Information disclosure in the listEntityLinks servlet resource of the Application links plugin - CVE-2019-15011

The version of the Application Links plugin used in Bamboo before version 6.8.2 allows remote attackers to obtain information about configured application links via a missing permissions check. See https://ecosystem.atlassian.net/browse/APL-1386 for more details...

Information disclosure in the listEntityLinks servlet resource of the Application links plugin - CVE-2019-15011

The version of the Application Links plugin used in Jira before version 8.4.2 allows remote attackers to obtain information about configured application links via a missing permissions check. See https://ecosystem.atlassian.net/browse/APL-1386 for more details...

Information disclosure in the listEntityLinks servlet resource of the Application links plugin - CVE-2019-15011

The version of the Application Links plugin used in Jira before version 8.4.2 allows remote attackers to obtain information about configured application links via a missing permissions check. See https://ecosystem.atlassian.net/browse/APL-1386 for more details...

CVE-2019-15011

The ListEntityLinksServlet resource in Application Links before version 5.0.12, from version 5.1.0 before version 5.2.11, from version 5.3.0 before version 5.3.7, from version 5.4.0 before 5.4.13, and from version 6.0.0 before 6.0.5 disclosed application link information to non-admin users via a...

CVE-2019-15011

The CVE-2019-15011 issue is an information-disclosure in the Atlassian Application Links plugin: the ListEntityLinksServlet exposes configured application link information to non-admin users due to a missing permissions check. Affected versions include Application Links plugin 5.0.12 and later 5....

EulerOS 2.0 SP2 : libvirt (EulerOS-SA-2019-2468)

According to the versions of the libvirt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Microarchitectural Store Buffer Data Sampling MSBDS: Store buffers on some microprocessors utilizing speculative execution may allow an...

libvirt: virsh domhostname command discloses guest hostname in readonly mode

An incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission was allowed to invoke APIs depending on the guest agent which could lead to potentially disclosing unintended information or denial of service by causing libvirt to block...

CVE-2016-7382

For the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys for Windows or nvidia.ko for Linux handler where a missing permissions check may allow users to gain access to arbitrary physical memory, leading to an...

Privilege escalation

In LockPatternUtils, there is a possible escalation of privilege due to an improper permissions check. This could lead to local bypass of the Lockguard with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID:...

Security fix for the ALT Linux 8 package samba version 4.9.13-alt1

4.9.13-alt1 built Sept. 27, 2019 Evgeny Sinelnikov in task 237896 Sept. 20, 2019 Evgeny Sinelnikov - Update to first security autumn release - Security fixes: + CVE-2019-10197 Permissions check deny can allow user to escape from the share...

Security fix for the ALT Linux 8 package samba-DC version 4.9.13-alt1

4.9.13-alt1 built Sept. 27, 2019 Evgeny Sinelnikov in task 237896 Sept. 20, 2019 Evgeny Sinelnikov - Update to first security autumn release for domain controller release - Security fixes: + CVE-2019-10197 Permissions check deny can allow user to escape from the share...

CVE-2019-2175

In checkAccess of SliceManagerService.java in Android 9, there is a possible permissions check bypass due to incorrect order of arguments. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

Authorization

In checkAccess of SliceManagerService.java in Android 9, there is a possible permissions check bypass due to incorrect order of arguments. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2019-2175

In checkAccess of SliceManagerService.java in Android 9, there is a possible permissions check bypass due to incorrect order of arguments. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

Security fix for the ALT Linux 10 package samba version 4.10.8-alt1

Sept. 3, 2019 Evgeny Sinelnikov 4.10.8-alt1 - Update to first security autumn release - Fix samba-gpupdate check sysvol path with ignore case for compatibility - Security fixes: + CVE-2019-10197 Permissions check deny can allow user to escape from the share...

Design/Logic Flaw

Several worklog rest resources in Jira before version 7.13.7, and from version 8.0.0 before version 8.3.2 allow remote attackers to view worklog time information via a missing permissions check...

CVE-2019-8445

CVE-2019-8445 is an Atlassian Jira worklog information disclosure vulnerability. TALOS reports that Jira versions 7.6.4 through 8.1.0 are affected and that authenticated users can view worklog details via the REST endpoint /rest/api/2/worklog/list due to a missing permissions check. The vulnerabi...

CVE-2017-18584

The post-pay-counter plugin before 2.731 for WordPress has no permissions check for an update-settinga action...

CVE-2017-18584

The post-pay-counter plugin before 2.731 for WordPress has no permissions check for an update-settinga action...

Design/Logic Flaw

The post-pay-counter plugin before 2.731 for WordPress has no permissions check for an update-settinga action...