PT-2026-25874

Name of the Vulnerable Software and Affected Versions Octopus Server affected versions not specified Description A user with limited privileges could manipulate an API request to modify the signing key expiration and revocation time frames. This was possible due to incorrect permission validation...

EUVD-2018-12867

Malware in sbrugna...

CVE-2024-22278 Harbor fails to validate the user permissions when updating project configurations

Incorrect user permission validation in Harbor v2.9.5 and Harbor v2.10.3 allows authenticated users to modify configurations...

CVE-2018-20307: Exposure of Sensitive Information to an Unauthorized Actor

Pulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1 allow a remote authenticated user to obtain sensitive historical activity information by leveraging incorrect permission validation...

PT-2018-15306

Name of the Vulnerable Software and Affected Versions Pulse Secure Virtual Traffic Manager versions prior to 9.9r2 Pulse Secure Virtual Traffic Manager version 10.4r1 Description The issue allows a remote authenticated user to obtain sensitive historical activity information due to incorrect...

CVE-2017-7644: Exposure of Sensitive Information to an Unauthorized Actor

The Management Web Interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0.15, and 7.1.x before 7.1.9 allows remote authenticated users to obtain sensitive information by leveraging incorrect permission validation, aka PAN-SA-2017-0013 and PAN-70541...

PT-2017-17860

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 6.1.16 and earlier Palo Alto Networks PAN-OS versions 7.0.14 and earlier Palo Alto Networks PAN-OS versions 7.1.8 and earlier Description The Management Web Interface in Palo Alto Networks PAN-OS contains an...