Authentication flaw

Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to bypass access restriction to browse unauthorized pages via the application 'Management of Basic System'...

CVE-2019-5955

The CVE-2019-5955 issue concerns the CREATE SD official App for Android (version 1.0.2 and earlier). The root cause is an improper access control vulnerability (CWE-284) in how the app handles Intents, enabling a remote attacker to craft an interaction that directs a user to an arbitrary URL. Thi...

CVE-2019-5955

CREATE SD official App for Android version 1.0.2 and earlier allows remote attackers to bypass access restriction to lead a user to access an arbitrary website via vulnerable application and conduct phishing attacks...

CVE-2019-5954

CVE-2019-5954 relates to the JR East Japan train operation information push notification App for Android (version 1.2.4 and earlier). The connected documents identify an access control error (CWE-284) in the API server that fails to restrict access permissions, enabling a remote attacker to obtai...

CVE-2019-5954

JR East Japan train operation information push notification App for Android version 1.2.4 and earlier allows remote attackers to bypass access restriction to obtain or alter the user's registered information via unspecified vectors...

CVE-2019-5943

Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to view the information without view privileges via the application 'Bulletin' and the application 'Cabinet'...

CVE-2019-5942

Summary of CVE-2019-5942 : Cybozu Garoon versions 4.0.0–4.10.1 are affected by a vulnerability in the Cabinet module’s Multiple Files Download function that allows remote authenticated attackers to bypass access controls and obtain files without proper privileges. Public documents from NVD and Re...

CVE-2019-5935

CVE-2019-5935 concerns Cybozu Garoon 4.0.0 to 4.10.1, where remote authenticated attackers could bypass access control and change user information without privileges via the Item function of User Information. The issue’s impact is that a user who can log in may alter user data without proper auth...

CVE-2019-5944

CVE-2019-5944 affects Cybozu Garoon 4.0.0 to 4.10.1. A remote authenticated attacker can bypass access restrictions and alter contents of the application “Address” without modify privileges via the application “Address.” Multiple sources corroborate the issue as a privilege/access-control flaw en...

CVE-2019-5944

Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction alter the contents of application 'Address' without modify privileges via the application 'Address'...

CVE-2019-5933

Cybozu Garoon 4.0.0 to 4.10.0 allows remote authenticated attackers to bypass access restriction to view the Bulletin Board without view privileges via the application 'Bulletin'...

CVE-2019-5941

CVE-2019-5941 affects Cybozu Garoon 4.0.0 to 4.10.1. A privilege/access-control flaw in the Multi Report functionality allows remote authenticated attackers to bypass access restrictions and alter the Report without proper access privileges. Impact is the unauthorized modification of reports for ...

CVE-2019-5933

CVE-2019-5933 affects Cybozu Garoon 4.0.0 to 4.10.0. The vulnerability allows remote authenticated attackers to bypass access restrictions and view the Bulletin Board without proper view privileges via the Bulletin application. The root cause is an access-control bypass in the Bulletin feature, e...

CVE-2019-5935

Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to change user information without access privileges via the Item function of User Information...

CVE-2019-5930

Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to bypass access restriction to browse unauthorized pages via the application 'Management of Basic System'...

CVE-2019-5930

CVE-2019-5930 affects Cybozu Garoon 4.0.0–4.6.3. Root cause: bypass of access restrictions in the Management of Basic System, enabling remote attackers to browse unauthorized pages. Impact: unauthorized page access due to broken access control. Exploitation details are not provided beyond the des...

Access Restriction Bypass

The Ghostscript is vulnerable to access restriction bypass.Attacker can use malicious PostScript to trigger the attack since forceput in DefineResource is still accessible...

Access Restriction Bypass

The Ghostscript is vulnerable to access restriction bypass.Attacker can use malicious PostScript to trigger the attack since superexec operator is available...

Unified Write Filter Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Unified Write Filter UWF feature for Windows 10 when it improperly restricts access to the registry. An attacker who successfully exploited the vulnerability could make changes to the registry keys protected by UWF without having administrator...

Microsoft Windows Diagnostics Hub CVE-2019-0727 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to elevate the privileges and take control of an affected system. Technologies Affected Microsoft Visual Studio 2015 Update 3 Microsoft Visual Studio 2017 15.0 Microsoft...