17071 matches found
Design/Logic Flaw
Ricoh SP C250DN 1.06 devices have Incorrect Access Control issue 2 of 2...
Design/Logic Flaw
Agent A is able to save a draft i.e. for customer reply. Then Agent B can open the draft, change the text completely and send it in the name of Agent A. For the customer it will not be visible that the message was sent by another agent. This issue affects: OTRS Community Edition 6.0.x version...
Design/Logic Flaw
Status2k does not remove the install directory allowing credential reset...
Oracle January 2020 Critical Patch Update Multiple Vulnerabilities
Description Oracle has released advance notification regarding the January 2020 Critical Patch Update CPU to be released on January 14, 2020. The update addresses 333 vulnerabilities affecting the following software: Oracle Database Server, versions 12.2.0.1, 18c, 19c Oracle Communications Design...
Design/Logic Flaw
LTSP LDM through 2.18.06 allows fat-client root access because the LDMUSERNAME variable may have an empty value if the user's shell lacks support for Bourne shell syntax. This is related to a run-x-session script...
Design/Logic Flaw
Samsung Kies before 2.5.0.120942711 has arbitrary directory modification...
Design/Logic Flaw
stb stbtruetype.h through 1.22 has an assertion failure in stbttcffgetindex...
Design/Logic Flaw
stb stbtruetype.h through 1.22 has an assertion failure in stbttcffint...
Design/Logic Flaw
Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword...
Design/Logic Flaw
When pasting a style tag from the clipboard into a rich text editor, the CSS sanitizer does not escape and characters. Because the resulting string is pasted directly into the text node of the element this does not result in a direct injection into the webpage; however, if a webpage subsequently...
Design/Logic Flaw
When Python was installed on Windows, a python file being served with the MIME type of text/plain could be executed by Python instead of being opened as a text file when the Open option was selected upon download. Note: this issue only occurs on Windows. Other operating systems are unaffected...
Design/Logic Flaw
GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in readsectionsmap in decoder2007.c...
Design/Logic Flaw
CA Automic Dollar Universe 5.3.3 contains a vulnerability, related to the uxdqmsrv binary being setuid root, that allows local attackers to elevate privileges. This vulnerability was reported to CA several years after CA Automic Dollar Universe 5.3.3 reached End of Life EOL status on April 1, 201...
Design/Logic Flaw
An attacker could specially craft an FTP request that could crash the PR100088 Modbus gateway versions prior to release R02 or Software Version 1.1.13166...
Design/Logic Flaw
Cisco Linksys Routers EA2700, EA3500, E4200, EA4500: A bug can cause an unsafe TCP port to open which leads to unauthenticated access...
Design/Logic Flaw
An issue was discovered in Open Ticket Request System OTRS 7.0.x through 7.0.12, and Community Edition 5.0.x through 5.0.38 and 6.0.x through 6.0.23. An attacker who is logged into OTRS as an agent is able to list tickets assigned to other agents, even tickets in a queue where the attacker doesn'...
Design/Logic Flaw
DTEN D5 before 1.3 and D7 before 1.3 devices transfer customer data files via unencrypted HTTP...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-3743. Reason: This candidate is a duplicate of CVE-2014-3743. Notes: All CVE users should reference CVE-2014-3743 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...