964 matches found
CVE-2024-56317
In Matter aka connectedhomeip or Project CHIP through 1.4.0.0, the WriteAcl function deletes all existing ACL entries first, and then attempts to recreate them based on user input. If input validation fails during decoding, the process stops, and no entries are restored by...
CISCO-SA-20181128-PLM
creationtimestamp| type| source ---|---|--- 2024-12-17 06:41:05+00:00| seen| https://social.circl.lu/users/vulnerabilitylookup/statuses/113666792948749099...
CVE-2024-55999
CVE-2024-55999 is a Missing Authorization vulnerability in the XML Multilanguage Sitemap Generator WordPress plugin. Affected software: XML Multilanguage Sitemap Generator
CVE-2024-56001
Missing Authorization vulnerability in ksher thailand Ksher ksher-payment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ksher: from n/a through = 1.1.1...
CVE-2024-54417
Missing Authorization vulnerability in pixelgrade PixProof pixproof allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects PixProof: from n/a through = 2.0.1...
CVE-2024-56009
CVE-2024-56009 affects Spreadr Woocommerce Plugin – Amazon Importer for Dropshipping and Affiliate. The vulnerability is a Missing Authorization to Delete Arbitrary Content. Affected versions:
CVE-2023-41951
Missing Authorization vulnerability in rtCamp rtMedia for WordPress, BuddyPress and bbPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects rtMedia for WordPress, BuddyPress and bbPress: from n/a through 4.6.14...
CVE-2023-32593
Missing Authorization vulnerability in GS Plugins GS Pins for Pinterest allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GS Pins for Pinterest: from n/a through 1.6.7...
CVE-2024-54298
CVE-2024-54298 applies to Car Dealer (CarDealer/Dealership) and Vehicle sales plugins, with a Missing Authorization vulnerability caused by incorrectly configured access control levels. Public disclosures in RH and Wordfence entries confirm impact as Broken Access Control on Car Dealer <= 4.46...
CVE-2023-36531 WordPress LiquidPoll plugin <= 3.3.68 - Broken Access Control vulnerability
Missing Authorization vulnerability in liquidpoll LiquidPoll wp-poll allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LiquidPoll: from n/a through = 3.3.68...
CVE-2022-45806
CVE-2022-45806 affects WordPress Formidable Forms plugin versions up to 5.5.4. The vulnerability is a Missing Authorization / Broken Access Control flaw in the Strategy11 Form Builder Team, allowing improper access due to incorrectly configured access control security levels. Public sources consi...
CVE-2024-54096
Vulnerability of improper access control in the MTP module Impact: Successful exploitation of this vulnerability may affect integrity and accuracy...
CVE-2024-54114
CVE-2024-54114 is described across multiple sources as an out-of-bounds access vulnerability in the playback function of the DASH module in Huawei HarmonyOS. The vulnerability impacts availability if exploited. The provided documents do not specify affected versions, exploit details, or a patch/v...
CVE-2024-54103
Vulnerability of improper access control in the album module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2024-54096
Vulnerability of improper access control in the MTP module Impact: Successful exploitation of this vulnerability may affect integrity and accuracy...
CVE-2024-54477
CVE-2024-54477 affects macOS Sequoia 15.2, macOS Ventura 13.7.2, and macOS Sonoma 14.7.2. The issue is described as an access to user-sensitive data via a local issue with high confidentiality impact, low attack complexity, and no user interaction required (CVSS v3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/...
CVE-2024-45155
Animate versions 23.0.8, 24.0.5 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2024-55634 Drupal core - Moderately critical - Access bypass - SA-CORE-2024-004
A vulnerability in Drupal Core allows Privilege Escalation.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8...
CVE-2024-54251
Missing Authorization vulnerability in prodigycommerce Prodigy Commerce prodigy-commerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Prodigy Commerce: from n/a through = 3.1.2...