7228 matches found
CVE-2017-2095
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in the mail function leading to an alteration of the order of mail folders via unspecified vectors...
Authentication flaw
Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to delete "customapp" templates via unspecified vectors...
Design/Logic Flaw
ProSAFE Plus Configuration Utility prior to 2.3.29 allows remote attackers to bypass access restriction and change configurations of the switch via SOAP requests...
CVE-2017-2091
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Phone Messages function to alter the status of phone messages via unspecified vectors...
CVE-2017-2091
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Phone Messages function to alter the status of phone messages via unspecified vectors...
CVE-2017-2094
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Workflow and the "MultiReport" function to alter or delete information via unspecified vectors...
CVE-2017-2116
Cybozu Office 10.0.0–10.5.0 contains an access restriction bypass in the templates delete function for the ustomapp eature, enabling remote authenticated attackers to delete ustomapp mplates via unspecified vectors. The CVE is CVE-2017-2116. The vulnerability is documented across multiple sourc...
CVE-2017-2143
CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, and CS-Cart Multivendor Japanese Edition v4.3.10-jp-1 and earlier, are affected by an unauthenticated access-permission bypass (CWE-425) that allows a remote attacker to bypass restrictions and create a request to return a customer-purchased item...
CVE-2017-2139
CS-Cart Japanese Edition (and CS-Cart Multivendor Japanese Edition) versions up to 4.3.10 are affected. The issue allows remote attackers to bypass access restrictions (CWE-425) and obtain customer information via orders.pre.php. Impact is unauthenticated access to consumer data (e.g., name and s...
CVE-2017-2115
CVE-2017-2115 affects Cybozu Office 10.0.0–10.5.0. It describes an access restriction bypass in the "+customapp" component, allowing remote authenticated attackers to obtain information from other logged-in users via unspecified vectors. The connected documents also reference related issues (CVE-...
CVE-2017-2095
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in the mail function leading to an alteration of the order of mail folders via unspecified vectors...
CVE-2017-2091
Cybozu Garoon 3.0.0 to 4.2.3 is affected by CVE-2017-2091, an access restriction flaw in the Phone Messages function. The issue allows remote authenticated attackers to bypass access restrictions and alter the status of phone messages via unspecified vectors. Affected component: Phone Messages fe...
CVE-2017-2115
Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to obtain "customapp" information via unspecified vectors...
CVE-2017-2095
CVE-2017-2095 affects Cybozu Garoon 3.0.0 to 4.2.3. A remote authenticated attacker can bypass access restrictions in the mail function, resulting in alteration of the order of mail folders. The root cause is an access restriction flaw in the mail handling logic. remediation per the documents is ...
CVE-2017-2116
Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to delete "customapp" templates via unspecified vectors...
CVE-2017-2137
CVE-2017-2137 affects NETGEAR ProSAFE Plus Configuration Utility prior to 2.3.29. The Vulnerability is an improper access control flaw that allows remote attackers to bypass access restrictions and modify switch configurations via SOAP requests. Affected component is the Windows-based Configurati...
CVE-2017-2094
Cybozu Garoon 3.0.0–4.2.3 contains an access restriction flaw in Workflow and the MultiReport function (CWE-284) that allows remote authenticated attackers to bypass permissions and alter or delete information. Affected product: Cybozu Garoon. Root cause: inadequate access control within the Work...
[ASA-201704-6] firefox: multiple issues
Arch Linux Security Advisory ASA-201704-6 ========================================= Severity: Critical Date : 2017-04-21 CVE-ID : CVE-2017-5429 CVE-2017-5430 CVE-2017-5432 CVE-2017-5433 CVE-2017-5434 CVE-2017-5435 CVE-2017-5436 CVE-2017-5437 CVE-2017-5438 CVE-2017-5439 CVE-2017-5440 CVE-2017-5441...
