5 matches found
CVE-2024-48541
Incorrect access control in the firmware update and download processes of Ruochan Smart v4.4.7 allows attackers to access sensitive information by analyzing the code and data within the APK file...
CVE-2024-48541
Incorrect access control in the firmware update and download processes of Ruochan Smart v4.4.7 allows attackers to access sensitive information by analyzing the code and data within the APK file...
CVE-2024-48541
CVE-2024-48541 affects Ruochan Smart v4.4.7. The issue is an incorrect access control in the firmware update and firmware download processes, enabling an attacker to access sensitive information by inspecting code and data inside the APK. Impacts are described as high confidentiality and integrit...
CVE-2024-29904
CVE-2024-29904 affects CodeIgniter4, specifically the Language class. The DoS vulnerability arises from how messages are formatted in the language component, allowing memory exhaustion on the server when processing inputs. The issue is documented across multiple sources (NVD/Red Hat/Veracode and ...
CVE-2020-5275
In symfony/security-http before versions 4.4.7 and 5.0.7, when a Firewall checks access control rule, it iterate overs each rule's attributes and stops as soon as the accessDecisionManager decides to grant access on the attribute, preventing the check of next attributes that should have been take...