CVE-2017-5829

An access restriction bypass vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

Design/Logic Flaw

An access restriction bypass vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5829

An access restriction bypass vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5829

CVE-2017-5829 concerns an access restriction bypass in HPE Aruba ClearPass Policy Manager, affecting the 6.6.x line. Multiple trusted sources (NVD and CVE listings) describe a vulnerability that could allow bypassing security controls locally on affected appliances. The CVSS v3.0 score is 7.8 (HI...

Access Restriction Bypass

github.com/snapcore/snapd is vulnerable to access restriction bypass. The match arguments are not made when the snap logs command is made from a call to journalctl allowing attackers to bypass systemd-journald's access restrictions...

CVE-2015-2204

Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to bypass an intended access restriction and obtain sensitive information about org unit settings by leveraging failure of open-ils.actor.ousetting.ancestordefault to enforce viewperm when no auth token is...

Design/Logic Flaw

Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to bypass an intended access restriction and obtain sensitive information about org unit settings by leveraging failure of open-ils.actor.ousetting.ancestordefault to enforce viewperm when no auth token is...

CVE-2015-2204

Affected software: Evergreen ILS (open-ils) prior to specific patch levels. The vulnerability arises when open-ils.actor.ou_setting.ancestor_default fails to enforce view_perm in the absence of an auth token, allowing remote attackers to view sensitive org unit settings. Impact is information dis...

CVE-2015-2204

Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to bypass an intended access restriction and obtain sensitive information about org unit settings by leveraging failure of open-ils.actor.ousetting.ancestordefault to enforce viewperm when no auth token is...

CVE-2017-15365

Removed by vendor...

CVE-2017-15531

Symantec Reporter 9.5 prior to 9.5.4.1 and 10.1 prior to 10.1.5.5 does not restrict excessive authentication attempts for management interface users. A remote attacker can use brute force search to guess a user password and gain access to Reporter...

CVE-2017-12116

An exploitable improper authorization vulnerability exists in minersetGasPrice API of cpp-ethereum's JSON-RPC commit 4e1015743b95821849d001618a7ce82c7c073768. A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger...

CVE-2018-5377

Discuz! DiscuzX X3.4 allows remote attackers to bypass intended access restrictions via the archiver\index.php action parameter...

CVE-2018-5377

Discuz! DiscuzX X3.4 allows remote attackers to bypass intended access restrictions via the archiver\index.php action parameter...

[ASA-201801-10] intel-ucode: access restriction bypass

Arch Linux Security Advisory ASA-201801-10 ========================================== Severity: High Date : 2018-01-10 CVE-ID : CVE-2017-5715 Package : intel-ucode Type : access restriction bypass Remote : No Link : https://security.archlinux.org/AVG-582 Summary ======= The package intel-ucode...

[ASA-201801-6] linux-lts: access restriction bypass

Arch Linux Security Advisory ASA-201801-6 ========================================= Severity: High Date : 2018-01-08 CVE-ID : CVE-2017-5754 Package : linux-lts Type : access restriction bypass Remote : No Link : https://security.archlinux.org/AVG-577 Summary ======= The package linux-lts before...

[ASA-201801-3] linux-zen: multiple issues

Arch Linux Security Advisory ASA-201801-3 ========================================= Severity: High Date : 2018-01-05 CVE-ID : CVE-2017-16995 CVE-2017-16996 CVE-2017-17449 CVE-2017-17558 CVE-2017-17712 CVE-2017-17805 CVE-2017-17806 CVE-2017-17852 CVE-2017-17853 CVE-2017-17854 CVE-2017-17855...

[ASA-201801-4] linux-hardened: multiple issues

Arch Linux Security Advisory ASA-201801-4 ========================================= Severity: High Date : 2018-01-05 CVE-ID : CVE-2017-16995 CVE-2017-16996 CVE-2017-17448 CVE-2017-17449 CVE-2017-17450 CVE-2017-17558 CVE-2017-17712 CVE-2017-17741 CVE-2017-17805 CVE-2017-17806 CVE-2017-17852...

CVE-2015-8008

CVE-2015-8008 relates to the MediaWiki OAuth extension. The description states that it improperly negotiates a new client token only over Special:OAuth/initiate, enabling attackers to bypass IP address access restrictions by making an API request with an existing token. The provided data does not...

CVE-2017-1191

An undisclosed vulnerability in CLM applications including IBM Rational Collaborative Lifecycle Management 4.0, 5.0, and 6.0 with potential for failure to restrict URL Access. IBM X-Force ID: 123661...