4092 matches found
CVE-2020-10238
An issue was discovered in Joomla! before 3.9.16. Various actions in comtemplates lack the required ACL checks, leading to various potential attack vectors...
CVE-2020-10238
An issue was discovered in Joomla! before 3.9.16. Various actions in comtemplates lack the required ACL checks, leading to various potential attack vectors...
Design/Logic Flaw
An issue was discovered in Joomla! before 3.9.16. Various actions in comtemplates lack the required ACL checks, leading to various potential attack vectors...
CVE-2020-10238
Joomla! before 3.9.16 is vulnerable due to missing ACL checks in com_templates, enabling multiple attack vectors. The CVE-2020-10238 description and multiple advisories (NVD/NVDC OSV) confirm exploitation could allow unauthorized actions on affected sites. Affected software: Joomla! core componen...
CVE-2020-10238
An issue was discovered in Joomla! before 3.9.16. Various actions in comtemplates lack the required ACL checks, leading to various potential attack vectors...
PT-2020-11994 · Open Source Matters · Joomla!
Name of the Vulnerable Software and Affected Versions: Joomla! versions prior to 3.9.16 Description: An issue was discovered where various actions in com templates lack the required ACL checks, leading to potential attack vectors. Recommendations: For versions prior to 3.9.16, update to version...
[20200403] - Core - Incorrect access control in com_users access level deletion function
Incorrect ACL checks in the access level section of comusers allow the unauthorized deletion of usergroups...
Joomla 1.7.x < 3.9.16 Multiple Vulnerabilities (5783-joomla-3-9-16)
According to its self-reported version, the instance of Joomla! running on the remote web server is 1.7.x prior to 3.9.16. It is, therefore, affected by multiple vulnerabilities. - Missing token checks in the image actions of comtemplates causes CSRF vulnerabilities. CVE-2020-10241 - Inadequate...
Cisco IOS XR Software NETCONF Over Secure Shell ACL Bypass (cisco-sa-20191120-iosxr-ssh-bypass)
According to its self-reported version, Cisco IOS XR Software is affected by a vulnerability in the access-control logic of the NETCONF over Secure Shell SSH due to a missing check in the NETCONF over SSH access control list ACL. An unauthenticated, remote attacker can exploit this, by by...
[20200402] - Core - Missing checks for the root usergroup in usergroup table
Inproper input validations in the usergroup table class could lead to a broken ACL configuration...
CVE-2020-7955
HashiCorp Consul and Consul Enterprise 1.4.1 through 1.6.2 did not uniformly enforce ACLs across all API endpoints, resulting in potential unintended information disclosure. Fixed in 1.6.3...
CVE-2019-16300
An issue was discovered in Open Network Operating System ONOS 1.14. In the access control application org.onosproject.acl, the host event listener does not handle the following event types: HOSTREMOVED. In combination with other applications, this could lead to the absence of intended code...
CVE-2020-8010
CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot controller component. A remote attacker can execute commands, read from, or write to the target system...
Input validation
CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot controller component. A remote attacker can execute commands, read from, or write to the target system...
CVE-2020-8010
CVE-2020-8010 affects CA Unified Infrastructure Management (Nimsoft/UIM) robot/controller components across 9.20 and earlier, and 20.1/20.3.x. The issue is improper ACL handling, enabling a remote attacker to execute commands and perform read/write on the target system. Public details in the conn...
CVE-2020-8010
CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot controller component. A remote attacker can execute commands, read from, or write to the target system...
CVE-2013-4090
Varnish HTTP cache before 3.0.4: ACL bug...
DEBIAN-CVE-2013-4090
Varnish HTTP cache before 3.0.4: ACL bug...
