Rockwell Automation Micrologix Improper Access Control (CVE-2017-14471)

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2022-0133

peertube is vulnerable to Improper Access Control...

CVE-2022-0133 Improper Access Control in chocobozzz/peertube

peertube is vulnerable to Improper Access Control...

CVE-2022-0133 Improper Access Control in chocobozzz/peertube

peertube is vulnerable to Improper Access Control...

CVE-2021-4194

bookstack is vulnerable to Improper Access Control...

MGASA-2021-0567 Updated keepalived packages fix security vulnerability

In Keepalived through 2.2.4, the D-Bus policy does not sufficiently restrict the message destination, allowing any user to inspect and manipulate any property. This leads to access-control bypass in some situations in which an unrelated D-Bus system service has a settable writable property...

kimai2 is vulnerable to Improper Access Control

kimai2 is vulnerable to Improper Access Control...

GHSA-JM6P-WFJG-XM7X bookstack is vulnerable to Improper Access Control

bookstack is vulnerable to Improper Access Control...

CVE-2021-4026

bookstack is vulnerable to Improper Access Control...

hortonkirbycesch.org Improper Access Control vulnerability OBB-2251753

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Improper access control

In Publify, 9.0.0.pre1 to 9.2.4 are vulnerable to Improper Access Control. “guest” role users can self-register even when the admin does not allow. This happens due to front-end restriction only...

Unspecified Vulnerability in McAfee Content Security Reporter

McAfee Content Security Reporter is an application from McAfee, Inc. A reporting software solution that helps you identify and analyze a variety of data collected from network devices. A security vulnerability exists in McAfee Content Security Reporter CSR prior to version 2.8.0, which stems from...

Improper access control

Dell dbutil23.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required...

Unspecified vulnerability in MISP (CNVD-2021-22857)

MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP version 2.4.139 that originates in app Model...

JetBrains TeamCity Improper Privilege Control Vulnerability

TeamCity is a Java-based build management and continuous integration server from JetBrains. A privilege control impropriety vulnerability exists in JetBrains TeamCity versions prior to 2020.2.1 that stems from a user being able to access another user's GitHub access token. No details of the...

PT-2021-14514 · Sap · Sap Netweaver As Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP versions 740 through 755 Description: The issue allows an unauthenticated attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service, which has a high impact on the...

Unauthorized Access Vulnerability in EDAS Configuration Center of AliCloud Computing Ltd.

AliCloud Computing Ltd. is a cloud computing and artificial intelligence technology company dedicated to providing secure and reliable computing and data processing capabilities as an online public service to make computing and artificial intelligence a pervasive technology. An unauthorized acces...

Use after free

Editors/LogViewerController.cs in Umbraco through 8.9.1 allows a user to visit a logviewer endpoint even if they lack Applications.Settings access...

kwikkopy.com.au Improper Access Control vulnerability OBB-1481735

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Code injection

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server...