CVE-2023-28732 Missing access control affecting the AcyMailing plugin for Joomla

Missing access control in AnyMailing Joomla Plugin allows to list and access files containing sensitive information from the plugin itself and access to system files via path traversal, when being granted access to the campaign's creation on front-office. This issue affects AnyMailing Joomla Plug...

SUSE CVE-2018-10919

The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authenticated attacker could use this flaw to extract confidential attribute values using LDAP search expressions. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are...

CVE-2022-43977

An issue was discovered on GE Grid Solutions MS3000 devices before 3.7.6.25p03.2.2.17p04.7p0. The debug port accessible via TCP a qconn service lacks access control...

Rocket.Chat 安全漏洞

Rocket.Chat is an open source team chat software. An information disclosure vulnerability exists in Rocket.Chat versions prior to 4.7.5, 4.8.0 and later, and prior to 4.8.2, which stems from a lack of ACL checking in its getRoomRoles Meteor method, and can be exploited by an attacker to cause a...

CVE-2022-37344

Missing Access Control vulnerability in PHP Crafts Accommodation System plugin = 1.0.1 at WordPress...

CVE-2022-37344 WordPress Accommodation System plugin <= 1.0.1 - Missing Access Control vulnerability

Missing Access Control vulnerability in PHP Crafts Accommodation System plugin = 1.0.1 at WordPress...

CVE-2022-37344

The CVE-2022-37344 entry affects the WordPress plugin PHP Crafts Accommodation System (version

CVE-2022-36427: Undefined Security Weakness

Missing Access Control vulnerability in About Rentals. Inc. About Rentals plugin = 1.5 at WordPress...

PT-2022-23937 · Unknown · Php Crafts Accommodation System

Name of the Vulnerable Software and Affected Versions: PHP Crafts Accommodation System plugin version 1.0.1 and earlier Description: The issue is related to a Missing Access Control vulnerability. Recommendations: For PHP Crafts Accommodation System plugin version 1.0.1 and earlier, update to a...

PT-2022-23363 · WordPress · About Rentals Plugin

Name of the Vulnerable Software and Affected Versions: About Rentals plugin versions prior to 1.6 Description: The issue is related to a Missing Access Control vulnerability in the About Rentals plugin for WordPress. Recommendations: For versions prior to 1.6, update to version 1.6 or later to...

CVE-2022-37344: Undefined Security Weakness

Missing Access Control vulnerability in PHP Crafts Accommodation System plugin = 1.0.1 at WordPress...

WordPress Accommodation System plugin <= 1.0.1 - Missing Access Control vulnerability

Missing Access Control vulnerability discovered by ptsfence Patchstack Alliance in WordPress Accommodation System plugin versions = 1.0.1. Solution Deactivate and delete. This plugin has been closed as of August 24, 2022 and is not available for download. This closure is temporary, pending a full...

CVE-2022-29330

Missing access control in the backup system of Telesoft VitalPBX before 3.2.1 allows attackers to access the PJSIP and SIP extension credentials, cryptographic keys and voicemails files via unspecified vectors...

CODESYS 安全漏洞

CODESYS is a controller development system from Germany's 3S-Smart Software Solutions. A security vulnerability exists in a number of CODESYS products due to a lack of access control to internal files in the working directory of the application's file upload and download functions. The...

CVE-2022-29330: Use of Insufficiently Random Values

Missing access control in the backup system of Telesoft VitalPBX before 3.2.1 allows attackers to access the PJSIP and SIP extension credentials, cryptographic keys and voicemails files via unspecified vectors...

Security Bulletin: A vulnerability has been identified in IBM Elastic Storage System 3000 GUI where an unauthorised user can execute commands (CVE-2020-4348)

Summary A security vulnerability has been identified in IBM Elastic Storage System 3000 GUI that could allow an unauthorised user to execute commands . A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2020-4348 DESCRIPTION: IBM Spectrum Scale 4.2.0.0 through 4.2.3.21 an...

CVE-2022-30951

Jenkins WMI Windows Agents Plugin 1.8 and earlier includes the Windows Remote Command library does not implement access control, potentially allowing users to start processes even if they're not allowed to log in...

CVE-2022-26279

EyouCMS v1.5.5 was discovered to have no access control in the component /data/sqldata...

CVE-2021-27456: Storage of Sensitive Data in a Mechanism without Access Control

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control...

CVE-2021-4201 Pre-authentication session hijacking

Missing access control in ForgeRock Access Management 7.1.0 and earlier versions on all platforms allows remote unauthenticated attackers to hijack sessions, including potentially admin-level sessions. This issue affects: ForgeRock Access Management 7.1 versions prior to 7.1.1; 6.5 versions prior...