CVE-2022-29627

An insecure direct object reference IDOR in Online Market Place Site v1.0 allows attackers to modify products that are owned by other sellers...

CVE-2022-29627

An insecure direct object reference IDOR in Online Market Place Site v1.0 allows attackers to modify products that are owned by other sellers...

Online Market Place Site 安全漏洞

Online Market Place Site is an online marketplace site by Carlo Montero Personal Developer. A security vulnerability exists in Online Market Place Site v1.0, which originates from an insecure direct object reference IDOR. The vulnerability can be exploited by an attacker to modify products owned ...

OESA-2022-1679 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointer overlaps with its MMIO region when it transfers the USB packets...

The vulnerability of the Storage Spaces Direct distributed storage function in the Microsoft Windows operating system allows a hacker to exploit their privileges.

The vulnerability of the Storage Spaces Direct distributed storage function in the Microsoft Windows operating system is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2022-23775

TrueStack Direct Connect 1.4.7 has Incorrect Access Control...

CVE-2022-23775

TrueStack Direct Connect 1.4.7 has Incorrect Access Control...

CVE-2022-23775

TrueStack Direct Connect 1.4.7 has Incorrect Access Control...

Improper access control

TrueStack Direct Connect 1.4.7 has Incorrect Access Control...

CVE-2022-23775

TrueStack Direct Connect 1.4.7 is affected by Incorrect Access Control (CVE-2022-23775). The issue is described across multiple sources as affecting version 1.4.7 and has high/critical impact on confidentiality, integrity, and availability. Remediation: upgrade to a fixed version (the vendor refe...

CVE-2022-23775

TrueStack Direct Connect 1.4.7 has Incorrect Access Control...

TrueStack Direct Connect 安全漏洞

TrueStack Direct Connect is a VPN management server from TrueStack USA, Inc. for easily connecting Windows and Mac computers to Windows domain controllers and file servers in the AWS cloud. A security vulnerability exists in TrueStack Direct Connect 1.4.7 that stems from incorrect application...

PT-2022-16261 · Truestack · Truestack Direct Connect

Name of the Vulnerable Software and Affected Versions: TrueStack Direct Connect version 1.4.7 Description: The issue is related to Incorrect Access Control. Recommendations: For version 1.4.7, update to a version that addresses the Incorrect Access Control issue...

CVE-2022-23775: Undefined Security Weakness

TrueStack Direct Connect 1.4.7 has Incorrect Access Control...

Moodle Insecure direct object reference (IDOR) in a calendar web service

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. Insufficient capability checks made it possible to fetch other users' calendar action events...

GHSA-G39C-MCCF-RXJV Moodle Insecure direct object reference (IDOR) in a calendar web service

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. Insufficient capability checks made it possible to fetch other users' calendar action events...

Magento is affected by an improper input validation vulnerability

Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an improper input validation vulnerability. An authenticated attacker can trigger an insecure direct object reference in the V1/customers/me endpoint to achieve information exposure and privile...

GHSA-R345-X8HR-2R9P acf-to-rest-api plugin insecure direct object reference (IDOR) via permalink manipulation

An issue was discovered in the acf-to-rest-api plugin through 3.1.0 for WordPress. It allows an insecure direct object reference via permalinks manipulation, as demonstrated by a wp-json/acf/v3/options/ request that reads sensitive information in the wpoptions table, such as the login and pass...

acf-to-rest-api plugin insecure direct object reference (IDOR) via permalink manipulation

An issue was discovered in the acf-to-rest-api plugin through 3.1.0 for WordPress. It allows an insecure direct object reference via permalinks manipulation, as demonstrated by a wp-json/acf/v3/options/ request that reads sensitive information in the wpoptions table, such as the login and pass...

GHSA-PFXV-66R9-4GQW Magento Insufficient authorization check when adding users to company accounts

An insecure direct object reference IDOR vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 due to insufficient authorizations checks. This can be abused by a user with admin privileges to add users to company accounts or modify existing us...