WordPress Paid Memberships Pro Plugin <= 1.4.7 - Information Disclosure

This plugin is prone to a adminpages/memberslist-csv.php direct request member personal information disclosure vulnerability. Solution Update the plugin...

CVE-2014-3553

mod/forum/classes/postform.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 does not enforce the moodle/site:accessallgroups capability requirement before proceeding with a post to all groups, which allows remote authenticated users...

CVE-2014-3553

mod/forum/classes/postform.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 does not enforce the moodle/site:accessallgroups capability requirement before proceeding with a post to all groups, which allows remote authenticated users...

Design/Logic Flaw

mod/forum/classes/postform.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 does not enforce the moodle/site:accessallgroups capability requirement before proceeding with a post to all groups, which allows remote authenticated users...

CVE-2014-3553

mod/forum/classes/postform.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 does not enforce the moodle/site:accessallgroups capability requirement before proceeding with a post to all groups, which allows remote authenticated users...

CVE-2013-4291

The virSecurityManagerSetProcessLabel function in libvirt 0.10.2.7, 1.0.5.5, and 1.1.1, when the domain has read an uid:gid label, does not properly set group memberships, which allows local users to gain privileges...

CVE-2013-4291

The virSecurityManagerSetProcessLabel function in libvirt 0.10.2.7, 1.0.5.5, and 1.1.1, when the domain has read an uid:gid label, does not properly set group memberships, which allows local users to gain privileges...

Active Directory - Enumerate Group Memberships

Binary data adsienumgroupmemberships.nbin...

WordPress Paid Memberships Pro Plugin 'memberslist-csv.php' Information Disclosure Vulnerability

The Paid Memberships Pro plugin for WordPress is prone to an information- disclosure vulnerability because it fails to sufficiently validate user- supplied data. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

CVE-2012-0878

Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem...

PYSEC-2012-15

Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem...

PYSEC-2012-15

Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem...

CVE-2012-0878

Paste Script 1.7.5 and earlier does not properly set group memberships during execution with root privileges, which might allow remote attackers to bypass intended file-access restrictions by leveraging a web application that uses the local filesystem...

CVE-2012-0878

CVE-2012-0878 affects Paste Script 1.7.5 and earlier. The root cause is improper setting of group memberships during execution with root privileges, which could allow a remote attacker to bypass file-access restrictions when a web application uses the local filesystem. Public details indicate the...

IBM Db2 Multiple Security Bypass Vulnerabilities (May 2011)

IBM Db2 is prone to multiple security bypass vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:db2";...

IBM DB2 Multiple Security Bypass Vulnerabilities (May-11)

The host is running IBM DB2 and is prone to multiple security bypass vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmdb2multsecbypassvuln.nasl 7585 2017-10-26 15:03:01Z cfischer $ IBM DB2 Multiple Security Bypass Vulnerabilities May-11 Authors: Antu Sanadi Copyright: Copyright c 2011...

Bugzilla Informaton Disclosure Vulnerability

This host is running Bugzilla and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbbugzillainfodisclosurevuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Bugzilla Informaton Disclosure Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2011 Greenbone Networks...

CVE-2010-3716

The beusercreation task in TYPO3 4.2.x before 4.2.15 and 4.3.x before 4.3.7 allows remote authenticated users to gain privileges via a crafted POST request that creates a user account with arbitrary group memberships...

CVE-2010-3716

The beusercreation task in TYPO3 4.2.x before 4.2.15 and 4.3.x before 4.3.7 allows remote authenticated users to gain privileges via a crafted POST request that creates a user account with arbitrary group memberships...

CVE-2010-3716

CVE-2010-3716 is a TYPO3 vulnerability where malicious editors with user-creation permission could escalate privileges by creating new users in arbitrary groups due to input validation weakness in the be_user_creation task. Affected: TYPO3 4.2.x pre-4.2.15 and 4.3.x pre-4.3.7. Documented in multi...