The vulnerability of the tss_invalidate_io_bitmap function in the Linux operating system allows a hacker to increase their privileges.

The vulnerability of the tssinvalidateiobitmap function in the Linux operating system is related to incorrect default access rights settings. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the rsyslog configuration file in the Ansible configuration management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the rsyslog configuration file in the Ansible configuration management system is related to incorrect default access settings. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the method for creating temporary catalogs in the programming language Apache Groovy, which allows attackers to exploit and disclose protected information

The vulnerability of the method for creating temporary catalogs in the programming language Apache Groovy is related to incorrect default access rights settings. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Django web application software lies in improper default access control settings, which allow attackers to disclose protected information.

The vulnerability of the Django web application framework is related to incorrect default access rights settings. Exploiting this vulnerability allows a malicious actor to disclose protected information remotely...

The vulnerability of the fly-qdm graphical interface is related to the default access settings, which allow attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the fly-qdm graphical shell is related to the access rights settings when connecting via RDP for a user whose graphical console mode is enabled. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause servic...

APISIX Admin API default access token RCE

Apache APISIX has a default, built-in API token edd1c9f034335f136f87ad84b625c8f1 that can be used to access all of the admin API, which leads to remote LUA code execution through the script parameter added in the 2.x version. This module also leverages another vulnerability to bypass the IP...

The vulnerability of the Moxa MXView network control software is related to incorrect default access permissions settings, which allow a violator to execute arbitrary commands with privileges of a system user.

The vulnerability of the Moxa MXView network control software is related to incorrect default access rights settings. Exploiting this vulnerability allows a perpetrator to execute arbitrary commands with privileges of a system user...

The vulnerability of the Google Cloud OS guest-oslogin entry environment, related to incorrect default access permissions settings, allows attackers to escalate their privileges.

The vulnerability of the Google Cloud OS guest-oslogin entry environment is related to incorrect default access settings. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Google Cloud OS guest-oslogin entry environment, related to incorrect default access permissions settings, allows attackers to escalate their privileges.

The vulnerability of the Google Cloud OS guest-oslogin entry environment is related to incorrect default access settings. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the rtslib-fb library is related to incorrect default access rights settings, which allow attackers to execute arbitrary code.

The vulnerability in the /etc/target/saveconfig.json file of the rtslib-fb library is related to incorrect default access permissions settings. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending specially crafted data to the application...

The vulnerability of the Secdo security incident investigation software arises from incorrect default access settings, which allow attackers to elevate their privileges and re-write system files.

The vulnerability of the Secdo security incident investigation software is related to incorrect default access settings for the folder C:\Programdata\Secdo\Logs. Exploiting this vulnerability allows an attacker to increase their privileges and overwrite system files...

The vulnerability of Firefox browser, related to incorrect default access rights, allows a hacker to execute arbitrary code.

The vulnerability of the Firefox browser is related to incorrect default access rights. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the `ieee802154_create` function in the `net/ieee802154/socket.c` module of the AF_IEEE802154 kernel of the Linux operating system, related to default access rights settings, allows an attacker to compromise data integrity.

The vulnerability of the ieee802154create function in the net/ieee802154/socket.c module of the AFIEEE802154 module in the Linux kernel is related to a lack of mechanisms for standard permissions. Exploiting this vulnerability could allow unauthorized access to data integrity...

The vulnerability in the Intel Raid Web Console 2 web console relates to incorrect default access settings, which allow a malicious individual to increase their privileges.

The vulnerability of the Intel Raid Web Console 2 web console is related to incorrect default access settings. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of Intel Graphics Drivers relates to incorrect default access settings, which allow attackers to exploit their privileges.

The vulnerability of Intel Graphics Drivers is related to incorrect default access settings. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Intel PROSet/Wireless WiFi connection utility is related to incorrect default access rights settings, which allow a malicious actor to trigger a service failure and expose protected information.

The vulnerability of the Intel PROSet/Wireless WiFi networking connection tool is related to incorrect default access rights settings. Exploiting this vulnerability could allow a hacker to cause service failures and expose sensitive information...

The vulnerability of the SoMachine Basic software lies in its default access settings, which allow a perpetrator to gain access to the files of the SoMachine Basic resources.

The vulnerability of the SoMachine Basic software is related to incorrect default access settings. Exploiting this vulnerability can allow an attacker to gain access to the files of the SoMachine Basic resources...

PYSEC-2019-121

slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of the contacts of...

CVE-2018-10612

In 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0, user access management and communication encryption is not enabled by default, which could allow an attacker access to the device and sensitive information, including user credentials...

Unspecified vulnerability in Joomla! (CNVD-2019-43398)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A security vulnerability exists in Joomla! that stems from a default ACL configuration that allows administrator-level users to access...