spectaculaires.eu Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1031910 Security Researcher tedongbonga15 Helped patch 150 vulnerabilities Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting spectaculaires.eu website and its users. Followin...

thegreenvilleherald.com Improper Access Control vulnerability

Security Researcher geeknik Helped patch 8574 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting thegreenvilleherald.com website and its users. Following...

Improper access control

There is an improper access control vulnerability in Huawei Share. The software does not properly restrict access to certain file from certain application. An attacker tricks the user into installing a malicious application then establishing a connect to the attacker through Huawei Share,...

Improper access control

An issue was discovered in GitLab Community and Enterprise Edition 8.15 through 12.4 in the Comments Search feature provided by the Elasticsearch integration. It has Incorrect Access Control...

d-junc-novar.jct.usu.edu Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1023724 Security Researcher forewarnedyou Helped patch 1 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting d-junc-novar.jct.usu.edu website and its users. Following coordinated and responsible vulnerability disclosure...

Oracle Linux 6 : kernel (ELSA-2019-3878)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-3878 advisory. 2.6.32-754.24.3.OL6 - Update genkey bug 25599697 2.6.32-754.24.3 - drm drm/i915/cmdparser: Fix jump whitelist clearing Denys Vlasenko 1756891 CVE-2019-0155...

CVE-2019-0155

Insufficient access control in a subsystem for Intel R processor graphics in 6th, 7th, 8th and 9th Generation IntelR CoreTM Processor Families; IntelR PentiumR Processor J, N, Silver and Gold Series; IntelR CeleronR Processor J, N, G3900 and G4900 Series; IntelR AtomR Processor A and E3900 Series...

CVE-2019-12719

An issue was discovered in PictureManagemvc.aspx in AUO SunVeillance Monitoring System before v1.1.9e. There is an incorrect access control vulnerability that can allow an unauthenticated user to upload files via a modified authority parameter...

CVE-2019-12719

The CVE-2019-12719 entry concerns AUO SunVeillance Monitoring System, specifically Picture_Manage_mvc.aspx. Affected version: before v1.1.9e. Root cause: incorrect access control that can be bypassed via a modified authority parameter. Consequence: unauthenticated attacker can upload files, indic...

Rockwellautomation Micrologix Unspecified Vulnerability

An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...

CVE-2019-16877

Portainer before 1.22.1 has Incorrect Access Control issue 4 of 4...

sterlingstaffingsolutions.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1008352 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

dice.csail.mit.edu Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1003336 Security Researcher Elicx Helped patch 30 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting dice.csail.mit.edu website and its users. Following...

lightspeed.igniteoutsourcing.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1001921 Security Researcher geeknik Helped patch 8949 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

2cls.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1001716 Security Researcher Elicx Helped patch 30 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting 2cls.com website and its users. Following coordinated and...

PT-2019-3755 · Oracle +1 · Oracle Business Intelligence Enterprise Edition +1

Name of the Vulnerable Software and Affected Versions: Oracle Business Intelligence Enterprise Edition versions 12.2.1.3.0 through 12.2.1.4.0 Description: The issue is related to inadequate access control in the Analytics Actions subcomponent of Oracle Business Intelligence Enterprise Edition, pa...

staging.prix-elec.com Improper Access Control vulnerability

Security Researcher Rbcafe Helped patch 251 vulnerabilities Received 3 Coordinated Disclosure badges Received 7 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting staging.prix-elec.com website and its users. Following...

The compatibility subsystem for running Linux applications allows Windows Subsystem for Linux (WSL) operating systems. This enables attackers to elevate their privileges and execute arbitrary code.

The vulnerability of the compatibility subsystem for running Linux applications in Windows Subsystem for Linux WSL operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code using a...

CVE-2019-13405 Advan VD-1 allows a remote user to enable Android Debug Bridge without any authentication

A broken access control vulnerability found in Advan VD-1 firmware version 230 leads to insecure ADB service. An attacker can send a POST request to cgibin/AdbSetting.cgi to enable ADB without any authentication then take the compromised device as a relay or to install mining software...

aplm.gov.in Improper Access Control vulnerability

Open Bug Bounty ID: OBB-952199 Security Researcher ANS Helped patch 452 vulnerabilities Received 8 Coordinated Disclosure badges Received 31 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting aplm.gov.in website and its user...