CVE-2026-56592: Improper Restriction of Excessive Authentication Attempts

HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an unauthenticated attacker to execute sustained brute-force attacks against the login interface, resulting in unauthorized system access...

PT-2026-95329

Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management affected versions not specified Description Improper authentication validation occurs due to inadequate account lockouts. This allows an unauthenticated attacker to perform sustained brute-force attacks against th...

CVE-2026-49200: Insertion of Sensitive Information into Log File

The acercgi.log file in the device firmware is accessible without authentication via the web interface. This file contains cleartext login credentials for web and Telnet, leading to unauthorized system access...

Dell CloudLink Operating System Command Injection Vulnerability

Dell CloudLink is a data encryption and key management system from Dell USA. Dell CloudLink suffers from an operating system command injection vulnerability that could be exploited by an attacker to cause elevation of privilege and unauthorized system access...

CVE-2024-50627: Files or Directories Accessible to External Parties

An issue was discovered in Digi ConnectPort LTS before 1.4.12. A Privilege Escalation vulnerability exists in the file upload feature. It allows an attacker on the local area network with specific permissions to upload and execute malicious files, potentially leading to unauthorized system access...

CVE-2024-50627

A Privilege Escalation vulnerability exists in the file upload feature of Digi ConnectPort LTS versions prior to 1.4.12 . This flaw allows an attacker on the local area network with specific permissions to upload and execute malicious files, which can lead to unauthorized system access . To remed...

PT-2024-29360

Name of the Vulnerable Software and Affected Versions Sourcecodester Computer Laboratory Management System version 1.0 Description The issue is related to incorrect access control in the delete category function, allowing authenticated attackers with low-level privileges to arbitrarily delete...

PT-2024-10568

Name of the Vulnerable Software and Affected Versions onelogin/php-saml versions prior to 2.10.0 Description The issue allows for signature wrapping attacks, potentially resulting in unauthorized system access by a malicious user. Recommendations For versions prior to 2.10.0, update to version...

CVE-2021-28024

CVE-2021-28024 affects ServiceTonic Helpdesk prior to version 9.0.35937. The vulnerability is an improper access control in the login form that lets an attacker sign in without a password, enabling unauthorized system access. Connected documents corroborate the issue across multiple sources (Red ...

Design/Logic Flaw

UAX200.dll in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issue...

CVE-2021-38105

IPPP82.FLT in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issue...

PT-2017-3354

Name of the Vulnerable Software and Affected Versions FortiWebManager version 5.8.0 Description The issue is related to an improper access control in the admin webUI, allowing unauthorized access to the system using the admin account, regardless of the password provided. This can be exploited by ...

Secure Elements Class 5 AVR multiple security vulnerabilities

Sensitive information disclosure and spoofing, protection bypass, DoS, unauthorized system access...

konversation irc client 0.15 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/12312/info Konversation is a freely available IRC client for KDE windows environments on Linux platforms. Multiple remote vulnerabilities affect the Konversation IRC client. These issues are due to input validation failures and design flaws. The first iss...

00045-08242004.txt

GulfTech Security Research August, 24th 2004 Vendor : EFS Software Inc. URL : http://www.sharing-file.com Version : Easy File Sharing Webserver v1.25 Risk : Unauthorized System Access && DoS Description: Easy File Sharing Web Server is a file sharing software that allows visitors to upload/downlo...