PT-2014-2768

Name of the Vulnerable Software and Affected Versions Entity API module versions 7.x-1.x through 7.x-1.1 Description The issue allows remote authenticated users to read node comments via unspecified vectors due to improper access restriction. Recommendations For Entity API module versions 7.x-1.x...

PT-2014-5549

Name of the Vulnerable Software and Affected Versions iMember360 plugin versions prior to 3.9.001 Description The issue allows remote attackers to obtain database credentials due to improper access restriction. This can be achieved via the i4w dbinfo parameter. Recommendations For versions prior ...

PT-2014-3403

Name of the Vulnerable Software and Affected Versions Ubuntu Date and Time Indicator aka indicator-datetime versions 13.10.0+13.10.x through 13.10.0+13.10.20131023.2-0ubuntu1.0 Description The issue allows local users to bypass the greeter screen restrictions by clicking the date, due to improper...

PT-2014-4019

Name of the Vulnerable Software and Affected Versions Livetecs Timelive versions prior to 6.2.8 Description The issue allows remote attackers to change configurations and obtain the database connection string and credentials due to improper access restriction to systemsetting.aspx. Recommendation...

PT-2014-3398

Name of the Vulnerable Software and Affected Versions SAP Enterprise Portal affected versions not specified Description The issue is related to improper access restriction to the Federation configuration pages in SAP Enterprise Portal. This allows remote attackers to gain privileges via unspecifi...

PT-2014-2472

Name of the Vulnerable Software and Affected Versions Puppet Enterprise versions prior to 2.7.1 Description The issue concerns improper access restriction to a catalog of private SSL keys. This allows remote authenticated users with root access to a node to obtain sensitive information and gain...

PT-2013-3622

Name of the Vulnerable Software and Affected Versions Fast Permissions Administration module versions 6.x-2.x before 6.x-2.5 Fast Permissions Administration module versions 7.x-2.x before 7.x-2.3 Description The issue allows remote attackers to obtain unspecified access to the permissions edit fo...

FOSCAM IP-Cameras Improper Access Restrictions

Due to improper access restrictions, the FOSCAM FI8620 device allows a remote attacker the ability to browse and access arbitrary files from the directories '/tmpfs/' and '/log/' without requiring authentication. This could allow disclosure of access credentials and more. FOSCAM IP-Cameras Improp...

PT-2013-3462

Name of the Vulnerable Software and Affected Versions Drupal Commons module versions prior to 7.x-3.1 Drupal Commons Wikis module versions prior to 7.x-3.1 Description The issue allows remote attackers to post arbitrary content to groups due to improper access restriction. Recommendations For...

PT-2013-1826

Name of the Vulnerable Software and Affected Versions Drupal Context module versions 6.x-3.x before 6.x-3.1 Drupal Context module versions 7.x-3.x before 7.x-3.0-beta6 Description The issue allows remote attackers to obtain sensitive information via a crafted request due to improper access...

PT-2012-5419

Name of the Vulnerable Software and Affected Versions Drupal Search Autocomplete module versions 7.x-2.x before 7.x-2.4 Description The issue allows remote attackers to disable an autocompletion or change the priority order due to improper access restriction to the module admin page...

PT-2012-5423

Name of the Vulnerable Software and Affected Versions Security Questions module for Drupal versions 6.x-1.x before 6.x-1.1 Security Questions module for Drupal versions 7.x-1.x before 7.x-1.1 Description The issue allows remote attackers to edit an arbitrary user's questions and answers due to...

PT-2012-3793

Name of the Vulnerable Software and Affected Versions Organic Groups OG module versions 6.x-2.x through 6.x-2.2 Description The issue allows remote attackers to obtain sensitive information, such as private group titles, by making a request through the Views module, due to improper access...

PT-2012-2498

Name of the Vulnerable Software and Affected Versions EStrongs ES File Explorer versions 1.6.0.2 through 1.6.1.1 Description The issue allows remote attackers to read arbitrary files due to improper access restriction. This is achieved via vectors involving an unspecified function. Recommendation...

PT-2011-4158

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 14.0.835.163 Description The issue is related to improper access restriction to built-in objects in Google V8, which is used in Google Chrome. This has an unspecified impact and can be exploited through remote...

PT-2011-4101

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 13.0.782.107 Description The issue is related to improper access restriction to internal schemes in Google Chrome, allowing remote attackers to have an unspecified impact via a crafted web site. Recommendations...

PT-2011-2823

Name of the Vulnerable Software and Affected Versions IBM Lotus Connections version 3.0 Description The issue is related to improper access restriction to the internal login module, which may have unspecified impact and attack vectors. Recommendations For IBM Lotus Connections version 3.0, consid...