Shopify: H1514 Bypass Wholesale account signup restrictions

Summary: By default, account registration is disabled on Shopify Wholesale, requiring customers to be manually invited: Wholesale account signup is disabled. Customers need to be manually invited from the Customers page. This can be bypassed due to improper access controls in the invitation...

CVE-2018-15610 Improper access controls in IP Office one-X Portal

A vulnerability in the one-X Portal component of Avaya IP Office allows an authenticated attacker to read and delete arbitrary files on the system. Affected versions of Avaya IP Office include 9.1 through 9.1 SP12, 10.0 through 10.0 SP7, and 10.1 through 10.1 SP2...

CVE-2017-1350

IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 could allow a user to escalate their privileges to administrator due to improper access controls. IBM X-Force ID: 126526...

PT-2018-5586

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server versions 9.1, 11.3, 11.5, and 11.7 Description: The issue is related to improper access controls, which could allow a user to escalate their privileges to administrator. Recommendations: For IBM InfoSphere...

CVE-2017-1350: Undefined Security Weakness

IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 could allow a user to escalate their privileges to administrator due to improper access controls. IBM X-Force ID: 126526...

PT-2018-1172

Name of the Vulnerable Software and Affected Versions ZyXEL P-870H-51 DSL Router version 1.00AWG.3D5 Description This issue allows remote attackers to cause a denial-of-service condition on vulnerable installations. Authentication is not required to exploit this issue. The specific flaw exists...

PT-2018-5748

Name of the Vulnerable Software and Affected Versions: IBM UrbanCode Deploy versions 6.1 through 6.2 Description: The issue is related to improper access controls, allowing an authenticated user to edit objects they should not have access to. Recommendations: For versions 6.1 and 6.2, update to a...

CVE-2017-1493: Improper Privilege Management

IBM UrbanCode Deploy UCD 6.1 and 6.2 could allow an authenticated user to edit objects that they should not have access to due to improper access controls. IBM X-Force ID: 128691...

CVE-2017-3758: Undefined Security Weakness

Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to enable remote code execution...

PT-2017-16089

Name of the Vulnerable Software and Affected Versions Lenovo Service Framework affected versions not specified Description The issue is related to improper access controls on several Android components in the Lenovo Service Framework application, which can be exploited to enable remote code...

CVE-2017-6266

NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where improper access controls could allow unprivileged users to cause a denial of service...

PT-2017-16965

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver affected versions not specified Description The issue is related to improper access controls in the kernel mode layer handler, which could allow unprivileged users to cause a denial of service. Recommendations At the...

CVE-2017-6266: Undefined Security Weakness

NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where improper access controls could allow unprivileged users to cause a denial of service...

CVE-2017-1308

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0 could allow an authenticated attacker to download files they should not have access to due to improper access controls. IBM X-Force ID: 125462...

Improper access control

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0 could allow an authenticated attacker to download files they should not have access to due to improper access controls. IBM X-Force ID: 125462...

PT-2017-12911

Name of the Vulnerable Software and Affected Versions IBM Daeja ViewONE Professional, Standard & Virtual versions 4.1.5.1 and 5.0 Description The issue is related to improper access controls, allowing an authenticated attacker to download files they should not have access to. Recommendations For...

CVE-2017-1308: Files or Directories Accessible to External Parties

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0 could allow an authenticated attacker to download files they should not have access to due to improper access controls. IBM X-Force ID: 125462...

CVE-2017-1302

IBM Sterling B2B Integrator Standard Edition 5.2 could allow a local user view sensitive information due to improper access controls. IBM X-Force ID: 125456...

CVE-2017-1302

IBM Sterling B2B Integrator Standard Edition 5.2 could allow a local user view sensitive information due to improper access controls. IBM X-Force ID: 125456...

PT-2017-12861

Name of the Vulnerable Software and Affected Versions IBM Sterling B2B Integrator Standard Edition version 5.2 Description The issue is related to improper access controls, which could allow a local user to view sensitive information. Recommendations For IBM Sterling B2B Integrator Standard Editi...