Vulnerability Category — Unauthorized access

Chinese name:
越权访问

Related Vulnerabilities

SSV ID Name
SSV-98442 Siemens SIMATIC RTLS Locating Manager
SSV-98424 Advantech WebAccess Node (CVE-2020-16202)
SSV-98423 Philips Clinical Collaboration Platform
SSV-98421 GE Digital APM Classic
SSV-98416 Johnson Controls Sensormatic Electronics American Dynamics victor Web (CVE-2020-9048)
SSV-98404 Capsule Technologies SmartLinx Neuron 2 Protection Mechanism Failure（CVE-2019-5024）
SSV-98402 Hitachi ABB Power Grids XMC20 Multiservice-Multiplexer Improper Authentication（CVE-2018-10933）
SSV-98363 D-Link DIR-867，DIR-878和DIR-882 路由器身份绕过漏洞
SSV-98360 通达OA 11.5 未授权访问漏洞
SSV-98351 Apache Shiro 权限绕过漏洞（CVE-2020-13933）
SSV-98350 Config Upload-未授权替换固件漏洞（CVE-2019-19142）
SSV-98348 天融信数据防泄漏系统越权修改密码漏洞
SSV-98340 天翼创维awifi路由器存在多处未授权访问漏洞（CVE-2019-12862）
SSV-97533 Huawei LTE router unauthenticated resource access
SSV-97494 EduSoho企培版v3.5.4越权访问漏洞
SSV-97375 Baseon Lantronix MSS IOT/Cameras Device Servers telnet-Service NO require password authentication
SSV-97374 Sollae Systems (Serial-Ethernet-Module/Remote-I/O-Device-Server etc.) Telnet-Service Unauthorized access
SSV-97373 BWS Systems HA-Bridge is Bridge Application for IoTAnd They do not require any certification
SSV-97372 Emerson Liebert IntelliSlot Web Card family delivers enhanced communications and control to Liebert UPS,AC Power and Thermal Management systems Unauthorized access
SSV-97284 DJI Spark hijacking
SSV-97211 Drupal 8 – CVE-2017-6926漏洞详解
SSV-97202 Etcd REST API 未授权访问漏洞
SSV-97186 UNAUTHENTICATED START OF TELNETD ON TENDA AC15 ROUTER
SSV-97163 Selenium Server 未授权访问漏洞
SSV-97079 Sophos XG from Unauthenticated Persistent XSS to Unauthorized Root Access(CVE-2017-18014)
SSV-97021 Trustwave SWG Unauthorized Access
SSV-96968 Emby MediaServer 3.2.5 Password Reset Vulnerability
SSV-96909 CRITICAL CODESYS VULNERABILITIES IN WAGO PFC 200 SERIES
SSV-96442 Hanbanggaoke IP Camera Arbitrary Password Change
SSV-93175 HP JetDirect 未授权访问
SSV-93059 SNMP Incorrect Access Control Vulnerability (CVE 2017-5135)
SSV-93018 Cloudera Manager Unauthenticated configuration download
SSV-93016 Cloudera Manager =< 5.5 Process logs access (CVE-2016-4949)
SSV-93012 Cloudera HUE =< 3.9.0 Enumerating users with an unprivileged account (CVE-2016-4947)
SSV-93010 Apache Ranger =< 0.5.2 allows to download policy definitions without authentication
SSV-92789 Goahead webserver <= 2.1.8 路径绕过敏感文件下载漏洞
SSV-92770 Google Nexus 9 Unauthorized Access to FIQ Debugger（CVE-2017-0510）
SSV-92624 Pirelli DRG A115 ADSL Router - Unauthenticated DNS Change
SSV-92623 Tenda ADSL2/2+ Modem D840R - Unauthenticated DNS Change
SSV-92528 Loopcomm WLAN AP Webserver 未授权访问漏洞
