CVE-2017-15680

In Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows unauthenticated attackers to view and modify administrative data...

CVE-2017-15680

In Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows unauthenticated attackers to view and modify administrative data...

CVE-2017-15680: Missing Authorization

In Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows unauthenticated attackers to view and modify administrative data...

Microsoft SharePoint Server Information Disclosure

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information through a specially create...

Adobe Connect Instant Messaging Disclosure

The vulnerability of the Adobe Connect instant messaging program is related to the lack of protection for administrative data. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...

Thunderbird Unauthorized Access

The vulnerability of the Thunderbird email client is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by using an embedded form field by pressing the enter key in t...

Norton Password Manager Service Information Disclosure

The vulnerability of Norton Password Manager’s password manager component is related to the lack of protection for administrative data. Exploiting this vulnerability could allow a hacker to access and disclose the protected information...

McAfee Web Gateway Disclosure

The vulnerability of the McAfee Web Gateway is related to the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to disclose protected information through a specially created web page...

Moodle Information Disclosure

The vulnerability of the Moodle learning management system’s sub-component message/index.php is related to the lack of protection for administrative data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to personal contact information and details...

Moodle Account Access

The vulnerability of the login/confirm.php sub-component of the Moodle learning management system is related to the lack of protection for administrative data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to user account information during attemp...

Hardcoded credentials

The HttpClusterServlet and HttpProxyServlet in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 through SP7, 8.1 through SP5, 9.0, and 9.1, when SecureProxy is enabled, may process "external requests on behalf of a system identity," which allows remote attackers to access...

CVE-2007-2695

The HttpClusterServlet and HttpProxyServlet in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 through SP7, 8.1 through SP5, 9.0, and 9.1, when SecureProxy is enabled, may process "external requests on behalf of a system identity," which allows remote attackers to access...