Joyplus CMS suffers from an override access vulnerability

Joyplus CMS Joy Video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . An override access vulnerability exists in Joyplu...

Design/Logic Flaw

POSIM EVO 15.13 for Windows includes an "Emergency Override" administrative account that may be accessed through POSIM's "override" feature. This Override prompt expects a code that is computed locally using a deterministic algorithm. This code may be generated by an attacker and used to bypass a...

CVE-2018-15807

POSIM EVO 15.13 for Windows includes an "Emergency Override" administrative account that may be accessed through POSIM's "override" feature. This Override prompt expects a code that is computed locally using a deterministic algorithm. This code may be generated by an attacker and used to bypass a...

CVE-2018-15807

POSIM EVO 15.13 for Windows includes an "Emergency Override" administrative account that may be accessed through POSIM's "override" feature. This Override prompt expects a code that is computed locally using a deterministic algorithm. This code may be generated by an attacker and used to bypass a...

CVE-2018-15807

POSIM EVO 15.13 for Windows includes an "Emergency Override" administrative account that may be accessed through POSIM's "override" feature. This Override prompt expects a code that is computed locally using a deterministic algorithm. This code may be generated by an attacker and used to bypass a...

CVE-2018-15807

POSIM EVO 15.13 for Windows contains an "Emergency Override" administrative account accessible via POSIM’s override feature. The Override prompt expects a code computed locally by a deterministic algorithm. An attacker could generate this code to bypass any POSIM EVO login prompt, enabling bypass...

Out-Of-Bounds Write

libX11.so is vulnerable to an out-of-bounds write. The server response consisting of a length byte followed by the actual string is not NULL-terminated, which could lead to an off-by-one override in the functions XGetFontPath, XListExtensions and XListFonts, and result in an out-of-bounds write...

Haiwell C10S0R(-e) PLC has an Override Access Vulnerability

C10S0R-e PLC is a product in the programmable logic controller PLC series of Xiamen Haiwei Technology Co. The Haiwell C10S0R-e PLC suffers from an over-the-horizon access vulnerability that can be exploited by an attacker to change the IP of the PLC through unauthorized construction of specific...

Arbitrary Code Override Vulnerability in Haiwell C10S0R(-e) PLCs

C10S0R-e PLC is a product in the programmable logic controller PLC series of Xiamen Haiwei Technology Co. The Haiwell C10S0R-e PLC has an arbitrary code override vulnerability that can be exploited by an attacker to alter the PLC program via unauthorized construction of specific network packets...

CVE-2018-13434

An issue was discovered in the LINE jp.naver.line application 8.8.0 for iOS. The LAContext class for Biometric TouchID validation allows authentication bypass by overriding the LAContext return Boolean value to be "true" because the kSecAccessControlUserPresence protection mechanism is not used. ...

PT-2018-11821 · Line · Line

Name of the Vulnerable Software and Affected Versions: LINE application version 8.8.0 for iOS Description: An issue in the LINE application allows authentication bypass by overriding the LAContext return Boolean value to be "true" because the kSecAccessControlUserPresence protection mechanism is...

Order Override Vulnerability in Rice CMS

DAMI CMS is an all-in-one system for pc and mobile site building. Rice CMS v6.0.0 suffers from an order override vulnerability, which can be exploited by an attacker to grab order packets and change prices in an order to purchase a company product...

Design/Logic Flaw

An issue was discovered in Http Foundation in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. It arises from support for a legacy IIS header that lets users override the path in the request URL via the...

CVE-2018-14773

An issue was discovered in Http Foundation in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. It arises from support for a legacy IIS header that lets users override the path in the request URL via the...

CVE-2018-14773

In Symfony, CVE-2018-14773 affects HttpFoundation (versions 2.7.0–2.7.48, 2.8.0–2.8.43, 3.3.0–3.3.17, 3.4.0–3.4.13, 4.0.0–4.0.13, 4.1.0–4.1.2). The issue arises from legacy IIS headers X-Original-URL and X-Rewrite-URL being used by Request::prepareRequestUri(), allowing an attacker to override th...

CVE-2018-14773

An issue was discovered in Http Foundation in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. It arises from support for a legacy IIS header that lets users override the path in the request URL via the...

Override Deletion Vulnerability in Journalx 2.0, a Remote Processing System for Journal Manuscripts

Journalx 2.0 is a remote processing platform for journal manuscripts developed independently by Beijing Magtech. Journalx 2.0 is vulnerable to an override deletion vulnerability. An attacker can exploit the vulnerability to batch delete unfinished manuscripts in the author's background of the...

PT-2018-16195 · Salesforce · Restforce

Name of the Vulnerable Software and Affected Versions: restforce versions prior to 3.0.0 Description: The issue is related to insufficient URI encoding, allowing an attacker to inject arbitrary parameters into Salesforce API requests. This flaw is only exploitable in applications that pass user...

Drupal Core Multiple Security Vulnerabilities (SA-CORE-2018-005) - Windows

Drupal is prone to multiple security vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Override Access Vulnerability in Tianxing Data Integration Service System

Beijing Tianxing Net Security Information Technology Co., Ltd. is an enterprise engaged in the research and development of network security and data exchange technology. There is an override access vulnerability in the Tianxing Data Integration Service System, which can be exploited by attackers ...