62221 matches found
CVE-2024-6782 Calibre Remote Code Execution
Improper access control in Calibre 6.9.0 7.14.0 allow unauthenticated attackers to achieve remote code execution...
CVE-2024-6782
Improper access control in Calibre 6.9.0 7.14.0 allow unauthenticated attackers to achieve remote code execution...
cetsd.iitj.ac.in Improper Access Control vulnerability OBB-3953639
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
bioschool.iitd.ac.in Improper Access Control vulnerability OBB-3953629
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
cart.iitd.ac.in Improper Access Control vulnerability OBB-3953628
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-33027 Improper Access Control in Graphics Linux
Memory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table...
Qualcomm Chipsets 安全漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from the Graphics Linux module containing an improper access control issue...
(0Day) (Pwn2Own) ChargePoint Home Flex onboardee Improper Access Control Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of ChargePoint Home Flex charging stations. Authentication is not required to exploit this vulnerability. The specific flaw exists within the onboardee module. The issue results from improper...
Insecure Permissions
github.com/kumahq/kuma is vulnerable to insecure permissions. The vulnerability is due to improper access control that allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
giftstoindia24x7.com Improper Access Control vulnerability OBB-3951222
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
JVN#84326763: Multiple vulnerabilities in SKYSEA Client View
SKYSEA Client View provided by Sky Co.,LTD. is an Enterprise IT Asset Management Tool. SKYSEA Client View contains multiple vulnerabilities listed below. Improper access control in the specific process CWE-266 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Base Score 7.8 CVE-2024-41139 Origin...
Improper Access Control
github.com/fabedge/fabedge is vulnerable to Improper Access Control. The vulnerability is due to improperly configured permissions allowing access to sensitive data and escalate privileges by obtaining the service account's token. Attackers can exploit this vulnerability to access sensitive...
CVE-2024-38164
An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network by convincing a user to click on a malicious link...
CVE-2024-38164
An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network by convincing a user to click on a malicious link...
Security Advisory 0102
Security Advisory 0102 . CSAF PDF Date: August 9, 2024 Revision | Date | Changes ---|---|--- 1.0 | July 23, 2024 | Initial release 1.1 | August 9, 2024 | Clarification of affected systems The CVE-ID tracking this issue: CVE-2024-27891 CVSSv3.1 Base Score: 5.3...
PT-2024-29525
Name of the Vulnerable Software and Affected Versions LibreChat versions prior to 0.7.4-rc1 Description The issue is related to incorrect access control for message updates. Recommendations For versions prior to 0.7.4-rc1, at the moment, there is no information about a newer version that contains...
hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi
An improper access control flaw was found in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software that may allow a privileged user to enable escalation of privilege via local access...
VulnCheck KEV: CVE-2024-27348
Apache HugeGraph-Server contains an improper access control vulnerability that could allow a remote attacker to execute arbitrary code...
PT-2024-37833 · 2100 Technology · Electronic Official Document Management System
Name of the Vulnerable Software and Affected Versions: Electronic Official Document Management System from 2100 TECHNOLOGY affected versions not specified Description: The issue concerns improper implementation of access control in the system, allowing remote attackers with regular privileges to...
