CVE-2022-37344

The CVE-2022-37344 entry affects the WordPress plugin PHP Crafts Accommodation System (version

PT-2022-23363 · WordPress · About Rentals Plugin

Name of the Vulnerable Software and Affected Versions: About Rentals plugin versions prior to 1.6 Description: The issue is related to a Missing Access Control vulnerability in the About Rentals plugin for WordPress. Recommendations: For versions prior to 1.6, update to version 1.6 or later to...

PT-2022-23937 · Unknown · Php Crafts Accommodation System

Name of the Vulnerable Software and Affected Versions: PHP Crafts Accommodation System plugin version 1.0.1 and earlier Description: The issue is related to a Missing Access Control vulnerability. Recommendations: For PHP Crafts Accommodation System plugin version 1.0.1 and earlier, update to a...

CVE-2022-36427: Undefined Security Weakness

Missing Access Control vulnerability in About Rentals. Inc. About Rentals plugin = 1.5 at WordPress...

CVE-2022-37344: Undefined Security Weakness

Missing Access Control vulnerability in PHP Crafts Accommodation System plugin = 1.0.1 at WordPress...

WordPress Accommodation System plugin <= 1.0.1 - Missing Access Control vulnerability

Missing Access Control vulnerability discovered by ptsfence Patchstack Alliance in WordPress Accommodation System plugin versions = 1.0.1. Solution Deactivate and delete. This plugin has been closed as of August 24, 2022 and is not available for download. This closure is temporary, pending a full...

CVE-2022-29330

Missing access control in the backup system of Telesoft VitalPBX before 3.2.1 allows attackers to access the PJSIP and SIP extension credentials, cryptographic keys and voicemails files via unspecified vectors...

CODESYS 安全漏洞

CODESYS is a controller development system from Germany's 3S-Smart Software Solutions. A security vulnerability exists in a number of CODESYS products due to a lack of access control to internal files in the working directory of the application's file upload and download functions. The...

CVE-2022-29330: Use of Insufficiently Random Values

Missing access control in the backup system of Telesoft VitalPBX before 3.2.1 allows attackers to access the PJSIP and SIP extension credentials, cryptographic keys and voicemails files via unspecified vectors...

Security Bulletin: A vulnerability has been identified in IBM Elastic Storage System 3000 GUI where an unauthorised user can execute commands (CVE-2020-4348)

Summary A security vulnerability has been identified in IBM Elastic Storage System 3000 GUI that could allow an unauthorised user to execute commands . A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2020-4348 DESCRIPTION: IBM Spectrum Scale 4.2.0.0 through 4.2.3.21 an...

CVE-2022-30951

Jenkins WMI Windows Agents Plugin 1.8 and earlier includes the Windows Remote Command library does not implement access control, potentially allowing users to start processes even if they're not allowed to log in...

CVE-2022-30951

Jenkins WMI Windows Agents Plugin 1.8 and earlier includes the Windows Remote Command library does not implement access control, potentially allowing users to start processes even if they're not allowed to log in...

CVE-2022-26279

EyouCMS v1.5.5 was discovered to have no access control in the component /data/sqldata...

CVE-2021-27456: Storage of Sensitive Data in a Mechanism without Access Control

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control...

CVE-2021-4201 Pre-authentication session hijacking

Missing access control in ForgeRock Access Management 7.1.0 and earlier versions on all platforms allows remote unauthenticated attackers to hijack sessions, including potentially admin-level sessions. This issue affects: ForgeRock Access Management 7.1 versions prior to 7.1.1; 6.5 versions prior...

CVE-2021-22262

Missing access control in all GitLab versions starting from 13.12 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions starting from 14.2 before 14.2.2 with Jira Cloud integration enabled allows Jira users without administrative privileges to add and remove Jira Connect...

CVE-2021-22262

The vulnerability CVE-2021-22262 affects GitLab versions with Jira Cloud integration enabled, due to missing access control that lets Jira users without admin privileges add/remove Jira Connect Namespaces via the GitLab.com Jira Cloud app configuration page. Affected versions: 13.12 before 14.0.9...

CVE-2021-22262: Incorrect Authorization

Missing access control in all GitLab versions starting from 13.12 before 14.0.9, all versions starting from 14.1 before 14.1.4, and all versions starting from 14.2 before 14.2.2 with Jira Cloud integration enabled allows Jira users without administrative privileges to add and remove Jira Connect...

MagicMotion Flamingo 信息泄露漏洞

MagicMotion Flamingo is a wearable vibrator from China-based MagicMotion. A security vulnerability exists in MagicMotion Flamingo 2, which stems from a lack of access control for MagicMotion Flamingo 2 to read from device descriptors. No details of the vulnerability are currently available...

WordPress WP Upload Restriction plugin <= 2.2.3 - Missing Access Control in deleteCustomType function vulnerability

Missing Access Control in deleteCustomType function vulnerability discovered in WordPress WP Upload Restriction plugin versions = 2.2.3. Solution Update the WordPress WP Upload Restriction plugin to the latest available version at least 2.2.5...