Medtronic Valleylab FT10 and Valleylab LS10 Energy Platform License Issue Vulnerability

The Medtronic Valleylab FT10 and Valleylab LS10 Energy Platform are both Medtronic power devices for the medical industry. An authorization issue vulnerability exists in Medtronic Valleylab FT10 VLFT10GEN versions 2.1.0 and earlier, 2.0.3 and earlier, and Valleylab LS10 Energy Platform VLLS10GEN...

IBM QRadar SIEM Authorization Issues Vulnerability

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. An authorization...

JetBrains Hub Authorization Issues Vulnerability

JetBrains Hub is a web-based application from the Czech company JetBrains. The program is capable of integrating multiple JetBrains team tools together. An authorization issue vulnerability exists in versions of JetBrains Hub prior to 2018.4.11436. The vulnerability stems from a lack of...

Craft CMS Authorization Issues Vulnerability

Craft CMS is a content management system CMS. An authorization issue vulnerability exists in Craft CMS 3.1.7 and earlier versions, which can be exploited by attackers to conduct brute force attacks...

ClonOS WEB control panel authorization issue vulnerability

ClonOS is an open source platform based on FreeBSD. The platform is mainly used for the creation and management of virtual environments. web control panel is one of the web-based ClonOS control panel. An authorization issue vulnerability exists in the clonos.php file in ClonOS WEB control panel...

Citrix Systems NetScaler Gateway and Citrix Application Delivery Controller Authorization Issues Vulnerability

Citrix Systems NetScaler Gateway Citrix Systems Gateway and Citrix Application Delivery Controller ADC are products of Citrix Systems, Inc.Citrix Systems NetScaler Gateway is a secure remote access solution. The solution provides administrators with application-level and data-level controls to...

Palo Alto Networks Zingbox Inspector Authorization Issues Vulnerability

The Palo Alto Networks Zingbox Inspector is a locally deployed appliance in a Zingbox IoT Command Center IoT control center solution from Palo Alto Networks, USA. An authorization issue vulnerability exists in Palo Alto Networks Zingbox Inspector version 1.280 and earlier. The vulnerability stems...

cPanel Authorization Issues Vulnerability (CNVD-2019-36140)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An authorization issue vulnerability exists in versions of cPanel prior to 11.54.0.4. The vulnerability stems from a lack of...

cPanel Authorization Issues Vulnerability (CNVD-2019-36126)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An authorization issue vulnerability exists in cPanel. Detailed vulnerability details are not available at this time...

D-Link DIR-412 Authorization Issues Vulnerability

The D-Link DIR-412 is a wireless router from AUO D-Link of Taiwan, China. An authorization issue vulnerability exists in the D-Link DIR-412 A1-1.14WW version, which stems from a failure to ask for authentication on some web pages, and can be exploited by an attacker to gain access to the router's...

Juniper Networks Junos OS License Issue Vulnerability (CNVD-2020-13540)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. An authorization issue vulnerability exists in Juniper Networks Junos OS versions prior to 18.2R1 and prior to 18.2X75-D5,...

Couchbase Server Authorization Issues Vulnerability (CNVD-2019-34123)

Couchbase Server is a distributed open source NoSQL non-relational database from the U.S. company Couchbase , which mainly supports data query , full-text search and active global replication and other functions . An authorization issue vulnerability exists in Couchbase Server versions 6.0.0 and...

Cisco IOS XE ASIC Register Write Vulnerability

Cisco IOS XE is a set of operating systems developed by Cisco for its network devices. An ASIC register write vulnerability exists in the CLI of Cisco IOS XE. The vulnerability stems from improper input validation and authorization of specific commands that a user can execute in the CLI. An...

Schneider Electric Wiser for KNX and spaceLYnk Authorization Issues Vulnerability

Schneider Electric spaceLYnk and Wiser for KNX are both products of the French company Schneider Electric. spaceLYnk is a programmable logic controller. wiser for KNX is a home automation control system. An authorization issue vulnerability exists in Schneider Electric spaceLYnk prior to version...

floragunn Search Guard Authorization Issues Vulnerability

floragunn Search Guard is a German floragunn company for Elasticsearch and ELK open source plug-ins , it mainly provides encryption , authentication , authorization management and log auditing and other functions . An authorization issue vulnerability exists in versions prior to floragunn Search...

floragunn Search Guard Authorization Issue Vulnerability (CNVD-2019-32491)

floragunn Search Guard is a German floragunn company for Elasticsearch and ELK open source plug-ins , it mainly provides encryption , authentication , authorization management and log auditing and other functions . An authorization issue vulnerability exists in versions prior to floragunn Search...

CVE-2019-6782

An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure issue 1 of 6. An authorization issue allows the contributed project information of a private profile to be viewed...

CVE-2019-6782

An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure issue 1 of 6. An authorization issue allows the contributed project information of a private profile to be viewed...

CVE-2019-6782

CVE-2019-6782 affects GitLab CE/EE prior to certain 11.x releases and allows an information disclosure where contributed project information from a private profile could be viewed due to an authorization issue. The connected documents confirm the exact affected branches/versions (11.5.8, 11.6.x b...

CVE-2019-11548

An issue was discovered in GitLab Community and Enterprise Edition before 11.8.9. It has Incorrect Access Control. Unprivileged members of a project are able to post comments on confidential issues through an authorization issue in the note endpoint...