Unauthorized Access Vulnerability in KingPortal Development System of Beijing Asian Control Technology Development Co. Ltd (CNVD-2024-16026)

Beijing Asian Control Technology Development Co., Ltd. is a high-tech enterprise of automation software platform. An unauthorized access vulnerability exists in the KingPortal development system of Beijing Asian Control Technology Development Co. Ltd, which can be exploited by attackers to obtain...

CVE-2023-52112

Unauthorized file access vulnerability in the wallpaper service module. Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2023-51650 Unauthorized access vulnerability on three interfaces

Hertzbeat is an open source, real-time monitoring system. Prior to version 1.4.1, Spring Boot permission configuration issues caused unauthorized access vulnerabilities to three interfaces. This could result in disclosure of sensitive server information. Version 1.4.1 fixes this issue...

CVE-2023-49620

Before DolphinScheduler version 3.1.0, the login user could delete UDF function in the resource center unauthorized which almost used in sql task, with unauthorized access vulnerability IDOR, but after version 3.1.0 we fixed this issue. We mark this cve as moderate level because it still requires...

CVE-2023-49620

CVE-2023-49620 affects Apache DolphinScheduler prior to 3.1.0. An authenticated user could delete UDF functions in the resource center (an operation commonly used by SQL tasks) due to an unauthorized access (IDOR) vulnerability. Red Hat, Veracode, GHSA and CVE records corroborate the issue, with ...

CVE-2023-43134

There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of the device without authentication, obtain user tokens, and ultimately log in to the device backend management...

CVE-2023-43134

Affected product: Netis 360RAC1200 (v1.3.4517). The CVE denotes an unauthorized access vulnerability that lets an attacker obtain device-sensitive information, steal user tokens, and log in to the device backend management without authentication. The issue is rated base-score 9.8 (CRITICAL) by NV...

TP-LINK TL-ER5120G Security Breach

The TP-LINK TL-ER5120G is a multi-WAN port Gigabit commercial router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK TL-ER5120G that stems from an unauthorized access vulnerability...

Unauthorized Access Vulnerability in Sword Enterprise Development Platform of Shanghai Breeder Technology Co.

Shanghai Bred Technology Co., Ltd. is an enterprise mainly engaged in software and information technology service industry. An unauthorized access vulnerability exists in the Sword enterprise development platform of Shanghai Bred Technology Co. which can be exploited by attackers to obtain...

Session Fixation

symfony is vulnerable to Session Fixation.The vulnerability exists due to the lack of validations in security.xml, which allows an attacker to gain unauthorized access to an account...

Unauthorized Access Vulnerability in the Development Center of Beijing Acontrol Technology Development Co.

Ltd. is an automation software platform high-tech enterprise. Ltd. development center there is unauthorized access vulnerability, attackers can use the vulnerability to obtain sensitive information...

Design/Logic Flaw

There is an unauthorized access vulnerability in Online Diagnostic Lab Management System 1.0...

Unauthorized Access Vulnerability in LanSecS 2nd Generation Firewall of Beijing Shengbolun High-Tech Co.

Saintsburgh Moon is an industrial control security vendor, focusing on network security technology research, product development and security services of high-tech enterprises. An unauthorized access vulnerability exists in the LanSecS second-generation firewall of Beijing Sainte-Bernard Hi-Tech...

VMSA-2022-0004:VMware ESXi, Workstation, and Fusion updates address multiple security vulnerabilities

Advisory ID: VMSA-2022-0004 CVSSv3 Range: 5.3-8.4 Issue Date:2022-02-15 Updated On: 2022-02-15 Initial Advisory CVEs: CVE-2021-22040, CVE-2021-22041, CVE-2021-22042, CVE-2021-22043, CVE-2021-22050 Synopsis: VMware ESXi, Workstation, and Fusion updates address multiple security vulnerabilities...

Unauthorized Access Vulnerability in TOTOLINK A3002RU

The TOTOLINK A3002RU is a Gigabit dual band router. An unauthorized access vulnerability exists in the TOTOLINK A3002RU, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Server Management System of Shanghai Sailian Information Technology Co.

Shanghai Sailian Information Technology Co. was founded on December 19, 2016 . The company's business scope includes: licensed items: type II value-added telecommunication business, etc. An unauthorized access vulnerability exists in the server management system of Shanghai Sailian Information...

Unauthorized Access Vulnerability in ioLogik E1242 Series of Mosaic Technology (Shanghai) Co.

The ioLogik E1242 series are daisy-chained Ethernet switches that support the most commonly used I/O data acquisition protocols to match a wide range of applications. Mosa Technologies Shanghai Co., Ltd. ioLogik E1242 series suffers from an unauthorized access vulnerability, which can be exploite...

Compro Technology IP Camera - ' mjpegStreamer.cgi' Screenshot Disclosure

Exploit Title: Compro Technology IP Camera - ' mjpegStreamer.cgi' Screenshot Disclosure Date: 2021-09-30 Exploit Author: icekam,xiao13,Rainbow,tfsec Software Link: http://www.comprotech.com.hk/ Version: Compro IP70 2.087130218, IP570 2.087130520, IP60, TN540 CVE : CVE-2021-40382 There is an...

Unauthorized Access Vulnerability in Ovia's Instructional Video Application Cloud Platform

Ltd. is a high-tech enterprise focusing on the research and development, production, sales and service of education informatization products. Guangzhou Aoweiya Electronic Technology Co., Ltd. campus video application cloud platform has unauthorized access vulnerability, attackers can use the...

Western Digital My Cloud Multiple Products 5.0 < 5.15.106 Unauthorized Access Vulnerability (WDC-21009)

Multiple Western Digital My Cloud products are prone to a vulnerability that could allow unauthorized access via SSH. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...