296 matches found
The vulnerability of the Intel Server Debug and Provisioning Tool (Intel SDP) in managing and operating server infrastructure affects Windows operating systems. This vulnerability stems from insufficient access control mechanisms, allowing attackers to increase their privileges.
The vulnerability of the Intel Server Debug and Provisioning Tool Intel SDP for operating systems running on Windows relates to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...
The vulnerability of the mptcp component in Linux kernel, which allows a hacker to cause a service failure
The vulnerability of the mptcp component in Linux operating systems is related to inadequate access restrictions. Exploiting this vulnerability can allow attackers to cause service failures...
The vulnerability of GigaDevice’s GD32 microprogrammed device controllers, such as GD32F1x0, GD32F4xx, and GD32F3x0, is related to insufficient access control mechanisms. This allows attackers to read data from the RAM or modify its state.
The vulnerability of GigaDevice’s GD32 microprogrammed device controllers, such as GD32F1x0, GD32F4xx, and GD32F3x0, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to read data from the RAM or alter its state...
Privilege Escalation
Rancher Manager is vulnerable to Privilege Escalation. The vulnerability is due to weak Access Control Lists ACL in Rancher Manager deployments containing Windows nodes, allow overly permissive access to sensitive files by BUILTIN\Users or NT AUTHORITY\Authenticated Users...
CVE-2024-39650
Missing Authorization vulnerability in WPWeb Elite WooCommerce PDF Vouchers allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WooCommerce PDF Vouchers: from n/a through 4.9.4...
PT-2024-30375 · Unknown · Wptravelly
Name of the Vulnerable Software and Affected Versions: WpTravelly versions 1.7.7 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions 1.7.7 and earlier, update t...
SQL Injection
Overview Affected versions of this package are vulnerable to SQL Injection through the GraphCypherQAChain class. An attacker can manipulate, delete, or create data, disrupt services, and compromise database integrity by injecting malicious SQL commands into prompts. Note: This vulnerability impac...
PT-2024-10227
Name of the Vulnerable Software and Affected Versions MacOS affected versions not specified Description The issue is related to insufficient access control in the XPC service of MacOS operating systems. Exploitation of this issue may allow an attacker to execute arbitrary code and elevate their...
The vulnerability of the UART interface in ASUS RT-N12+ B1 microprogramming software allows a intruder to gain unauthorized access to the root terminal.
The vulnerability of the UART interface in ASUS RT-N12+ B1 microprogrammed software routers is related to deficiencies in access control. Exploiting this vulnerability can allow a perpetrator to gain unauthorized access to the root terminal...
PT-2024-13009 · Kiloview · P1/P2 +2
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A vulnerability allows unauthorized access to functionality inadequately constrained by ACLs. Attackers may exploit this to execute commands without authentication, potentially...
PT-2024-6576 · Veeam · Veeam Backup Enterprise Manager +1
Name of the Vulnerable Software and Affected Versions: Veeam Backup Enterprise Manager affected versions not specified Description: The issue allows high-privileged users to steal the NTLM hash of the Enterprise manager service account. This is related to insufficient access control in Veeam Back...
Itel Vision 3 Turbo 安全漏洞
The Itel Vision 3 Turbo is a smartphone from Itel. A security vulnerability exists in the Itel Vision 3 Turbo that stems from the fact that certain software versions of the device contain a vulnerable pre-installed application com.transsion.autotest.factory with insufficient access control that...
The vulnerability in the accessibility components of iOS and iPadOS operating systems allows attackers to gain access to the user’s location.
The vulnerability of the Accessibility component in iOS and iPadOS operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to gain access to the user’s location...
CVE-2024-1147
Weak access control in OpenText PVCS Version Manager allows potential bypassing of authentication and download of files...
CVE-2024-1148
Weak access control in OpenText PVCS Version Manager allows potential bypassing of authentication and uploading of files...
CVE-2024-1148
OpenText PVCS Version Manager contains weak access control that could bypass authentication and allow arbitrary file uploads. CVSS 3.1 base score 9.8 (CRITICAL) with network access, no user interaction required. Affected: PVCS Version Manager (OpenText). Root cause: weak access control enabling a...
CVE-2024-1148 Weak Access Control - Arbitrary file upload
Weak access control in OpenText PVCS Version Manager allows potential bypassing of authentication and uploading of files...
CVE-2024-1148 Weak Access Control - Arbitrary file upload
Weak access control in OpenText PVCS Version Manager allows potential bypassing of authentication and uploading of files...