Microsoft Azure Site Recovery 权限许可和访问控制问题漏洞

Microsoft Azure Site Recovery is a site recovery DRaaS from Microsoft Corporation for cloud and hybrid cloud architectures. Microsoft Azure Site Recovery is vulnerable to privilege permission and access control issues. No details of the vulnerability are available at this time...

Microsoft Windows Installer 权限许可和访问控制问题漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A vulnerability exists in Microsoft Windows Installer due to permission and access control issues. The following products and editions...

CVE-2021-32006

The CVE-2021-32006 entry affects Secomea GateManager (Version 9.6.621421014 and all prior versions). The vulnerability is in the LinkManager web portal, where a logged-in LinkManager user can access SiteManager backup files, exposing potentially sensitive backup data. Publicly available documents...

CVE-2021-32006 GateManager information leak for LinkManager Users

This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability in LinkManager web portal of Secomea GateManager allows logged in LinkManager user to access stored SiteManager backup files...

Insyde InsydeH2O permission permission and access control issues vulnerability (CNVD-2022-10276)

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System. Operating System H2O UEFI firmware is vulnerable to permission and access control issues, which can be...

OPENSUSE-SU-2022:0283-1 Security update for samba

CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; bso14911; bsc1193690; - CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfsfruit allows code execution; bso14914; bsc1194859; - CVE-2022-0336: Samba AD users...

Apache Tomcat permission permission and access control issues vulnerability

Apache Tomcat is a lightweight web application server from the Apache Foundation in the United States. The program implements support for Servlet and JavaServer Page JSP. Apache Tomcat is vulnerable to privilege permission and access control issues, and an attacker can bypass Apache Tomcat's...

Mageia: Security Advisory (MGASA-2021-0218)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows User-mode Driver Framework权限许可和访问控制问题漏洞

Microsoft Windows User-mode Driver Framework is a user-mode driver framework from Microsoft Corporation USA. A vulnerability exists in the Microsoft Windows User-mode Driver Framework due to permission and access control issues. The following products and editions are affected:Windows 10 Version...

Microsoft Windows Codecs Library 权限许可和访问控制问题漏洞

The Microsoft Windows Codecs Library is a feature library for Microsoft Windows systems from Microsoft Corporation. A vulnerability exists in the Microsoft Windows Codecs Library due to permission and access control issues. The following products and editions are affected: Windows Server 2012 R2...

Microsoft Windows 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Encrypting File System EFS with privilege permission and access control issues. The following products and editions are affected:Windows Server...

Belloo 权限许可和访问控制问题漏洞

Belloo, a "high quality" dating software from Belloo, is vulnerable to permission and access control issues due to a weak password reset mechanism in requestsuser.php, which could be exploited to bypass authentication vulnerabilities and take over an account...

Microsoft Windows Active Directory 权限许可和访问控制问题漏洞

Microsoft Windows Active Directory is a centralized directory management service responsible for architecting medium- to large-scale network environments from the U.S. company Microsoft. Stores information about objects on the network and makes it easy for administrators and users to find and use...

Microsoft Windows NTFS 权限许可和访问控制问题漏洞

Microsoft Windows NTFS is a file system from Microsoft USA that serves computer files. The file system has error alerts, disk self-healing, and logging capabilities. Microsoft Windows NTFS is vulnerable to privilege permission and access control issues. The following products and editions are...

Microsoft Windows Active Directory 权限许可和访问控制问题漏洞

Microsoft Windows Active Directory is a centralized directory management service responsible for architecting medium- to large-scale network environments from the U.S. company Microsoft. Stores information about objects on the network and makes it easy for administrators and users to find and use...

GitLab Permission License and Access Control Issues Vulnerability (CNVD-2021-87038)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. GitLab suffers from a Permission Permission and Access...

AUVESY Versiondog 权限许可和访问控制问题漏洞

AUVESY Versiondog is an automated production data and change management software solution from the German company AUVESY. AUVESY Versiondog is vulnerable to permission and access control issues, which could be exploited by an attacker to change user passwords or delete databases...

PT-2021-21117 · Otrs Ag · Otrs

Name of the Vulnerable Software and Affected Versions: OTRS AG OTRS versions 8.0.16 and prior versions. Description: The issue allows agents to lock tickets without the "Owner" permission. Once a ticket is locked, it can be moved to a queue where the agent has "rw" permissions, granting them full...

Microsoft Windows Desktop Bridge 权限许可和访问控制问题漏洞

Microsoft Windows Desktop Bridge is an application from Microsoft Corporation USA. It provides a bridge between desktop applications and the common Windows platform. A vulnerability exists in Microsoft Windows Desktop Bridge with privilege permission and access control issues. The following...

Microsoft DWM Core Library 权限许可和访问控制问题漏洞

Microsoft DWM Core Library is a core library for Microsoft windows from Microsoft Corporation. A vulnerability exists in the Microsoft DWM Core Library due to permission and access control issues. The following products and editions are affected: Windows 10 Version 1909 for 32-bit Systems,Windows...