CVE-2024-20859

CVE-2024-20859 concerns Samsung FactoryCamera on Samsung Mobile devices prior to SMR May-2024 Release 1. The root cause is improper access control, enabling local attackers to take pictures without privileges. Impact is local access to camera output with elevated risk to sensitive information. Re...

CVE-2024-20859

Improper access control vulnerability in FactoryCamera prior to SMR May-2024 Release 1 allows local attackers to take pictures without privilege...

CVE-2024-20858

Improper access control vulnerability in setCocktailHostCallbacks of CocktailBarService prior to SMR May-2024 Release 1 allows local attackers to access information of current application...

CVE-2024-20857

Improper access control vulnerability in startListening of CocktailBarService prior to SMR May-2024 Release 1 allows local attackers to access information of current application...

PT-2024-18767 · Unknown · Cocktailbarservice

Name of the Vulnerable Software and Affected Versions: CocktailBarService versions prior to SMR May-2024 Release 1 Description: The issue is related to an improper access control vulnerability in the startListening function of the CocktailBarService. This vulnerability allows local attackers to...

PT-2024-18775 · Unknown · Darmanagerservice

Name of the Vulnerable Software and Affected Versions: DarManagerService versions prior to SMR May-2024 Release 1 Description: The issue is related to improper access control in DarManagerService, allowing local attackers to monitor system resources. Recommendations: For versions prior to SMR...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices SMR May-2024 Release 1, which originates from an improper access control vulnerability in FactoryCamera...

PT-2024-18769 · Unknown · Factorycamera

Name of the Vulnerable Software and Affected Versions: FactoryCamera versions prior to SMR May-2024 Release 1 Description: The issue is related to improper access control, allowing local attackers to take pictures without the necessary privileges. This could potentially lead to unauthorized acces...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices SMR May-2024 Release 1, which originates from a setCocktailHostCallbacks improper access control vulnerability in...

PT-2024-18768 · Unknown · Cocktailbarservice

Name of the Vulnerable Software and Affected Versions: CocktailBarService versions prior to SMR May-2024 Release 1 Description: The issue is related to an improper access control vulnerability in the setCocktailHostCallbacks function of CocktailBarService. This vulnerability allows local attacker...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices SMR May-2024 Release 1, which originates from an improper access control vulnerability in DarManagerService...

CVE-2024-23351 Improper Access Control in Graphics Linux

Memory corruption as GPU registers beyond the last protected range can be accessed through LPAC submissions...

Access Control Bypass

github.com/pterodactyl/wings is vulnerable to Access Control Bypass. The vulnerability is due to improper access controls within the pull endpoint, allowing authenticated users to evade restrictions and potentially access resources on local networks...

Important: Red Hat Security Advisory: unbound security update

An update for unbound is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security...

VulnCheck KEV: CVE-2023-26347

Adobe ColdFusion versions 2023.5 and earlier and 2021.11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An unauthenticated attacker could leverage this vulnerability to access the administration CFM and CFC endpoints...

GitLab 0 < 16.5.6 / 16.6 < 16.6.4 / 16.7 < 16.7.2 (CVE-2023-6955)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An improper access control vulnerability exists in GitLab Remote Development affecting all versions prior to 16.5.6, 16.6 prior to 16.6.4 and 16.7 prior to 16.7.2. This condition allows an attacker to...

Exploit for Improper Access Control in Joomla Joomla\!

CVE-2023-23752 - Joomla-v4.2.8 Unauthenticated information...

Improper Access Control

Apache ActiveMQ is vulnerable to Improper Access Control. The vulnerability is due to a default configuration which does not secure the API web context, allowing unrestricted use of the Jolokia JMX REST API and the Message REST API. This vulnerability potentially enables anyone to interact with t...

CVE-2024-31967

A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.1 SP8 allows an unauthenticated attacker to conduct an unauthorized access attack due to improper access control. A successful exploit...

CVE-2024-31967

A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.1 SP8 allows an unauthenticated attacker to conduct an unauthorized access attack due to improper access control. A successful exploit...