1440 matches found
CVE-2020-12073
The responsive-add-ons plugin before 2.2.7 for WordPress has incorrect access control for wp-admin/admin-ajax.php?action= requests...
PT-2020-3471 · Oracle · Jd Edwards Enterpriseone Tools
Name of the Vulnerable Software and Affected Versions: JD Edwards EnterpriseOne Tools version 9.2 Description: The issue is related to inadequate access control in the Monitoring and Diagnostics component of JD Edwards EnterpriseOne Tools, allowing an unauthenticated attacker with network access...
PT-2020-20627 · Catalyst It · Mahara
Name of the Vulnerable Software and Affected Versions: Mahara versions 18.10 through 18.10.4 Mahara versions 19.04 through 19.04.3 Mahara versions 19.10 through 19.10.1 Description: The issue concerns the disclosure of file metadata information to group members in the Elasticsearch result list,...
PT-2020-19884 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab EE versions 8.0 through 12.7.2 Description: The issue is related to incorrect access control. Recommendations: For GitLab EE versions 8.0 through 12.7.2, update to a version that contains a fix for this issue...
PT-2020-19891 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab EE versions 12.4 through 12.7.2 Description: The issue is related to incorrect access control. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents...
CVE-2019-12999
Lightning Network Daemon lnd before 0.7 allows attackers to trigger loss of funds because of Incorrect Access Control...
CVE-2019-2267
Locked regions may be modified through other interfaces in secure boot loader image due to improper access control. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networkin...
Improper access control
OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to an improper access control, which may return unauthorized tag data when viewing analysis data reference attributes...
PT-2020-1540 · Oracle · Oracle Net +4
Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, 19c Description: The issue is related to inadequate access control in the Oracle ODBC database gateway, which can be exploited by a remote attacker to cause a denial of servic...
PT-2020-1541 · Oracle · Oracle Database Server +1
Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 12.1.0.2, 12.2.0.1, 18c, and 19c Description: The issue is related to insufficient access control in the Core RDBMS component of Oracle Database Server. It can be exploited by a remote attacker with low...
PT-2020-1307 · Oracle · Oracle Identity Manager
Name of the Vulnerable Software and Affected Versions: Oracle Identity Manager versions 11.1.2.3.0 through 12.2.1.3.0 Description: The issue is related to inadequate access control in the Advanced Console component of Oracle Identity Manager. It can be exploited by a remote attacker to compromise...
PT-2020-1520 · Oracle · Oracle Demantra Demand Management
Name of the Vulnerable Software and Affected Versions: Oracle Demantra Demand Management versions 12.2.4 through 12.2.5.1 Description: The issue is related to insufficient access control in the Security component of Oracle Demantra Demand Management, allowing a remote attacker to gain unauthorize...
SUSE-SU-2019:3294-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP4 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-15916: Fixed a memory leak in registerqueuekobjects which might have led denial of service bsc1149448. - CVE-2019-0154: Fixed an improper access...
PT-2019-3579 · Mysql Server +6 · Mysql Server +6
Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.17 and prior Description: The issue is related to inadequate access control in the MySQL Server component, specifically in the Server: Connection subcomponent. This can be exploited by a remote attacker with high...
CVE-2019-6997
GitLab CVE-2019-6997 affects GitLab Community and Enterprise Edition 10.x (from 10.7) and 11.x (before 11.5.8, 11.6.x before 11.6.6, 11.7.x before 11.7.1). The issue is an Incorrect Access Control in system notes that permits a guest user to view merge request titles. No exploitation details are ...
Cisco NX-OS Software Privilege License and Access Control Issues Vulnerability
Cisco NX-OS Software is a set of data center-grade operating system software for switches from the U.S. company Cisco Cisco. A permission and access control issue vulnerability exists in the Simple Network Management Protocol Access Control Column feature of Cisco NX-OS Software, which can be...
IBM Informix Dynamic Server Privilege License and Access Control Issues Vulnerability (CNVD-2019-29419)
IBM Informix Dynamic Server IDS is a scalable object-relational database server from IBM in the United States that provides continuous data availability and disaster recovery, among other features, for clustered data centers. IBM Informix Dynamic Server suffers from a Privilege Permission and...
PT-2019-3707 · Oracle +7 · Oracle Hospitality Reporting/Analytics +7
Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.16 and prior Oracle Hospitality Reporting and Analytics affected versions not specified Description: The issue is related to inadequate access control in the Server: Optimizer component of MySQL Server and the Oracle...
Improper access control
GitLab CE/EE, versions 8.6 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an access control issue that allows a Guest user to make changes to or delete their own comments on an issue, after the issue was made Confidential...