2cls.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1001716 Security Researcher Elicx Helped patch 30 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting 2cls.com website and its users. Following coordinated and...

PT-2019-3755 · Oracle +1 · Oracle Business Intelligence Enterprise Edition +1

Name of the Vulnerable Software and Affected Versions: Oracle Business Intelligence Enterprise Edition versions 12.2.1.3.0 through 12.2.1.4.0 Description: The issue is related to inadequate access control in the Analytics Actions subcomponent of Oracle Business Intelligence Enterprise Edition, pa...

staging.prix-elec.com Improper Access Control vulnerability

Security Researcher Rbcafe Helped patch 251 vulnerabilities Received 3 Coordinated Disclosure badges Received 7 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting staging.prix-elec.com website and its users. Following...

SIEMENS S7-200 SIMATIC PLC suffers from a remote control vulnerability (CNVD-2019-37705)

S7-200 SMART is a small PLC developed by Siemens with a friendly interface and more user-friendly software operation. A remote control vulnerability exists in SIEMENS S7-200 SIMATIC PLC. An attacker can exploit the vulnerability to construct special application layer data messages that result in ...

Code Execution Vulnerability in Thunderwind Movie CMS (CNVD-2019-33540)

Thunderwind Movie CMS is a PHP based THINKPHP3.2.3 framework development, suitable for all kinds of video, film and television websites, film and television content management program. Thunderwind CMS has a code execution vulnerability that can be exploited by attackers to gain control of the web...

The compatibility subsystem for running Linux applications allows Windows Subsystem for Linux (WSL) operating systems. This enables attackers to elevate their privileges and execute arbitrary code.

The vulnerability of the compatibility subsystem for running Linux applications in Windows Subsystem for Linux WSL operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code using a...

CVE-2019-13405 Advan VD-1 allows a remote user to enable Android Debug Bridge without any authentication

A broken access control vulnerability found in Advan VD-1 firmware version 230 leads to insecure ADB service. An attacker can send a POST request to cgibin/AdbSetting.cgi to enable ADB without any authentication then take the compromised device as a relay or to install mining software...

aplm.gov.in Improper Access Control vulnerability

Open Bug Bounty ID: OBB-952199 Security Researcher ANS Helped patch 452 vulnerabilities Received 8 Coordinated Disclosure badges Received 31 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting aplm.gov.in website and its user...

IBM Informix Dynamic Server Privilege Permission and Access Control Issues Vulnerability

IBM Informix Dynamic Server IDS is a scalable object-relational database server from IBM in the United States that provides continuous data availability and disaster recovery, among other features, for clustered data centers. IBM Informix Dynamic Server suffers from a Privilege Permission and...

Oracle Retail Applications Retail Xstore Office Component Access Control Error Vulnerability

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. The product includes inventory management, sales management and customer management, etc. Retail Xstore Office is one of the Web-based central management console component. An acces...

Oracle Fusion Middleware HTTP Server Component Access Control Error Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection and other functions. HTTP Server is one of the HTTP server component. A security vulnerability exist...

Oracle Outside In Technology Component Access Control Error Vulnerability (CNVD-2019-27768)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

The vulnerability of the virDomainManagedSaveDefineXML function in the libvirtd library allows a hacker to modify any files they desire.

The vulnerability of the virDomainManagedSaveDefineXML function in the libvirtd library is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to modify arbitrary files by sending a specially crafted request...

GitLab CE/EE Incorrect Access Control Vulnerability (CNVD-2019-23573)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is the GitLab Enterprise Edition and GitLab CE is the GitLab Community Edition. An incorre...

Nortek Security & Control Linear eMerge E3-Series Privilege Permission and Access Control Issues Vulnerability

The Nortek Security & Control Linear eMerge E3-Series is an access control device from Nortek Security & Control USA. A vulnerability exists in the Nortek Security & Control Linear eMerge E3-Series due to a permission and access control issue. The vulnerability can be exploited by an attacker to...

CVE-2019-12292

Citrix AppDNA before 7 1906.1.0.472 has Incorrect Access Control...

CVE-2019-11895

The CVE-2019-11895 entry concerns an improper access control vulnerability in the JSON-RPC interface of the Bosch Smart Home Controller (SHC) prior to 9.8.905, which can lead to denial of service affecting the SHC and connected sensors/actuators. Exposure requires the attacker to have already pai...

CVE-2019-11894 Improper access control in the backup mechanism of the Bosch Smart Home Controller (SHC)

A potential improper access control vulnerability exists in the backup mechanism of the Bosch Smart Home Controller SHC before 9.8.905 that may result in unauthorized download of a backup. In order to exploit the vulnerability, the adversary needs to download the backup directly after a backup...

CVE-2019-11894

CVE-2019-11894 concerns an improper access control in the backup mechanism of the Bosch Smart Home Controller (SHC) prior to version 9.8.905. An attacker could download a backup directly after a legitimate backup completes, potentially exposing sensitive data. The public documents confirm the aff...

Red Hat libvirt Privilege Permission and Access Control Issues Vulnerability

Red Hat libvirt is a Linux API for implementing Linux virtualization features from Red Hat, Inc. It supports a variety of Hypervisors, including Xen and KVM, as well as QEMU and a number of virtual products for other operating systems. A permission-permission and access-control issue vulnerabilit...