168 matches found
CVE-2023-23438
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions...
CVE-2023-23429
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions...
Honor LGE-AN00 Security Vulnerability
Honor LGE-AN00 is a smartphone from China-based Honor Honor. The Honor LGE-AN00 suffers from a security vulnerability that stems from a misassignment of privileges vulnerability, which can be successfully exploited to cause the device to service abnormality...
PT-2023-18936
Name of the Vulnerable Software and Affected Versions Honor products affected versions not specified Description The issue is related to incorrect privilege assignment, which could lead to device service exceptions if successfully exploited. Recommendations At the moment, there is no information...
CVE-2023-41806 Misassignment of privileges can cause DOS attack
Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability causes that a bad privilege assignment could cause a DOS attack that affects the availability of the Pandora FMS server. This issue affects Pandora FMS: from 700 through 773...
The vulnerability of the Cisco Application Policy Infrastructure Controller, related to the improper assignment of permissions to critical resources, allows a perpetrator to read, modify, or delete access policies for arbitrary users.
The vulnerability of the Cisco Application Policy Infrastructure Controller in the information infrastructure management system is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows a malicious actor to remotely read, modify, or delete...
IBM Robotic Process Automation 安全漏洞
IBM Robotic Process Automation is a robotic process automation product from International Business Machines IBM. It helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. A security vulnerability exists in IBM Robotic Process Automation versions...
The vulnerability of the SCADA system SIMATIC WinCC, related to the incorrect assignment of permissions for critical resources, allows a intruder to execute arbitrary codes or increase their privileges.
The vulnerability of the SCADA system SIMATIC WinCC is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an intruder to execute arbitrary code or increase their privileges...
Cilium 授权问题漏洞
Cilium is an open source software. It is used to provide and transparently secure network connectivity and load balancing between application workloads, such as application containers or processes. An authorization issue vulnerability exists in Cilium version 1.11.14 and earlier, 1.12.7 and...
The vulnerability of the APC Easy UPS Online Monitoring Software lies in the improper assignment of permissions for critical resources, allowing attackers to increase their privileges.
The vulnerability of the APC Easy UPS Online Monitoring Software relates to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the PowerScale OneFS operating system, related to user being assigned to an inappropriate group, allows attackers to escalate their privileges and expose sensitive information.
The vulnerability of the PowerScale OneFS operating system is related to the user being assigned to an inappropriate group. Exploiting this vulnerability allows a malicious actor to increase their privileges and expose sensitive information...
PYSEC-2023-53
vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. Assigning existing users to a different organizations is currently possible. It may lead to unintended access: if a user from organization A is accidentally assigned to organization B, they will retain...
Huawei HiLink AI Life 安全漏洞
Huawei HiLink AI Life is a whole-house smart solution from Huawei, a Chinese company. A security vulnerability exists in Huawei HiLink AI Life. The vulnerability stems from a misassignment of privileges in the software, which allows an attacker to access restricted functionality and affects the...
SUSE CVE-2021-25318
A Incorrect Permission Assignment for Critical Resource vulnerability in Rancher allows users in the cluster to modify resources they should not have access to. This issue affects: Rancher versions prior to 2.5.9 ; Rancher versions prior to 2.4.16...
PT-2022-26503
Name of the Vulnerable Software and Affected Versions M-Files versions prior to 22.8.11691.0 Description The issue allows a low privilege user to change some configuration due to incorrect privilege assignment in M-Files Web Classic. Recommendations For versions prior to 22.8.11691.0, update to...
M-Files Web 安全漏洞
M-Files Web is an intelligent information management platform from M-Files USA, Inc. It is used to optimally support users in their daily work. A security vulnerability exists in M-Files Web versions prior to 22.8.11691.0 that stems from incorrect privilege assignment. An attacker exploiting the...
PT-2022-26509
Name of the Vulnerable Software and Affected Versions M-Files Web versions before 22.5.11436.1 Description The issue is related to an incorrect privilege assignment in M-Files Web, which could have resulted in accidental changes to permissions. Recommendations For M-Files Web versions before...
CVE-2022-1606
Incorrect privilege assignment in M-Files Server versions before 22.3.11164.0 and before 22.3.11237.1 allows user to read unmanaged objects...
CVE-2022-1606
Incorrect privilege assignment in M-Files Server versions before 22.3.11164.0 and before 22.3.11237.1 allows user to read unmanaged objects...
Amazon Linux 2022 : golist (ALAS2022-2022-192)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-192 advisory. A flaw was found in golang. The HTTP/1 client accepted invalid Transfer-Encoding headers indicating chunked encoding. This issue could allow request smuggling, but only if combined with an...