CVE-2020-11891

An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of comusers allow the unauthorized editing of usergroups...

Default credentials

An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of comusers allow the unauthorized deletion of usergroups...

Code injection

An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of comusers allow the unauthorized editing of usergroups...

Input validation

An issue was discovered in Joomla! before 3.9.17. Improper input validations in the usergroup table class could lead to a broken ACL configuration...

CVE-2020-11891

An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of comusers allow the unauthorized editing of usergroups...

CVE-2020-11891

An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of comusers allow the unauthorized editing of usergroups...

CVE-2020-11891

Joomla! prior to 3.9.17 contains an ACL misconfiguration in the com_users access level editing function, allowing unauthorized editing of user groups. This CVE (CVE-2020-11891) is consistently described across multiple sources (Red Hat, OSV, NVD, CNVD, OpenVAS, etc.) with the same root cause: inc...

CVE-2020-11889

An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of comusers allow the unauthorized deletion of usergroups...

CVE-2020-11889

CVE-2020-11889 : Joomla! before 3.9.17 has an ACL check flaw in the com_users access level section that allows unauthorized deletion of usergroups due to incorrect access-control checks. Affected product is Joomla! (CMS). The connected documents confirm the root cause and impact but do not includ...

CVE-2020-11890

An issue was discovered in Joomla! before 3.9.17. Improper input validations in the usergroup table class could lead to a broken ACL configuration...

CVE-2020-11890

An issue was discovered in Joomla! before 3.9.17. Improper input validations in the usergroup table class could lead to a broken ACL configuration...

CVE-2020-11890

Joomla! core before 3.9.17 contains an input validation issue in the usergroup table class that can lead to a broken ACL configuration. Affected component: Joomla! usergroup handling. Impact: improper ACL configuration (highly likely misconfigurations of access control). Root cause: insufficient ...

CVE-2020-11890: Improper Input Validation

An issue was discovered in Joomla! before 3.9.17. Improper input validations in the usergroup table class could lead to a broken ACL configuration...

CVE-2020-11889: Undefined Security Weakness

An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of comusers allow the unauthorized deletion of usergroups...

CVE-2020-11891: Undefined Security Weakness

An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of comusers allow the unauthorized editing of usergroups...

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2020-1460)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists through inconsistency in the methods for allocating and freeing NFSv4 ACL data; CVE-2010-4250 fix caused a regression; a flaw in nextpidmap and inetdiagbcaudit; flaws in the CAN implementation; a race condition in the memory...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. Inconsistency in the methods for allocating and freeing NFSv4 ACL data and the way mapping expansions were handled could allow a local, unprivileged user to cause a denial of service...

Denial Of Service (DoS)

kernel is vulnerable to denial of service. An inconsistency was found in the interaction between the Linux kernel's method for allocating NFSv4 Network File System version 4 ACL data and the method by which it was freed. This inconsistency led to a kernel panic which could be triggered by a local...

Access Control Bypass

dovecot is vulnerable to access control bypass. A flaw was found in Dovecot's ACL plug-in. The ACL plug-in treated negative access rights as positive rights, which could allow an attacker to bypass intended access restrictions...