresence Collaboration Endpoint conference call control devices and Cisco RoomOS operating systems allows a hacker to overwrite arbitrary files.

The vulnerability of the command-line interface CLI of microprogramming software for Cisco TelePresence Collaboration Endpoint conference call controllers and Cisco RoomOS operating systems is related to access control deficiencies. Exploiting this vulnerability could allow a attacker to re-recor...

The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the command-line interface of the Brocade Fabric OS allows a hacker to gain increased privileges.

The vulnerability of the command-line interface of the Brocade Fabric OS is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges using commands such as “supportlink”, “firmwaredownload”, “portcfgupload”, and “fosexec”...

The vulnerability of the NIS-HAP11AC wireless access point’s microprogramming software, due to lack of access control mechanisms, allows a intruder to execute arbitrary code.

The vulnerability of the NIS-HAP11AC wireless access point’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through an external port using the Telnet protocol...

The vulnerability of the SuiteCRM system for managing customer relationships, related to deficiencies in access control, allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability of the SuiteCRM customer relationship management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or cause service failures using the username of the...

PT-2022-5312 · NetGear · Netgear R6220

Name of the Vulnerable Software and Affected Versions: Netgear R6220 version 1.1.0.114 1.0.1 Description: The issue is related to incorrect access control, resulting in a command injection vulnerability. It is also described as a lack of data cleaning measures at the management level, which can b...

The vulnerability of the Apache Struts software platform, related to deficiencies in access control, allows attackers to trigger a service failure.

The vulnerability of the Apache Struts software platform is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to trigger service failures through specially crafted requests with very long parameter names...

PT-2022-5374 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Microsoft Security Support Provider Interface SSPI in the Windows operating system, which is associated with access control weaknesses...

PT-2022-5617 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insufficient access control in the Windows Print Spooler, which can be exploited to elevate privileges. This allows an attacker to affect the system. N...

DRUPAL-CONTRIB-2022-054

The Next.js module provides an inline preview for content. Authenticated requests are made to Drupal to fetch JSON:API content and render them in an iframe from the decoupled Next.js site. The current implementation doesn’t sufficiently check access for fetching data. All requests made to Drupal...

The vulnerability of the zmslapd function in the Zimbra Collaboration Suite’s email management system allows a hacker to execute arbitrary code.

The vulnerability of the zmslapd function in the Zimbra Collaboration Suite email management system is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to execute arbitrary code...