Moodle < 2.7.11 / 2.8.x < 2.8.9 / 2.9.x < 2.9.3 Multiple Vulnerabilities

Binary data 9191.prm...

The vulnerability of Safari browser and iOS operating system allows attackers to obtain confidential information or circumvent existing access control policies.

The vulnerability of the Page Loading component implemented in WebKit of the Safari browser and the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to circumvent existing access restrictions or obtain confidenti...

The vulnerability of the Ruby on Rails software platform, which allows attackers to circumvent existing access control policies

The vulnerability in the nestedattributes.rb file of the activerecord/lib/activerecord module in the Ruby on Rails software framework is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to bypass existing access restrictions by using nested attributes ...

jenkins: JNLP slaves not subject to slave-to-master access control (SECURITY-206)

Jenkins before 1.638 and LTS before 1.625.2 allow attackers to bypass intended slave-to-master access restrictions by leveraging a JNLP slave. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-3665...

The vulnerability of Google Chrome browser allows a violator to circumvent existing access restrictions policies.

The vulnerability of the PPBFlashMessageLoopImpl::InternalRun function located in the content/renderer/pepper/ppbflashmessageloopimpl.cc file of the Google Chrome browser plugin for Pepper is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to...

The vulnerability of Google Chrome browser allows a violator to circumvent existing access restrictions policies.

The vulnerability of the ContainerNode::parserRemoveChild function in the Blink kernel of Google Chrome’s browser is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass existing access control policies by using a specially crafted websi...

CVE-2016-0222

IBM Maximo Asset Management 7.6 before 7.6.0.3 IFIX001 allows remote authenticated users to bypass intended access restrictions and read arbitrary purchase-order work logs via unspecified vectors...

CVE-2016-0222

IBM Maximo Asset Management 7.6 before 7.6.0.3 IFIX001 allows remote authenticated users to bypass intended access restrictions and read arbitrary purchase-order work logs via unspecified vectors...

Schneider Electric Building Operation Application Server Operating System Command Injection Vulnerability

Schneider Electric StruxureWare Building Operation Application Server is a set of automation systems for small and medium-sized buildings from the French company Schneider Electric Schneider Electric. An operating system command injection vulnerability exists in Schneider Electric StruxureWare...

CVE-2015-7490: Improper Access Control

IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended access restrictions via a modified cookie...

Xymon Security Bypass Vulnerability

Xymon is an open source , cross-platform network monitoring application . The application can be viewed through the web page of the operational status of each server , and supports Email and SMS notification function . There is a security vulnerability in Xymon. This vulnerability allows attacker...

Dell OpenManage Server Administrator 8.2 - Authenticated Directory Traversal

Exploit for windows platform in category web applications Exploit Title: Dell OpenManage Server Administrator 8.2 Authenticated Directory Traversal Date: February 22, 2016 Exploit Author: hantwister Vendor Homepage: http://www.dell.com/ Software Link:...

PT-2016-1255

Name of the Vulnerable Software and Affected Versions Django versions 1.9.x through 1.9.1 Description The issue allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objects via the "Save as New" option when editing objects and leveraging the "change"...

CVE-2016-1905

The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a crafted patched object...

The vulnerability in the Microsoft SharePoint Server corporate application suite, a software solution for electronic document management called Microsoft SharePoint Foundation, allows attackers to carry out XSS attacks and circumvent existing access control policies.

The vulnerability of the Microsoft SharePoint Server corporate application and the Microsoft SharePoint Foundation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and...

The vulnerability in the Microsoft SharePoint Server corporate application suite, a software solution for electronic document management called Microsoft SharePoint Foundation, allows attackers to carry out XSS attacks and circumvent existing access control policies.

The vulnerability of the Microsoft SharePoint Server corporate application and the Microsoft SharePoint Foundation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and...

CVE-2016-0011

Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct cross-site scripting XSS attacks by modifying a webpart, aka "Microsoft SharePoint Security Feature Bypass," a different...

PT-2016-1060

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2013 SP1 Microsoft SharePoint Foundation 2013 SP1 Description The issue exists due to inadequate protection of the web page structure in Microsoft SharePoint, allowing a remote attacker to bypass existing access...

CVE-2015-5017: Improper Access Control

IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before 7.6.0.2 IFIX002; Maximo Asset Management 7.5.0 before 7.5.0.8 IFIX005, 7.5.1, and 7.6.0 before 7.6.0.2 IFIX002 for SmartCloud Control Desk; and Maximo Asset Management 7.1 through 7.1.1.13 and 7.2 for...

The vulnerability of the IBM DB2 database management system allows attackers to circumvent existing access restrictions and delete arbitrary rows from tables.

The vulnerability of the Data Movement implementation in the IBM DB2 database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to bypass existing access restrictions and delete arbitrary rows from the tables...