CVE-2016-7811

Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows an attacker on the same network segment to bypass access restriction to perform arbitrary operations via unspecified vectors...

Authentication flaw

I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to bypass access restriction to access data on storage devices inserted into the product via unspecified vectors...

Authentication flaw

Buffalo NC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to bypass access restriction to enable the debug option via unspecified vectors...

CVE-2016-4910

Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to delete other operational administrators' MultiReport filters via unspecified vectors...

CVE-2016-7807

Summary of CVE-2016-7807 : The WFS-SR01 device from I-O DATA DEVICE, INC. contains an access restriction bypass vulnerability in the Pocket Router Function. Affected firmware version is 1.10 and earlier, allowing an unauthenticated remote attacker to access data on storage devices (e.g., SD cards...

CVE-2016-7807

I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to bypass access restriction to access data on storage devices inserted into the product via unspecified vectors...

CVE-2016-7811

Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows an attacker on the same network segment to bypass access restriction to perform arbitrary operations via unspecified vectors...

CVE-2016-7833

Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to delete an arbitrary DBM Cybozu Dezie proprietary format file via unspecified vectors...

CVE-2016-7811

The CVE-2016-7811 entry concerns Corega CG-WLR300NX firmware (version 1.20 and earlier). The vulnerability allows an attacker on the same network segment to bypass access restrictions and perform arbitrary operations via unspecified vectors. Public sources (NVD/NVD mirrors, JVN/JVNDB) consistentl...

CVE-2016-4908

CVE-2016-4908 affects Cybozu Garoon 3.0.0–4.2.2, where an access restriction flaw in the RSS settings allows remote authenticated attackers to bypass protections and alter or delete another user’s private RSS settings via unspecified vectors. The OpenVAS/JVN entries and CVE records corroborate an...

CVE-2016-4910

Cybozu Garoon versions 3.0.0 to 4.2.2 contain an access restriction bypass vulnerability in MultiReport filters. Remote authenticated attackers may delete other operational administrators’ MultiReport filters due to the underlying access control flaw. This CVE is corroborated by multiple sources ...

CVE-2016-7824

CVE-2016-7824 affects Buffalo NC01WH (WNC01WH) devices with firmware 1.0.0.8 and earlier. The issue allows an authenticated attacker to bypass access restrictions to enable the debug option via unspecified vectors. Related sources in the set confirm multiple vulnerabilities in the same device fam...

CVE-2016-7824

Buffalo NC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to bypass access restriction to enable the debug option via unspecified vectors...

CVE-2016-7832

Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to obtain an arbitrary DBM Cybozu Dezie proprietary format file via unspecified vectors...

Access Restriction Bypass using watch notifications (CVE-2017-9505)

Confluence did not check if a user had permission to view a page when creating a workbox notification about new comments. An attacker who can login to Confluence could receive workbox notifications, which contain the content of comments, for comments added to a page after they started watching it...

Access Restriction Bypass using watch notifications (CVE-2017-9505)

Confluence did not check if a user had permission to view a page when creating a workbox notification about new comments. An attacker who can login to Confluence could receive workbox notifications, which contain the content of comments, for comments added to a page after they started watching it...

HPESBNS03755 rev.2 - HPE NonStop Server using Samba, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Access Restriction Bypass, Arbitrary Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Samba on NonStop L Series: T1201L01 through T1201L01^AAL, H and J Series: T1201H01 through T1201H01^AAM CVSS Scores: | CVE ...

Access Restriction Bypass

Moodle is susceptible to access restriction bypass. The bypass exists because frozen form elements are not handled properly. Therefore, it allows authenticated users to manipulate them when submitting form data...

[ASA-201706-7] tomcat8: access restriction bypass

Arch Linux Security Advisory ASA-201706-7 ========================================= Severity: High Date : 2017-06-06 CVE-ID : CVE-2017-5664 Package : tomcat8 Type : access restriction bypass Remote : Yes Link : https://security.archlinux.org/AVG-291 Summary ======= The package tomcat8 before...

[ASA-201706-6] tomcat7: access restriction bypass

Arch Linux Security Advisory ASA-201706-6 ========================================= Severity: High Date : 2017-06-06 CVE-ID : CVE-2017-5664 Package : tomcat7 Type : access restriction bypass Remote : Yes Link : https://security.archlinux.org/AVG-290 Summary ======= The package tomcat7 before...