PT-2018-17345

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera affected versions not specified Description The issue allows a remote attacker to bypass OS level controls via a crafted HTML page due to the failure to apply Mark-of-the-Web in downloads...

Drupal Access Control Bypass Vulnerability (CNVD-2018-04729)

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A security vulnerability exists in Drupal. An attacker can exploit this vulnerability to bypass access control...

Drupal Access Control Bypass Vulnerability

Drupal is a free and open source content management system developed in PHP and maintained by the Drupal community.Settings Tray module is one of the Tray settings modules. A security vulnerability exists in the Settings Tray module in Drupal. An attacker can exploit this vulnerability to update...

Kentico CMS 9.x < 9.0.51, 10.x < 10.0.48 Access Control Bypass Vulnerability

Kentico CMS is prone to an access control bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:kentico:kentico";...

CVE-2017-6201

CVE-2017-6201 corresponds to a Sandstorm SSRF vulnerability in the install application process prior to build 0.203. A remote attacker can supply a URL to bypass access controls (e.g., firewalls) that would normally restrict URL access. The issue stems from insufficient validation in the install ...

MariaDB and Percona XtraDB Cluster Denial of Service Vulnerability

MariaDB is a free and open source database management system developed by Monty Program Ab, Inc. and the MariaDB Foundation, Inc. and a forked version of MySQL using the Maria storage engine.Percona XtraDB Cluster is a package for creating MySQL clusters. A security vulnerability exists in the...

DEBIAN-CVE-2018-5702

Transmission through 2.92 relies on X-Transmission-Session-Id which is not a forbidden header for Fetch for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in conjunction with a DNS...

PT-2017-15013

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.14.6 Description The issue concerns the KEYS subsystem in the Linux kernel, which failed to perform an access-control check when adding a key to the current task's "default request-key keyring" via the request...

Octopus Deploy Access Control Bypass Vulnerability

In Octopus Deploy, the machine update process doesn SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:octopus:octopusdeploy"; if...

CVE-2017-17665

In Octopus Deploy before 4.1.3, the machine update process doesn't check that the user has access to all environments. This allows an access-control bypass because the set of environments to which a machine is scoped may include environments in which the user lacks access...

Improper access control

In Octopus Deploy before 4.1.3, the machine update process doesn't check that the user has access to all environments. This allows an access-control bypass because the set of environments to which a machine is scoped may include environments in which the user lacks access...

CVE-2017-17665: Missing Authorization

In Octopus Deploy before 4.1.3, the machine update process doesn't check that the user has access to all environments. This allows an access-control bypass because the set of environments to which a machine is scoped may include environments in which the user lacks access...

PT-2017-14945

Name of the Vulnerable Software and Affected Versions Octopus Deploy versions prior to 4.1.3 Description The issue allows for an access-control bypass due to the machine update process not checking user access to all environments. This means a user may be able to access environments they should n...

CVE-2017-17448

net/netfilter/nfnetlinkcthelper.c in the Linux kernel through 4.14.4 does not require the CAPNETADMIN capability for new, get, and del operations, which allows local users to bypass intended access restrictions because the nfnlcthelperlist data structure is shared across all net namespaces...

Linux kernel access restriction bypass vulnerability (CNVD-2018-00238)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the net/netfilter/xtosf.c file in Linux kernel versions 4.14.4 and earlier, which stems from a program sharing the xtosffingers data...

DEBIAN-CVE-2017-17433

The recvfiles function in receiver.c in the daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, proceeds with certain file metadata updates before checking for a filename in the daemonfilterlist data structure, which allows remote attackers to bypass intended access restrictions...

Cambium Multiple Vulnerabilities

Exploit for hardware platform in category remote exploits Cambium Multiple Vulnerabilities Vulnerabilities Summary The following advisory describes three 3 vulnerabilities found in Cambium Network Updater Tool and Networks Services Server. The Network Updater Tool is “a free-of-charge tool that...

PT-2017-13840

Name of the Vulnerable Software and Affected Versions TeamPass versions prior to 2.1.27.9 Description The issue allows an authenticated attacker to bypass access control when requesting items.queries.php, enabling them to perform various unauthorized actions. These actions include copying any ite...

CVE-2016-10700

authlogin.php in Cacti before 1.0.0 allows remote authenticated users who use web authentication to bypass intended access restrictions by logging in as a user not in the cacti database, because the guest user is not considered. NOTE: this vulnerability exists because of an incomplete fix for...

CVE-2017-16935: Improper Input Validation

Ametys before 4.0.3 requires authentication only for URIs containing a /cms/ substring, which allows remote attackers to bypass intended access restrictions via a direct request to /plugins/core-ui/servercomm/messages.xml, as demonstrated by changing the admin password by obtaining account detail...