62215 matches found
Siemens SIMATIC RFID Readers Improper Access Control Vulnerability
SIMATIC RF600 Readers are used for contactless identification of a variety of objects such as shipping containers, pallets, production goods, or often for recording bulk goods.SIMATIC RF1100 is an RFID-based solution for simple and versatile electronic authorization management.SIMATIC RF360R read...
ownCloud < 10.15.0 Multiple Vulnerabilities
ownCloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:owncloud:owncloud"; ifdescription...
The vulnerability of the Node.js software platform, related to improper access control, allows a hacker to execute arbitrary code.
The vulnerability of the Node.js software platform is related to improper access control. Exploiting this vulnerability allows an attacker to execute arbitrary code...
CVE-2024-44571
RELY-PCIe v22.2.1 to v23.1.0 was discovered to contain incorrect access control in the mService function at phpinf.php...
Qemu: 9pfs: improper access control on special files
...
Reedos aiM-Star 安全漏洞
Reedos aiM-Star is a software product from Reedos for mutual fund distribution. A security vulnerability exists in Reedos aiM-Star version 2.0.1 that stems from improper access control to certain API endpoints, which allows an attacker to manipulate parameters to access sensitive information via ...
CVE-2024-45323
An improper access control vulnerability CWE-284 in FortiEDR Manager API 6.2.0 through 6.2.2, 6.0 all versions may allow in a shared environment context an authenticated admin with REST API permissions in his profile and restricted to a specific organization to access backend logs that include...
CVE-2024-39580
Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains an Improper Access Control vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2024-39580
Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains an Improper Access Control vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2024-39580
Dell PowerScale InsightIQ (versions 5.0–5.1) contains an Improper Access Control vulnerability that could enable local privilege elevation by a high-privilege attacker. Root cause is an access-control error impacting elevated rights on local access. Affected product: Dell PowerScale InsightIQ; af...
CVE-2024-39580
Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains an Improper Access Control vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
PT-2024-28538
Name of the Vulnerable Software and Affected Versions Dell PowerScale InsightIQ versions 5.0 through 5.1 Description The issue is related to an Improper Access Control vulnerability. A high-privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of...
CVE-2024-6796 Vulnerability in Baxter Connex Health Portal
In Baxter Connex health portal released before 8/30/2024, an improper access control vulnerability has been found that could allow an unauthenticated attacker to gain unauthorized access to Connex portal's database and/or modify content...
CVE-2024-8584 LEARNING DIGITAL Orca HCM - Missing Authentication
Orca HCM from LEARNING DIGITAL has an Missing Authentication vulnerability, allowing unauthenticated remote attacker to exploit this functionality to create an account with administrator privilege and subsequently use it to log in...
TechExcel Back Office Software 安全漏洞
TechExcel Back Office Software is a back office software from TechExcel, Inc. A security vulnerability exists in versions of TechExcel Back Office Software prior to 1.0.0 that stems from improper access control on certain API endpoints and could allow an authenticated, remote attacker to gain...
PT-2024-37870 · Baxter · Baxter Connex
Name of the Vulnerable Software and Affected Versions: Baxter Connex health portal versions prior to 8/30/2024 Description: An improper access control issue exists in the Baxter Connex health portal, which could allow an unauthenticated attacker to gain unauthorized access to the portal's databas...
Improper access control in SVG preview generation - ownCloud
Improper access control in SVG preview generation may allow an authenticated attacker to gain access to other user’s images...
Baxter Connex Health Portal 安全漏洞
The Baxter Connex Health Portal is a web portal for medical instruments from Baxter USA. A security vulnerability exists in the Baxter Connex Health Portal that stems from the inclusion of an improper access control vulnerability that could allow an unauthenticated attacker to gain unauthorized...