CVE-2017-10857

Cybozu Office 10.0.0 to 10.6.1 allows authenticated attackers to bypass access restriction to perform arbitrary actions via "Cabinet" function...

CVE-2017-10857

Cybozu Office 10.0.0 to 10.6.1 allows authenticated attackers to bypass access restriction to perform arbitrary actions via "Cabinet" function...

CVE-2017-10857

CVE-2017-10857 affects Cybozu Office (versions 10.0.0–10.6.1). The flaw allows an authenticated user to bypass access restrictions and perform arbitrary actions through the Cabinet function, enabling access to folders they should not reach and to act with the user’s privileges. The underlying iss...

[ASA-201710-19] thunderbird: multiple issues

Arch Linux Security Advisory ASA-201710-19 ========================================== Severity: Critical Date : 2017-10-12 CVE-ID : CVE-2017-7793 CVE-2017-7805 CVE-2017-7810 CVE-2017-7814 CVE-2017-7818 CVE-2017-7819 CVE-2017-7823 CVE-2017-7824 Package : thunderbird Type : multiple issues Remote :...

CVE-2016-10514

urlcheckformat in include/functions.inc.php in Piwigo before 2.8.3 allows remote attackers to bypass intended access restrictions via a URL that contains a " character, or a URL beginning with a substring other than the http:// or https:// substring...

OWASP AntiSamy CVE-2017-14735 Cross Site Scripting Vulnerability

Description OWASP AntiSamy is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the...

CVE-2015-1854

CVE-2015-1854 affects 389-ds-base (Directory Server). The flaw allows an unauthenticated attacker to bypass access controls by issuing an ldapmodrdn call, enabling unauthorized modifications of directory entries. Connected sources (Debian DLA-1428, Debian tracker, Amazon ALAS-2015-538, Fedora 201...

Design/Logic Flaw

The ZXR10 1800-2S before v3.00.40 incorrectly restricts access to a resource from an unauthorized actor, resulting in ordinary users being able to download configuration files to steal information like administrator accounts and passwords...

CVE-2017-10930

The ZXR10 1800-2S before v3.00.40 incorrectly restricts access to a resource from an unauthorized actor, resulting in ordinary users being able to download configuration files to steal information like administrator accounts and passwords...

CVE-2015-0110

IBM Business Process Manager aka BPM 7.5.x, 8.0.x, and 8.5.x and WebSphere Lombardi Edition aka WLE 7.2.x allow remote authenticated users to bypass intended access restrictions on internal service types via vectors involving the executeServiceByName URL...

CVE-2017-10846

Wi-Fi STATION L-02F Software version V10b and earlier allows remote attackers to bypass access restrictions to obtain information on device settings via unspecified vectors...

How to block MAM URL access through Browser

Accessing the MAM URL directly through browser prompts the users to enter their AD Credentials. It acts as a tool for users to validate their credentials Username/Password. Some might treat this as a Security Violation. This article helps you to restrict the Browser access to MAM URL NetScaler...

Microsoft Remote Desktop Virtual Host CVE-2017-8714 Remote Code Execution Vulnerability

Description Microsoft Remote Desktop Virtual Host is prone to a remote code-execution vulnerability. Successful exploits will allow the attacker to execute arbitrary code on the affected system. Failed attacks may cause denial-of-service conditions. Technologies Affected Microsoft Windows 10...

CVE-2017-12224

CVE-2017-12224 affects Cisco Meeting Server. The issue is the incorrect implementation of the configuration setting Guest access via hyperlinks, allowing an authenticated, remote attacker to join a meeting via a crafted hyperlink even when access should be denied. The attacker would still need a ...

[ASA-201709-2] postgresql: multiple issues

Arch Linux Security Advisory ASA-201709-2 ========================================= Severity: High Date : 2017-09-06 CVE-ID : CVE-2017-7546 CVE-2017-7547 CVE-2017-7548 Package : postgresql Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-381 Summary ======= The packag...

[ASA-201709-1] chromium: multiple issues

Arch Linux Security Advisory ASA-201709-1 ========================================= Severity: Critical Date : 2017-09-06 CVE-ID : CVE-2017-5111 CVE-2017-5112 CVE-2017-5113 CVE-2017-5114 CVE-2017-5115 CVE-2017-5116 CVE-2017-5117 CVE-2017-5118 CVE-2017-5119 CVE-2017-5120 Package : chromium Type :...

CVE-2017-10833

"Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows remote attackers to bypass access restriction to view information or modify configurations via unspecified vectors...

CVE-2017-10833

"Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows remote attackers to bypass access restriction to view information or modify configurations via unspecified vectors...

Authentication flaw

"Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows remote attackers to bypass access restriction to view information or modify configurations via unspecified vectors...

CVE-2017-10833

"Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows remote attackers to bypass access restriction to view information or modify configurations via unspecified vectors...