Issues not shown in issue navigator that a user has permission for according to the issue security level

Users may not be able to see certain issues in the IssueNavigator, if they create an issue level security, where the permission depends on a user custom field where the customfield does not have a searcher set. Browsing the issue directly, works fine, however when running a search the issue wont ...

Issues not shown in issue navigator that a user has permission for according to the issue security level

Users may not be able to see certain issues in the IssueNavigator, if they create an issue level security, where the permission depends on a user custom field where the customfield does not have a searcher set. Browsing the issue directly, works fine, however when running a search the issue wont ...

IssueLevelSecurity permission check does not work with a DocumentIssueImpl if no security level has been set.

We need to be able to handle per issue permission checks, if no issue security level has been set. The problem is that if no issue level security is set, -1 gets indexed. The permissions code however expects a null value...

IssueLevelSecurity permission check does not work with a DocumentIssueImpl if no security level has been set.

We need to be able to handle per issue permission checks, if no issue security level has been set. The problem is that if no issue level security is set, -1 gets indexed. The permissions code however expects a null value...

IssueLevelSecurity permission check does not work with a DocumentIssueImpl if no security level has been set.

We need to be able to handle per issue permission checks, if no issue security level has been set. The problem is that if no issue level security is set, -1 gets indexed. The permissions code however expects a null value...

CVE-2007-5442

CMS Made Simple 1.1.3.1 does not check the permissions assigned to users who attempt uploads, which allows remote authenticated users to upload unspecified files via unknown vectors...

Design/Logic Flaw

CMS Made Simple 1.1.3.1 does not check the permissions assigned to users who attempt uploads, which allows remote authenticated users to upload unspecified files via unknown vectors...

CVE-2007-4493

CVE-2007-4493 affects eZ Publish prior to 3.8.9 and prior to 3.9.3; it arises from improper permission checks on module views that lack a policy function, with unknown impact and attack vectors, demonstrated by a discount vulnerability in the shop module. Remediation exists in the referenced upgr...

How to improve provide the right efficiency-vulnerability warning-the black bar safety net

One: detect what site the server is opened 3 3 8 9 remote terminal Two: test whether the service is used serv-u and what version. Method A: copy one site with 3 3 8 9 landers connection it is successfully able to connect, win Server probability, increased by 3 0%. Two: with the ftp mode to check...

X.Org多个setuid调用返回检查本地权限提升漏洞

X.Org是X.Org Foundation对X窗口系统的开源实现。 X.Org在处理权限放弃操作时存在漏洞，本地攻击者可能利用此漏洞提升自己的权限。 X.Org没有检查setuid或类似的调用是否成功。如果由于“maximum processes”ulimit的限制导致调用失败的话，就会导致进程以root用户权限执行某些特权操作（文件访问）。 X.org X.org 6.7.0 - 7.1 Gentoo已经为此发布了一个安全公告（GLSA-200608-25）以及相应补丁: GLSA-200608-25：X.org and some X.org libraries: Local...

CVE-2006-5213

Sun Solaris 10 before 20061006 uses "incorrect and insufficient permission checks" that allow local users to intercept or spoof packets by creating a raw socket on a link aggregation network device aggregation...

E-Vision.txt

Hello,, E-Vision CMS Multible Remote injections SQL and File upload Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] upload any file admin/ximage.php this file is used to upload files and it does not check the permission This...

PT-2002-2591 · Heysoft +1 · Heysoft Eventsave +1

Name of the Vulnerable Software and Affected Versions: Heysoft EventSave versions 5.1 through 5.2 Heysoft EventSave+ versions 5.1 through 5.2 Description: The issue allows attackers to prevent events from being recorded by opening the log file using an application such as Microsoft's Event Viewer...

CVE-2000-0881

The dccscan setuid program in LPPlus does not properly check if the user has the permissions to print the file that is specified to dccscan, which allows local users to print arbitrary files...

CVE-2000-0171

CVE-2000-0171 affects the atsadc component of the atsar package for Linux. The vulnerability arises because atsadc does not properly check the permissions of an output file, enabling a local user to gain root privileges. The available sources (NVD, CVE List, and related records) confirm the issue...

IRIX 6.26.36.4 - xfs truncate() Privilege Check

IRIX 6.26.36.4 - xfs truncate Privilege Check / source: https://www.securityfocus.com/bid/1540/info The truncate system call on a number of versions of the IRIX operating system with the xfs file system does not properly check permissions before truncating a file, making it possible for...

PT-1990-1004 · Sun · Sunos

Name of the Vulnerable Software and Affected Versions: SunOS version 4.1.1 Description: The issue concerns a problem with TIOCCONS in SunOS, where it does not properly check the permissions of a user attempting to redirect console output and input. This could potentially allow a local user to gai...