5736 matches found
CVE-2020-10238: Exposure of Resource to Wrong Sphere
An issue was discovered in Joomla! before 3.9.16. Various actions in comtemplates lack the required ACL checks, leading to various potential attack vectors...
[20200403] - Core - Incorrect access control in com_users access level deletion function
Incorrect ACL checks in the access level section of comusers allow the unauthorized deletion of usergroups...
Joomla 1.7.x < 3.9.16 Multiple Vulnerabilities (5783-joomla-3-9-16)
According to its self-reported version, the instance of Joomla! running on the remote web server is 1.7.x prior to 3.9.16. It is, therefore, affected by multiple vulnerabilities. - Missing token checks in the image actions of comtemplates causes CSRF vulnerabilities. CVE-2020-10241 - Inadequate...
Cisco IOS XR Software NETCONF Over Secure Shell ACL Bypass (cisco-sa-20191120-iosxr-ssh-bypass)
According to its self-reported version, Cisco IOS XR Software is affected by a vulnerability in the access-control logic of the NETCONF over Secure Shell SSH due to a missing check in the NETCONF over SSH access control list ACL. An unauthenticated, remote attacker can exploit this, by by...
[20200402] - Core - Missing checks for the root usergroup in usergroup table
Inproper input validations in the usergroup table class could lead to a broken ACL configuration...
CVE-2020-7955
HashiCorp Consul and Consul Enterprise 1.4.1 through 1.6.2 did not uniformly enforce ACLs across all API endpoints, resulting in potential unintended information disclosure. Fixed in 1.6.3...
CVE-2019-16300
An issue was discovered in Open Network Operating System ONOS 1.14. In the access control application org.onosproject.acl, the host event listener does not handle the following event types: HOSTREMOVED. In combination with other applications, this could lead to the absence of intended code...
CVE-2020-8010
CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot controller component. A remote attacker can execute commands, read from, or write to the target system...
Input validation
CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot controller component. A remote attacker can execute commands, read from, or write to the target system...
CVE-2020-8010
CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot controller component. A remote attacker can execute commands, read from, or write to the target system...
CVE-2020-8010
CVE-2020-8010 affects CA Unified Infrastructure Management (Nimsoft/UIM) robot/controller components across 9.20 and earlier, and 20.1/20.3.x. The issue is improper ACL handling, enabling a remote attacker to execute commands and perform read/write on the target system. Public details in the conn...
CVE-2020-8010: Undefined Security Weakness
CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot controller component. A remote attacker can execute commands, read from, or write to the target system...
DEBIAN-CVE-2013-4090
Varnish HTTP cache before 3.0.4: ACL bug...
CVE-2013-4090
Varnish HTTP cache before 3.0.4: ACL bug...
Design/Logic Flaw
Varnish HTTP cache before 3.0.4: ACL bug...
CVE-2013-4090
Varnish HTTP cache before 3.0.4: ACL bug...
CVE-2013-4090
CVE-2013-4090 concerns the Varnish HTTP cache before 3.0.4, due to an ACL bug in the access control logic. Affected component is the Varnish ACL handling in versions prior to 3.0.4. The practical impact is an integrity issue (I:H in CVSS v3.1) with potentially improper access control, as indicate...
CVE-2013-4090
Varnish HTTP cache before 3.0.4: ACL bug...
