63948 matches found
Security Bulletin: Multiple vulnerabilities in IBM MQ affect IBM Robotic Process Automation for Cloud Pak
Summary Multiple vulnerabilities in IBM MQ affect IBM Robotic Process Automation for Cloud Pak. IBM MQ is used as base imaged for IBM Robotic Process Automation for Cloud Pak messaging. This bulletin identifies the fixes required to address these vulnerabilites. Vulnerability Details...
Online Shoe Store Improper Access Control Vulnerability
Online Shoe Store is an online shoe store system. Online Shoe Store has an Improper Access Control vulnerability that stems from multiple parameters in the /admin/index.php page containing an improper access control vulnerability. No details of the vulnerability are available at this time...
CVE-2024-13240
Improper Access Control vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.05...
CVE-2024-13240
Open Social in Drupal is affected by an improper access control issue that allows collecting data from common resource locations. Affected versions are 0.0.0 through 12.04, with remediation recommended by PT-2024-10359 to update to a version later than 12.04. The issue is described across multipl...
CVE-2024-13240 Open Social - Moderately critical - Access bypass - SA-CONTRIB-2024-004
Improper Access Control vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.05...
Azure Marketplace SaaS Resources Information Disclosure Vulnerability
Improper access control in Azure SaaS Resources allows an authorized attacker to disclose information over a network...
Improper Access Control
nilsteampassnet/teampass is vulnerable to Improper access control. The vulnerability is due to the application failing to properly validate whether a folder belongs to the user's allowed folders list defined by an admin, allowing an attacker to bypass access restrictions and access unauthorized...
CVE-2024-13211
A vulnerability was found in SingMR HouseRent 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file src/main/java/com/house/wym/controller/AdminController.java. The manipulation leads to improper access controls. The attack may be launched remotely...
CVE-2024-13200
A vulnerability, which was classified as critical, was found in wander-chu SpringBoot-Blog 1.0. This affects the function preHandle of the file src/main/java/com/my/blog/website/interceptor/BaseInterceptor.java of the component HTTP POST Request Handler. The manipulation leads to improper access...
Improper Access Control
TeamPass is vulnerable to improper access control. The vulnerability is due to improper access control, as the application fails to verify whether a "mailmeaka actionmail" operation is performed by an administrator or manager, allowing an attacker to perform unauthorized operations...
HouseRent 安全漏洞
HouseRent is a house rental management system by Mr.W individual developer. An auto-caching JWK-Set HTTP client is provided. A security vulnerability exists in HouseRent version 1.0, which stems from unknown functionality in the file src/main/java/com/house/wym/controller/AdminController.java tha...
Drupal 安全漏洞
Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal Open Social prior to version 12.05, which stems from the inclusion of an improper access control vulnerability...
CVE-2024-56448
Vulnerability of improper access control in the home screen widget module Impact: Successful exploitation of this vulnerability may affect availability...
PT-2025-3292 · Huawei · Emui +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns improper access control in the home screen widget module. Successful exploitation of this vulnerability may affect availability. Ther...
CVE-2024-40749
Improper Access Controls allows access to protected views...
CVE-2025-22621
CVE-2025-22621 affects Splunk App for SOAR, versions 1.0.67 and lower. The root cause is a documentation-guided addition of the admin_all_objects capability to the splunk_app_soar role, potentially granting high-privilege access to a low-privileged user and compromising access control. The CVE is...
CVE-2025-22621 Privilege escalation for users who hold the “splunk_app_soar“ role in the Splunk App for SOAR
In versions 1.0.67 and lower of the Splunk App for SOAR, the Splunk documentation for that app recommended adding the adminallobjects capability to the splunkappsoar role. This addition could lead to improper access control for a low-privileged user that does not hold the "admin" Splunk roles...
Splunk App for SOAR 安全漏洞
Splunk App for SOAR is a suite of data collection and analytics software from Splunk, Inc. in the United States. A security vulnerability exists in Splunk App for SOAR version 1.0.67 and earlier, which stems from improper access control...