SSV-92509 Industrial Secure Routers EDR-810 / EDR-G902 / EDR-G903 - Insecure Configuration Management
SSV-92503 ZIO ROUTER路由器未授权访问漏洞
SSV-92436 Drupal Core Full config export 配置文件未授权下载漏洞
SSV-92430 Cisco ASA 9.2(3) - 'EXTRABACON' Authentication Bypass
SSV-92423 Inteno EG101R1 VoIP Router - 未授权修改DNS
SSV-92421 PLANET VDR-300NU ADSL Router - 未授权修改DNS
SSV-92420 Tenda ADSL2/2+ Modem 963281TAN - 未授权修改DNS
SSV-92351 连邦行政审批系统 /workplate/xzsp/kqgl/kqsz/kqsz.aspx 越权访问漏洞
SSV-92338 泛微 E-cology /messager/users.data 越权访问漏洞
SSV-92285 KJ65N煤矿远程监控安全预警系统 /configs.aspx 未授权访问漏洞
SSV-92130 皓峰防火墙系统setdomain.php,system.php, setip.php等文件越权访问漏洞
SSV-92041 shopxp网上购物系统 savexpadmin.asp越权漏洞
SSV-91958 Schneider Electric PowerLogic PM8ECC 模块未授权访问漏洞
SSV-91914 DVR监控空口令
SSV-91913 Samsung SCX-4x24 Series 未授权访问
SSV-91882 Sunlinks OA系统 /Common/HRManage/UserList.aspx?Retire=0&Code= 越权访问漏洞
SSV-91788 Meteocontrol WEBlog 多个越权漏洞
SSV-91746 欧姆龙PLS默认端口控制漏洞
SSV-91684 南京擎天政务系统 /jytweb//inc/frame.htm 未授权访问漏洞
SSV-91667 AXIS 2400+ Blade Video Server /view/view.shtml 越权访问漏洞
SSV-91597 CouchDB未授权访问导致的任意系统命令执行漏洞
SSV-91489 东芝e-STUDIO 系列打印机未授权访问漏洞
SSV-91487 海尔300M无线路由器后台未授权访问
SSV-91456 悟空CRM系统 /Public/js/php/file_manager_json.php 越权访问漏洞
SSV-91386 polycom HDX系列设备默认登录控制台无需密码
SSV-91378 东芝打印机未授权访问漏洞
SSV-91376 Netgear Unauthenticated SOAP Password Extractor
SSV-91368 Schneider AS AS-P系列-v1.7及之前版本-权限绕过漏洞
SSV-91364 惠普打印机设备 HP Color LaserJet 系列未授权访问漏洞
SSV-91323 D-Link DWR-932 Firmware 4.00 - Authentication Bypass
SSV-91274 haier wifi300M 无线路由器 未授权访问
SSV-91208 IBM Tivoli NetView Access Services权限获取漏洞
SSV-91207 D-Link DWR-932认证绕过
SSV-91171 WordPress BackupBuddy插件-db_1.sql、wp_users.sql-未授权访问漏洞
SSV-91164 D-Link DWR-932 Firmware 4.00 权限绕过
SSV-91094 方维O2O系统 后台越权漏洞泄露用户详细地址
SSV-90972 phpyun 4.0版本越权访问漏洞
SSV-90938 天睿电子图书管理系统后台越权访问
SSV-90881 网康 NS-ASG /admin/export_log.php type参数存在越权日志下载
SSV-90841 博贤科技通用型建站系统越权访问漏洞
SSV-90769 RTSP 服务未授权访问漏洞
SSV-90745 ecmall 2.x index.php 修改任意密码漏洞
SSV-90730 西门子S7-300存在权限绕过漏洞
SSV-90668 夏普 Sharp MX-M264FP 复印机未授权访问
SSV-90665 1039家校通 Unauthorized access
SSV-90553 Apache SOLR 未授权访问
SSV-90423 Shop7z admin/lipinadd.asp越权访问
SSV-90390 多款三星打印机未授权访问缺陷
SSV-90252 WP插件Admin Management Xtended 2.4.0 越权操作
SSV-90248 大汉网络 /jcms/interface/ldap/receive.jsp 接口未授权更改密钥
SSV-90210 票友 ERP 管理系统 <=10.5.6 Ajax/users.ashx 未授权访问
SSV-90204 票友 ERP 管理系统 <=10.5.6 未授权访问漏洞
SSV-90159 Cisco Linksys EA6100和EA6300 Routers未授权访问漏洞
SSV-90158 PHPMailer 'class.phpmailer.php'安全绕过漏洞
SSV-90140 Juniper Networks（瞻博网络）未授权访问漏洞
SSV-90113 福建四创预警系统 /TableDataManage/BaseInforQueryContent.aspx 接口未授权访问漏洞
SSV-89874 Thinksns cms v4存在越权漏洞
SSV-89778 IBM Security Guardium访问权限漏洞
SSV-89715 Redis 未授权访问缺陷可轻易导致系统被黑
SSV-89692 Memcached 未授权访问 PoC
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. 简体中文