CVE-2017-18376

An improper authorization check in the User API in TheHive before 2.13.4 and 3.x before 3.3.1 allows users with read-only or read/write access to escalate their privileges to the administrator's privileges. This affects app/controllers/UserCtrl.scala...

CVE-2017-18376

An improper authorization check in the User API in TheHive before 2.13.4 and 3.x before 3.3.1 allows users with read-only or read/write access to escalate their privileges to the administrator's privileges. This affects app/controllers/UserCtrl.scala...

CVE-2017-18376

The Hive vulnerability CVE-2017-18376 is an improper authorization check in the User API (app/controllers/UserCtrl.scala) that lets users with read-only or read/write access escalate to administrator privileges. Affected versions are TheHive before 2.13.4 and 3.x before 3.3.1. Impact details indi...

CVE-2019-3403

The /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check...

CVE-2019-3403

The /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check...

CVE-2019-3403

CVE-2019-3403 affects Atlassian Jira's REST endpoint /rest/api/2/user/picker, with an incorrect authorization check that allows remote attackers to enumerate usernames. Affected are Jira versions prior to 7.13.3, 8.0.0 prior to 8.0.4, and 8.1.0 prior to 8.1.1. Public sources (NVD/NIST, Nessus, an...

CVE-2019-3401

Affected product: Atlassian Jira. Vulnerability CVE-2019-3401 arises from an incorrect authorization check in the ManageFilters.jspa resource, allowing remote attackers to enumerate usernames and potentially access sensitive information or perform unauthorized actions. Impact is information discl...

Privilege Escalation

OpenStack Compute nova launches and schedules large networks of virtual machines, creating a redundant and scalable cloud computing platform. Compute provides the software, control panels, and APIs required to orchestrate a cloud, including running virtual machine instances, managing networks, an...

Infomation Disclosure

OpenStack Compute nova launches and schedules large networks of virtual machines, creating a redundant and scalable cloud computing platform. Compute provides the software, control panels, and APIs required to orchestrate a cloud, including running virtual machine instances, managing networks, an...

CVE-2019-3399

The BrowseProjects.jspa resource in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to see information for archived projects through a missing authorisation check...

Information disclosure in the BrowseProjects.jspa resource - CVE-2019-3399

The BrowseProjects.jspa resource in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to see information for archived projects through a missing authorisation check...

Information disclosure in the /rest/api/2/user/picker rest resource - CVE-2019-3403

The /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check...

Permissions bypass in the inline-create rest resource - CVE-2018-20826

The inline-create rest resource in Jira before version 7.12.3 allows authenticated remote attackers to set the reporter in issues via a missing authorisation check...

CVE-2019-9974

diagtool.cgi on DASAN H660RM GPON routers with firmware 1.03-0022 lacks any authorization check, which allows remote attackers to run a ping command via a GET request to enumerate LAN devices or crash the router with a DoS attack...

openSUSE Security Update : postgresql10 (openSUSE-2019-659)

This update for postgresql10 fixes the following issues : PostgreSQL 10 was updated to 10.5 : - https://www.postgresql.org/about/news/1851/ - https://www.postgresql.org/docs/current/static/release-10-5.html A dump/restore is not required for those running 10.X. However, if you use the adminpack...

Authorization

Banking services from SAP 9.0 FSAPPL version 5 and SAP S/4HANA Financial Products Subledger S4FPSL, version 1 performs an inadequate authorization check for an authenticated user, potentially resulting in escalation of privileges...

CVE-2019-0276

Banking services from SAP 9.0 FSAPPL version 5 and SAP S/4HANA Financial Products Subledger S4FPSL, version 1 performs an inadequate authorization check for an authenticated user, potentially resulting in escalation of privileges...

CVE-2019-0276

CVE-2019-0276 affects SAP Banking services from SAP 9.0 (FSAPPL v5) and SAP S/4HANA Financial Products Subledger (S4FPSL v1). Description indicates an inadequate authorization check for an authenticated user, potentially enabling escalation of privileges. No precise exploit details, affected comp...

CVE-2019-0276

Banking services from SAP 9.0 FSAPPL version 5 and SAP S/4HANA Financial Products Subledger S4FPSL, version 1 performs an inadequate authorization check for an authenticated user, potentially resulting in escalation of privileges...

CVE-2019-1604 Cisco NX-OS Software Privilege Escalation Vulnerability

A vulnerability in the user account management interface of Cisco NX-OS Software could allow an authenticated, local attacker to gain elevated privileges on an affected device. The vulnerability is due to an incorrect authorization check of user accounts and their associated Group ID GID. An...