5960 matches found
CVE-2018-20906: Incorrect Permission Assignment for Critical Resource
cPanel before 71.9980.37 allows attackers to make API calls that bypass the images feature restriction SEC-430...
UBUNTU-CVE-2019-10189
A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Teachers in an assignment group could modify group overrides for other groups in the same assignment...
CVE-2019-10189
A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Teachers in an assignment group could modify group overrides for other groups in the same assignment...
Design/Logic Flaw
A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Teachers in an assignment group could modify group overrides for other groups in the same assignment...
CVE-2019-10189
A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Teachers in an assignment group could modify group overrides for other groups in the same assignment...
CVE-2019-10189
CVE-2019-10189 affects Moodle prior to 3.7.1, 3.6.5, and 3.5.7. The vulnerability is an improper access control vulnerability where teachers in an assignment group can modify group overrides for other groups within the same assignment. The description only states the existence and affected versio...
CVE-2019-10189: Improper Access Control
A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Teachers in an assignment group could modify group overrides for other groups in the same assignment...
VxWorks 6.9.x < 6.9.4.12 / 7 (SR540) / 7 (SR610) Multiple Vulnerabilities (URGENT/11)
Binary data 701083.prm...
CVE-2018-2024: Incorrect Permission Assignment for Critical Resource
IBM QRadar SIEM 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 155350...
PT-2019-6408 · Oracle +6 · Mysql Server +5
Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.16 and prior Description: The issue is related to incorrect privilege assignment in the MySQL Server component of Oracle MySQL, allowing a high-privileged attacker with network access via multiple protocols to...
ZebOS Component Modification Routing
The vulnerability of the ZebOS component of the FortiOS operating system is related to the improper assignment of privileges. Exploiting this vulnerability allows a malicious actor to remotely modify routing settings...
Security Bulletin: An IBM QRadar SIEM protocol is vulnerable to Incorrect Permission Assignment (CVE-2018-2024)
Summary The Log file protocol could allow permissions to a resource to be read or modified by unintended actors. Vulnerability Details CVEID: CVE-2018-2024 Description: IBM QRadar specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by...
CVE-2019-13304
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment...
ALPINE-CVE-2019-13304
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment...
DEBIAN-CVE-2019-13304
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment...
CVE-2019-13304
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment...
CVE-2019-13304
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment...
UBUNTU-CVE-2019-13304
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment...