CVE-2020-26080 Cisco IoT Field Network Director Improper Domain Access Control Vulnerability

A vulnerability in the user management functionality of Cisco IoT Field Network Director FND could allow an authenticated, remote attacker to manage user information for users in different domains on an affected system. The vulnerability is due to improper domain access control. An attacker could...

CVE-2020-26080

CVE-2020-26080 affects Cisco IoT Field Network Director (FND). The issue arises from improper domain access control in the user management feature, allowing an authenticated, remote attacker to manipulate JSON payloads to manage user information for users in different domains on an affected syste...

Cisco IoT Field Network Director Improper Domain Access Control Vulnerability

A vulnerability in the user management functionality of Cisco IoT Field Network Director FND could allow an authenticated, remote attacker to manage user information for users in different domains on an affected system. The vulnerability is due to improper domain access control. An attacker could...

PT-2020-4954

Name of the Vulnerable Software and Affected Versions: Cisco IoT Field Network Director FND affected versions not specified Description: A vulnerability in the user management functionality could allow an authenticated, remote attacker to manage user information for users in different domains on ...

CVE-2020-26072: Improper Access Control

A vulnerability in the SOAP API of Cisco IoT Field Network Director FND could allow an authenticated, remote attacker to access and modify information on devices that belong to a different domain. The vulnerability is due to insufficient authorization in the SOAP API. An attacker could exploit th...

CVE-2020-15860: Undefined Security Weakness

Parallels Remote Application Server RAS 17.1.1 has a Business Logic Error causing remote code execution. It allows an authenticated user to execute any application in the backend operating system through the web application, despite the affected application not being published. In addition, it wa...

Synology SRM SafeAccess 1.2.1-0220 code execution Vvulnerability

Summary An exploitable code execution vulnerability exists in the SafeAccess 1.2.1-0220 package of Synology SRM 1.2.3 RT2600ac 8017-5. A specially crafted domain access request can lead to an SQL injection. An attacker can send an HTTP request to trigger this vulnerability. Tested Versions Synolo...

Microsoft Edge Elevation of Privilege Vulnerability (CNVD-2020-16648)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. An elevation of privilege vulnerability exists in Microsoft Edge that stems from the program failing to properly enforce cross-site policies. An attacker could exploit the vulnerability t...

CVE-2019-4314

IBM Security Guardium Big Data Intelligence SonarG 4.0 stores sensitive information in cleartext within a resource that might be accessible to another control sphere. IBM X-Force ID: 1610141...

CVE-2019-9817

Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird 60.7, Firefox 67, and Firefox ESR 60.7...

Cross site scripting

An issue was discovered on D-Link DCS-1130 devices. The device provides a crossdomain.xml file with no restrictions on who can access the webserver. This allows an hosted flash file on any domain to make calls to the device's webserver and pull any information that is stored on the device. In thi...

CVE-2017-6930

In Drupal versions 8.4.x versions before 8.4.5 when using node access controls with a multilingual site, Drupal marks the untranslated version of a node as the default fallback for access queries. This fallback is used for languages that do not yet have a translated version of the created node...

CVE-2017-6930

In Drupal versions 8.4.x versions before 8.4.5 when using node access controls with a multilingual site, Drupal marks the untranslated version of a node as the default fallback for access queries. This fallback is used for languages that do not yet have a translated version of the created node...

CVE-2017-6930

Summary (grounded): CVE-2017-6930 affects Drupal 8.4.x prior to 8.4.5 where, on multilingual sites using node access controls, the untranslated node is incorrectly treated as the default fallback for access queries. This can enable an access bypass. The issue is limited to sites that use the Cont...

PT-2018-8354

Name of the Vulnerable Software and Affected Versions Drupal versions 8.4.x before 8.4.5 Description The issue arises when using node access controls with a multilingual site, where Drupal marks the untranslated version of a node as the default fallback for access queries. This can result in an...

CVE-2017-6930: Undefined Security Weakness

In Drupal versions 8.4.x versions before 8.4.5 when using node access controls with a multilingual site, Drupal marks the untranslated version of a node as the default fallback for access queries. This fallback is used for languages that do not yet have a translated version of the created node...

Semrush: CORS (Cross-Origin Resource Sharing)

Affected URL: https://ta.semrush.com/version/ Description: The application implements an HTML5 cross-origin resource sharing CORS policy for this request which allows access from any domain. Allowing access from all domains means that any domain can perform two-way interaction with the applicatio...

Android WebView Cross Domain Access Vulnerability

Android WebView web view is a control for displaying html text content on Android platform. Android WebView has a cross domain access vulnerability. The vulnerability occurs because the Android application WebView opens the file domain access, and allows the file domain to access the http domain,...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Netlogon service in the Windows operating system is related to the improper creation of secure communication channels. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges by using access to the domain...

Vulnerability of the Internet Explorer browser, leading to the disclosure of confidential information

The Internet Explorer browser contains a vulnerability related to domain-level restrictions. Exploiting this vulnerability allows a malicious individual to gain access to confidential information through a specially crafted web page that the user visits. If successful, the malicious individual wi...