63791 matches found
PT-2024-28538
Name of the Vulnerable Software and Affected Versions Dell PowerScale InsightIQ versions 5.0 through 5.1 Description The issue is related to an Improper Access Control vulnerability. A high-privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of...
CVE-2024-6796 Vulnerability in Baxter Connex Health Portal
In Baxter Connex health portal released before 8/30/2024, an improper access control vulnerability has been found that could allow an unauthenticated attacker to gain unauthorized access to Connex portal's database and/or modify content...
CVE-2024-8584 LEARNING DIGITAL Orca HCM - Missing Authentication
Orca HCM from LEARNING DIGITAL has an Missing Authentication vulnerability, allowing unauthenticated remote attacker to exploit this functionality to create an account with administrator privilege and subsequently use it to log in...
PT-2024-37870 · Baxter · Baxter Connex
Name of the Vulnerable Software and Affected Versions: Baxter Connex health portal versions prior to 8/30/2024 Description: An improper access control issue exists in the Baxter Connex health portal, which could allow an unauthenticated attacker to gain unauthorized access to the portal's databas...
TechExcel Back Office Software 安全漏洞
TechExcel Back Office Software is a back office software from TechExcel, Inc. A security vulnerability exists in versions of TechExcel Back Office Software prior to 1.0.0 that stems from improper access control on certain API endpoints and could allow an authenticated, remote attacker to gain...
Improper access control in SVG preview generation - ownCloud
Improper access control in SVG preview generation may allow an authenticated attacker to gain access to other user’s images...
Baxter Connex Health Portal 安全漏洞
The Baxter Connex Health Portal is a web portal for medical instruments from Baxter USA. A security vulnerability exists in the Baxter Connex Health Portal that stems from the inclusion of an improper access control vulnerability that could allow an unauthenticated attacker to gain unauthorized...
PT-2024-39123 · Techexcel · Techexcel Back Office
Name of the Vulnerable Software and Affected Versions: TechExcel Back Office Software versions prior to 1.0.0 Description: This issue exists due to improper access controls on certain API endpoints, allowing an authenticated remote attacker to exploit the vulnerability by manipulating a parameter...
CVE-2024-42021
An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials...
CVE-2024-42021
An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials...
CVE-2024-42023
An improper access control vulnerability allows low-privileged users to execute code with Administrator privileges remotely...
CVE-2024-42023
An improper access control vulnerability allows low-privileged users to execute code with Administrator privileges remotely...
CVE-2024-42021
An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials...
CVE-2024-42023
An improper access control vulnerability allows low-privileged users to execute code with Administrator privileges remotely...
CVE-2024-42021
An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials...
CVE-2024-42021
CVE-2024-42021 affects Veeam ONE (12.1.x) and earlier 12 builds, where an improper access control allows an attacker with valid access tokens to access saved credentials. The issue is documented in Veeam ONE vulnerability details and is noted as fixed in Veeam ONE 12.2 (build 12.2.0.4093). Affect...
C-MOR Video Surveillance 5.2401 Improper Access Control
Advisory ID: SYSS-2024-024 Product: C-MOR Video Surveillance Manufacturer: za-internet GmbH Affected Versions: 5.2401 Tested Versions: 5.2401 Vulnerability Type: Improper Access Control CWE-284 Risk Level: High Solution Status: Fixed Manufacturer Notification: 2024-04-05 Solution Date: 2024-07-31...
Baxter Connex Health Portal
View CSAF 1. EXECUTIVE SUMMARY CVSS v3.1 10.0 ATTENTION : Exploitable remotely/low attack complexity Vendor : Baxter Equipment : Connex Health Portal Vulnerabilities : SQL Injection, Improper Access Control 2. RISK EVALUATION Successful exploitation of these vulnerabilities could lead to...
CVE-2024-45170
An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper or missing access control, low privileged users can use administrative functions of the C-MOR web interface. It was found out that different functions are only available to administrative users. However, acces...