GitLab 10.5 < 13.0.12 / 13.1 < 13.1.6 / 13.2 < 13.2.3 (CVE-2020-13282)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - For GitLab before 13.0.12, 13.1.6, 13.2.3 after a group transfer occurs, members from a parent group keep their access level on the subgroup leading to improper access. CVE-2020-13282 Note that Nessus...

PT-2024-25335 · Unknown · Ukrsolution Barcode Scanner With Inventory & Order Manager

Name of the Vulnerable Software and Affected Versions: UkrSolution Barcode Scanner with Inventory & Order Manager versions 1.5.3 and earlier Description: The issue is related to Improper Privilege Management, which allows Privilege Escalation. Recommendations: For versions 1.5.3 and earlier, upda...

The vulnerability of UEFI (BIOS) in Huawei personal computers allows a hacker to gain unauthorized access to arbitrary functions.

The vulnerability of UEFI BIOS in Huawei’s personal computers is related to improper access control. Exploiting this vulnerability can allow a hacker to gain unauthorized access to arbitrary functions...

GitLab 13.7 < 13.11.6 / 13.12 < 13.12.6 / 14.0 < 14.0.2 (CVE-2021-22240)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Improper access control in GitLab EE versions 13.11.6, 13.12.6, and 14.0.2 allows users to be created via single sign on despite user cap being enabled CVE-2021-22240 Note that Nessus has not tested f...

CVE-2023-45217

Improper access control in IntelR Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-40071

Improper access control in some IntelR GPA software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33162

Improper access control in some IntelR Ethernet Adapters and IntelR Ethernet Controller I225 Manageability firmware may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-40071

Improper access control in some IntelR GPA software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-40071

CVE-2023-40071 refers to an improper access control vulnerability in Intel Graphics Performance Analyzers (GPA) software installers prior to 2023.3. An authenticated local user could potentially escalate privileges. The issue is associated with Intel GPA software/Framework before 2023.3, and Inte...

CVE-2022-37410

Improper access control for some IntelR Thunderbolt driver software before version 89 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-43487

Improper access control in some IntelR CST before version 2.1.10300 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-4263 Improper Access Control in mlflow/mlflow

A broken access control vulnerability exists in mlflow/mlflow versions before 2.10.1, where low privilege users with only EDIT permissions on an experiment can delete any artifacts. This issue arises due to the lack of proper validation for DELETE requests by users with EDIT permissions, allowing...

PT-2024-12838

Name of the Vulnerable Software and Affected Versions: IntelR Power Gadget software for macOS affected versions not specified Description: The issue is related to improper access control in IntelR Power Gadget software for macOS, which may allow an authenticated user to potentially enable...

Intel Thunderbolt DCH drivers 安全漏洞

Intel Thunderbolt DCH drivers is a driver for Windows from Intel Corporation USA. A security vulnerability exists in Intel Thunderbolt DCH drivers prior to version 89, which stems from an improper access control issue. It could allow an authenticated user to escalate privileges via local access...

Intel Power Gadget 安全漏洞

Intel Power Gadget is a software-based power consumption monitoring tool from Intel Corporation for Intel Core processors. A security vulnerability exists in Intel Power Gadget that stems from an improper access control issue. It could allow an authenticated user to escalate privileges via local...

PT-2024-13083 · Intel · Intel(R) Cst

Name of the Vulnerable Software and Affected Versions: IntelR CST versions prior to 2.1.10300 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable denial of service via local access. Recommendations: For versions prior to...

Intel Power Gadget 安全漏洞

Intel Power Gadget is a software-based power consumption monitoring tool for Intel Core processors from Intel Corporation USA. A security vulnerability exists in Intel Power Gadget that stems from an improper access control issue. It could allow an authenticated user to escalate privileges via...

Intel Ethernet Controller Administrative 安全漏洞

Intel Ethernet Controller Administrative is a tool from Intel Corporation USA. A security vulnerability exists in Intel Ethernet Controller Administrative prior to version 28.3 that stems from an improper access control issue. It could allow an authenticated user to escalate privileges via local...

PT-2024-13132 · Intel · Intel(R) Gpa Framework

Name of the Vulnerable Software and Affected Versions: IntelR GPA Framework software versions prior to 2023.3 Description: The issue is related to improper access control in some IntelR GPA Framework software installers, which may allow an authenticated user to potentially enable escalation of...

Intel Consolidated Build Infrastructure 安全漏洞

Intel Consolidated Build Infrastructure is a comprehensive build infrastructure from Intel Corporation USA. A security vulnerability previously existed in Intel Consolidated Build Infrastructure version 2.1.10300, which stemmed from an improper access control issue. It could allow authenticated...