CVE-2023-0345 CVE-2023-0345

The Akuvox E11 secure shell SSH server is enabled by default and can be accessed by the root user. This password cannot be changed by the user...

The vulnerability of the Keycloak identity and access management software lies in its default access rights settings, which allow a malicious actor to execute arbitrary code.

The vulnerability of the Keycloak identity and access management software is related to the default access rights settings. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

PT-2023-1508 · Red Hat · Red Hat Single Sign-On

Name of the Vulnerable Software and Affected Versions: Red Hat Single Sign-On for OpenShift container images affected versions not specified Description: A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled...

The vulnerability of the resource management application for Hitachi Tuning Manager lies in its default access settings, which allow attackers to read and write certain files.

The vulnerability of the Hitachi Tuning Manager resource management application relates to the default access rights settings. Exploiting this vulnerability could allow an attacker to read and write certain files...

SUSE CVE-2005-2801

xattr.c in the ext2 and ext3 file system code for Linux kernel 2.6 does not properly compare the nameindex fields when sharing xattr blocks, which could prevent default ACLs from being applied...

SUSE CVE-2007-2925

The default access control lists ACL in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recursion and allow-query-cache ACLs, which allows remote attackers to make recursive queries and query the cache...

usbguard: Fix unauthorized access via D-Bus

A flaw was found in usbguard. The vulnerability occurs due to the No default access control listACL on some D-Bus methods and leads to unauthorized access. This flaw allows an attacker to access and escape policy configuration...

usbguard: Fix unauthorized access via D-Bus

A flaw was found in usbguard. The vulnerability occurs due to the No default access control listACL on some D-Bus methods and leads to unauthorized access. This flaw allows an attacker to access and escape policy configuration...

usbguard: Fix unauthorized access via D-Bus

A flaw was found in usbguard. The vulnerability occurs due to the No default access control listACL on some D-Bus methods and leads to unauthorized access. This flaw allows an attacker to access and escape policy configuration...

usbguard: Fix unauthorized access via D-Bus

A flaw was found in usbguard. The vulnerability occurs due to the No default access control listACL on some D-Bus methods and leads to unauthorized access. This flaw allows an attacker to access and escape policy configuration...

usbguard: Fix unauthorized access via D-Bus

A flaw was found in usbguard. The vulnerability occurs due to the No default access control listACL on some D-Bus methods and leads to unauthorized access. This flaw allows an attacker to access and escape policy configuration...

The vulnerability of the GMapFP extension of the Joomla! content management system allows attackers to increase their privileges.

The vulnerability of the GMapFP extension in the Joomla! content management system is related to incorrect default access settings. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

The vulnerability of Mozilla Firefox browser and Thunderbird email client is related to incorrect default access rights settings, allowing attackers to circumvent existing security restrictions.

The vulnerability of Mozilla Firefox browser and Thunderbird email client is related to incorrect default access rights settings. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to incorrect default access rights settings, which allow attackers to bypass existing security restrictions.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to incorrect default access rights settings. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

PT-2022-15421 · Kuka · Kuka Systemsoftware V/Kss

Name of the Vulnerable Software and Affected Versions: KUKA SystemSoftware V/KSS versions prior to 8.6.5 Description: The issue is related to improper access control, allowing an unauthorized attacker to directly read and write robot configurations when access control is not available or not...

The vulnerability of the Advantech DeviceOn/iService software lies in improper default access rights settings, which allow attackers to escalate their privileges.

The vulnerability of the Advantech DeviceOn/iService software is related to incorrect default access rights settings. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created file...

The vulnerability of the Advantech DeviceOn/iEdge Server software lies in improper default access rights settings, which allow attackers to escalate their privileges.

The vulnerability of the Advantech DeviceOn/iEdge Server software is related to incorrect default access permissions settings. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created file...

The vulnerability of the Advantech SQ Manager Server software lies in improper default access rights settings, which allow attackers to escalate their privileges.

The vulnerability of the Advantech SQ Manager Server software is related to incorrect default access permissions settings. Exploiting this vulnerability can allow attackers to increase their privileges by using a specially created file...

The vulnerability of the JetBrains Kotlin programming language interpreter arises from incorrect default access rights settings, allowing attackers to exploit the system to disclose protected information.

The vulnerability of the JetBrains Kotlin programming language interpreter is related to incorrect default access rights settings. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...

Library Management System With QR Code 1.0 SQL Injection Vulnerability

Title: Library Management System with QR code Attendance 1.0 SQL Injection Author: Ashish Kumar https://www.linkedin.com/in/ashish-kumar-0b65a3184 Vendor: https://www.sourcecodester.com/users/kingbhob02 Software:...