CVE-2024-47481

Dell Data Lakehouse, versions 1.0.0.0, 1.1.0., contains an Improper Access Control vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Denial of service...

CVE-2024-10353

A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file /admin-dashboard. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the...

Dell Data Lakehouse 访问控制错误漏洞

Dell Data Lakehouse is a fully integrated data platform from Dell USA Inc. An access control error vulnerability exists in Dell Data Lakehouse versions 1.0.0.0 and 1.1.0.0, which stems from the inclusion of an Improper Access Control Vulnerability, which could be exploited by an unauthenticated...

CVE-2024-10353 SourceCodester Online Exam System admin-dashboard access control

A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file /admin-dashboard. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2024-9692 Improper Access Control in Input in VIMESA VHF/FM Transmitter Blue Plus

VIMESA VHF/FM Transmitter Blue Plus is suffering from a Denial-of-Service DoS vulnerability. An unauthenticated attacker can issue an unauthorized HTTP GET request to the unprotected endpoint 'doreboot' and restart the transmitter operations...

CVE-2024-9692 Improper Access Control in Input in VIMESA VHF/FM Transmitter Blue Plus

VIMESA VHF/FM Transmitter Blue Plus is suffering from a Denial-of-Service DoS vulnerability. An unauthenticated attacker can issue an unauthorized HTTP GET request to the unprotected endpoint 'doreboot' and restart the transmitter operations...

VIMESA VHF/FM Transmitter Blue Plus

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 6.9 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : VIMESA Equipment : VHF/FM Transmitter Blue Plus Vulnerability : Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could...

PT-2024-33145 · Unknown · Dreamcatcher Life

Name of the Vulnerable Software and Affected Versions: DreamCatcher Life version 1.8.7 Description: The issue is related to incorrect access control in the firmware update and download processes. This allows attackers to access sensitive information by analyzing the code and data within the APK...

PT-2024-33139 · Unknown · Xiao He Smart

Name of the Vulnerable Software and Affected Versions: XIAO HE Smart version 4.3.1 Description: The issue is related to incorrect access control, allowing attackers to access sensitive information by analyzing the code and data within the APK file. Recommendations: For XIAO HE Smart version 4.3.1...

PT-2024-33142 · Sylvania · Sylvania Smart Home

Name of the Vulnerable Software and Affected Versions: Sylvania Smart Home version 3.0.3 Description: The issue is related to incorrect access control in the firmware update and download processes, allowing attackers to access sensitive information by analyzing the code and data within the APK...

Sylvania Smart Home 安全漏洞

Sylvania Smart Home is a smart home control software from Sylvania. A security vulnerability exists in Sylvania Smart Home version v3.0.3, which stems from incorrect access control during firmware updates and downloads, and could allow an attacker to access sensitive information by analyzing code...

IVY Smart 安全漏洞

IVY Smart is a smart home application from Shenzhen Aiwei IOT Technology Co. A security vulnerability exists in IVY Smart version v4.5.0, which stems from incorrect access control during firmware updates and downloads...

PT-2024-29465 · Unknown · Money Manager Ex Webapp

Name of the Vulnerable Software and Affected Versions: Money Manager EX WebApp versions 1.2.2 Description: The issue is related to Incorrect Access Control. The redirect if not loggedin function in functions security.php fails to terminate script execution after redirecting unauthenticated users...

Unauthorized Access

org.sakaiproject.kernel, sakai-kernel-impl is vulnerable to Unauthorized access. The vulnerability is due to improper access control mechanisms that allow kernel users with type roleview to log in as normal users, allowing attackers to gain unauthorized access to the system...

CVE-2024-48903

An improper access control vulnerability in Trend Micro Deep Security Agent 20 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

GHSA-4GP9-FF99-J6VJ Umbraco CMS Improper Access Control Vulnerability Allows Low-Privilege Users to Access Webhook API

Impact An improper access control issue has been identified, allowing low-privilege users to access the webhook API and retrieve information that should be restricted to users with access to the settings section...

Improper Access Control

github.com/landlock-lsm/go-landlock is vulnerable to Improper Access Control. The vulnerability is due to the incorrect handling of TCP bind and connect operations in the BestEffort mode. An attacker can bypass intended networking through landlock.V4, landlock.V5, or self-configured restrictions ...

Trend Micro Deep Security Agent 安全漏洞

Trend Micro Deep Security Agent is a security solution from Trend Micro, Inc. that is primarily used to protect data and applications in servers, virtual machines, and cloud environments. A security vulnerability exists in versions prior to Trend Micro Deep Security Agent 20.0.1-17380, which stem...

GStreamer 安全漏洞

GStreamer is a set of frameworks for handling streaming media. gst-rtsp-server is a GStreamer-based RTSP Real-Time Stream Protocol server. A security vulnerability exists in GStreamer version 1.25.0, which stems from improper access control and allows remote attackers to cause a denial of service...

PT-2024-31132 · Unknown +1 · Gstreamer Rtsp Server +1

Name of the Vulnerable Software and Affected Versions: GStreamer RTSP server version 1.25.0 Description: The issue is related to incorrect access control in the GStreamer RTSP server, which allows remote attackers to cause a denial of service via a series of specially crafted hexstream requests...