Improper access control

Brave Software Inc. Brave version version 0.22.810 to 0.24.0 contains a Other/Unknown vulnerability in function ContentSettingsObserver::AllowScript in contentsettingsobserver.cc that can result in Websites can run inline JavaScript even if script is blocked, making attackers easier to track user...

The vulnerability of the identification and access control system of IBM Cloud Private allows a perpetrator to expose protected information.

The vulnerability of the IBM Cloud Private storage access identification and management system arises from the lack of encryption measures for protected data. Exploiting this vulnerability could allow attackers to disclose protected information...

100tb.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-712337 Description| Value ---|--- Affected Website:| 100tb.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| hidden...

Google Android Easel Component Permission License and Access Control Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Easel is a component. An elevation vulnerability exists in the Easel component of Android. A local attacker can exploit this vulnerability to elevate privileges write out...

Access control error vulnerability in discuz v3.2

Discuz! is a very popular Web forum program in the Chinese community. An access control error vulnerability exists in discuz v3.2. An attacker can exploit this vulnerability to compromise the confidentiality and availability of the program...

SUSE-SU-2018:3996-1 Security update for rubygem-activejob-5_1

This update for rubygem-activejob-51 fixes the following issues: Security issue fixed: - CVE-2018-16476: Fixed broken access control vulnerability bsc1117632...

loc.gov Improper Access Control vulnerability

Open Bug Bounty ID: OBB-700401 Description| Value ---|--- Affected Website:| loc.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| hidden unti...

faringdontowncouncil.gov.uk Improper Access Control vulnerability

Open Bug Bounty ID: OBB-695908 Description| Value ---|--- Affected Website:| faringdontowncouncil.gov.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3...

CVE-2018-1000805

Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity...

185.62.238.82 Improper Access Control vulnerability

Open Bug Bounty ID: OBB-682815 Description| Value ---|--- Affected Website:| 185.62.238.82 Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| hidde...

universitas21.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-681045 Description| Value ---|--- Affected Website:| universitas21.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

CVE-2018-6503

A potential Access Control vulnerability has been identified in ArcSight Management Center ArcMC in all versions prior to 2.81. This vulnerability could be exploited to allow for vulnerable Access Controls...

CVE-2018-6504 MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability

A potential Cross-Site Request Forgery CSRF vulnerability has been identified in ArcSight Management Center ArcMC in all versions prior to 2.81. This vulnerability could be exploited to allow for Cross-Site Request Forgery CSRF...

CVE-2018-6500 MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability

A potential Directory Traversal Security vulnerability has been identified in ArcSight Management Center ArcMC in all versions prior to 2.81. This vulnerability could be remotely exploited to allow Directory Traversal...

Intel OpenVINO Toolkit for Windows Privilege License and Access Control Issues Vulnerability

Intel OpenVINO Toolkit for Windows is a Windows-based toolkit for developing multi-platform computer vision solutions from Intel. Intel OpenVINO Toolkit for Windows is vulnerable to a privilege permission and access control issue. An attacker could exploit this vulnerability to execute code using...

aiesec.nl Improper Access Control vulnerability

Open Bug Bounty ID: OBB-675520 Description| Value ---|--- Affected Website:| aiesec.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

forums.fogproject.org Improper Access Control vulnerability

Open Bug Bounty ID: OBB-673655 Description| Value ---|--- Affected Website:| forums.fogproject.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

Samsung Email Privilege Access Control Vulnerability

Samsung Email is an application from Samsung South Korea for sending, receiving and managing e-mail. A privilege=access control vulnerability exists in the handling of EML files in Samsung Email, which stems from the program failing to properly validate user-submitted data. The vulnerability can ...

The vulnerability of the API components of Sun ZFS Storage Appliance Kit allows a hacker to gain full control over the application.

The vulnerability of the API framework components of the Sun ZFS Storage Appliance Kit AK is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to gain full control over the application...

Oracle Financial Services Applications FLEXCUBE Enterprise Limits and Collateral Management component access control error vulnerability (CNVD-2019-39916)

Oracle Financial Services Applications is Oracle's suite of financial services software that combines core banking, online banking and property management. FLEXCUBE Enterprise Limits and Collateral Management is a component of FLEXCUBE that is used to manage real-time online exposure of products...