CVE-2024-56195 Apache Traffic Server: Intercept plugins are not access controlled

Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.8, from 10.0.0 through 10.0.3. Users are recommended to upgrade to version 9.2.9 or 10.0.4, which fixes the issue...

CVE-2024-56195

Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.8, from 10.0.0 through 10.0.3. Users are recommended to upgrade to version 9.2.9 or 10.0.4, which fixes the issue...

CVE-2024-56196

Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 10.0.0 through 10.0.3. Users are recommended to upgrade to version 10.0.4, which fixes the issue...

CVE-2025-20924

Improper access control in Samsung Notes prior to version 4.4.26.71 allows physical attackers to access data across multiple user profiles...

CVE-2025-20911

Improper access control in semwifi service prior to SMR Mar-2025 Release 1 allows privileged local attackers to update MAC address of Galaxy Watch...

CVE-2025-20903

Improper access control in SecSettingsIntelligence prior to SMR Mar-2025 Release 1 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...

CVE-2025-20923

CVE-2025-20923 : Affects Galaxy Wearable. The issue is an access control flaw in Galaxy Wearable prior to version 2.2.61.24112961, allowing local attackers to launch arbitrary activities with Galaxy Wearable privileges. The vulnerability is described as an improper access control error; no exploi...

CVE-2025-20923

Improper access control in Galaxy Wearable prior to version 2.2.61.24112961 allows local attackers to launch arbitrary activity with Galaxy Wearable privilege...

CVE-2025-20923

Improper access control in Galaxy Wearable prior to version 2.2.61.24112961 allows local attackers to launch arbitrary activity with Galaxy Wearable privilege...

CVE-2025-20911

Improper access control in semwifi service prior to SMR Mar-2025 Release 1 allows privileged local attackers to update MAC address of Galaxy Watch...

CVE-2025-20911

CVE-2025-20911 describes improper access control in the Samsung sem_wifi service before SMR Mar-2025 Release 1, enabling privileged local attackers to update the MAC address of Galaxy Watch devices. Core details in public feeds indicate the issue is tied to a local-privilege scenario with high pr...

Apache Traffic Server 访问控制错误漏洞

Apache Traffic Server ATS is the United States Apache Apache Foundation's set of scalable HTTP proxy and caching server. A security vulnerability exists in Apache Traffic Server versions 10.0.0 through 10.0.3, and no detailed vulnerability details are provided at this time...

PT-2025-9894

Name of the Vulnerable Software and Affected Versions Galaxy Wearable versions prior to 2.2.61.24112961 Description The issue is related to improper access control, allowing local attackers to launch arbitrary activity with Galaxy Wearable privilege. Recommendations For versions prior to...

PT-2025-9878

Name of the Vulnerable Software and Affected Versions SecSettingsIntelligence versions prior to SMR Mar-2025 Release 1 Description The issue is related to improper access control, allowing local attackers to launch privileged activities. User interaction is required to trigger this issue...

CVE-2025-20923: Undefined Security Weakness

Improper access control in Galaxy Wearable prior to version 2.2.61.24112961 allows local attackers to launch arbitrary activity with Galaxy Wearable privilege...

CVE-2024-56196: Improper Access Control

Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 10.0.0 through 10.0.3. Users are recommended to upgrade to version 10.0.4, which fixes the issue...

CVE-2024-56195: Improper Access Control

Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.8, from 10.0.0 through 10.0.3. Users are recommended to upgrade to version 9.2.9 or 10.0.4, which fixes the issue...

CVE-2025-25381: Improper Access Control

Incorrect access control in the KSRTC AWATAR app of Karnataka State Road Transport Corporation v1.3.0 allows to view sensitive information such as usernames and passwords...

CVE-2025-20903: Undefined Security Weakness

Improper access control in SecSettingsIntelligence prior to SMR Mar-2025 Release 1 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability...

SAMSUNG SecSettingsIntelligence 安全漏洞

SAMSUNG SecSettingsIntelligence is an intelligent settings service from Samsung South Korea. A security vulnerability exists in SAMSUNG SecSettingsIntelligence SMR prior to Mar-2025 Release 1, which stems from improper access control and could lead to a local attacker initiating privileged activi...