Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from the Graphics Linux module containing an improper access control issue...

(0Day) (Pwn2Own) ChargePoint Home Flex onboardee Improper Access Control Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the onboardee module. The issue results from improper...

CVE-2024-40777

CVE-2024-40777 describes an out-of-bounds access issue that Apple fixed by improving bounds checking. The vulnerability is addressed in multiple Apple platforms: iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, and macOS Sonoma 14.6. Technical detail in the description indicates t...

Insecure Permissions

github.com/kumahq/kuma is vulnerable to insecure permissions. The vulnerability is due to improper access control that allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

giftstoindia24x7.com Improper Access Control vulnerability OBB-3951222

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

JVN#84326763: Multiple vulnerabilities in SKYSEA Client View

SKYSEA Client View provided by Sky Co.,LTD. is an Enterprise IT Asset Management Tool. SKYSEA Client View contains multiple vulnerabilities listed below. Improper access control in the specific process CWE-266 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Base Score 7.8 CVE-2024-41139 Origin...

CVE-2024-7154

A vulnerability, which was classified as problematic, was found in TOTOLINK A3700R 9.1.2u.5822B20200513. Affected is an unknown function of the file /wizard.html of the component Password Reset Handler. The manipulation leads to improper access controls. It is possible to launch the attack...

CVE-2024-7154

The CVE-2024-7154 entry applies to TOTOLINK A3700R with version 9.1.2u.5822_B20200513. Affected is an unknown function in /wizard.html of the Password Reset Handler. The root cause is improper access controls, enabling remote exploitation. Multiple connected sources corroborate this (e.g., Red Ha...

Improper Access Control

github.com/fabedge/fabedge is vulnerable to Improper Access Control. The vulnerability is due to improperly configured permissions allowing access to sensitive data and escalate privileges by obtaining the service account's token. Attackers can exploit this vulnerability to access sensitive...

CVE-2024-38164

An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network by convincing a user to click on a malicious link...

CVE-2024-38164

An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network by convincing a user to click on a malicious link...

Microsoft GroupMe 访问控制错误漏洞

Microsoft GroupMe is a confidential group text messaging service from Microsoft Corporation USA. Users can group chat and manage SMS messages via SMS or client on their cell phones. An access control error vulnerability exists in Microsoft GroupMe, which stems from improper access control...

Security Advisory 0102

Security Advisory 0102 . CSAF PDF Date: August 9, 2024 Revision | Date | Changes ---|---|--- 1.0 | July 23, 2024 | Initial release 1.1 | August 9, 2024 | Clarification of affected systems The CVE-ID tracking this issue: CVE-2024-27891 CVSSv3.1 Base Score: 5.3...

PT-2024-29525

Name of the Vulnerable Software and Affected Versions LibreChat versions prior to 0.7.4-rc1 Description The issue is related to incorrect access control for message updates. Recommendations For versions prior to 0.7.4-rc1, at the moment, there is no information about a newer version that contains...

hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi

An improper access control flaw was found in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software that may allow a privileged user to enable escalation of privilege via local access...

VulnCheck KEV: CVE-2024-27348

Apache HugeGraph-Server contains an improper access control vulnerability that could allow a remote attacker to execute arbitrary code...

PT-2024-37833 · 2100 Technology · Electronic Official Document Management System

Name of the Vulnerable Software and Affected Versions: Electronic Official Document Management System from 2100 TECHNOLOGY affected versions not specified Description: The issue concerns improper implementation of access control in the system, allowing remote attackers with regular privileges to...

Exploit for Improper Access Control in Glpi-Project Glpi

CVE-2024-37147-PoC...

CVE-2024-5257 Improper Access Control in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4 and from 17.1 prior to 17.1.2 where a Developer user with admincomplianceframework custom role may have been able to modify the URL for a group namespace...

CVE-2024-5257 Improper Access Control in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4 and from 17.1 prior to 17.1.2 where a Developer user with admincomplianceframework custom role may have been able to modify the URL for a group namespace...