Apache Shiro 628 Privilege Bypass Vulnerability

Apache Shiro is an open source software from ASF that provides a powerful and flexible security framework. It can provide security for any application - from command-line and mobile applications to large-scale web and enterprise applications. Apache Shiro 628 suffers from a privilege bypass...

WordPress pricing-table-by-supsystic insecure permissions vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security issue exists in WordPress pricing-table-by-supsystic prior to version 1.8.2, which stems from the...

Enigma NMS Privilege Control Bypass Vulnerability

NETSAS Enigma NMS is a suite of network management and monitoring tools from NETSAS Australia. A security vulnerability exists in NETSAS Enigma NMS version 65.0.0 and earlier. An attacker can exploit this vulnerability to bypass authorization controls and perform operations as an administrator...

SAP ERP and SAP S/4 HANA Authorization Issues Vulnerabilities

SAP ERP and SAP S/4 HANA are both integrated intelligent ERP systems. ERP is an enterprise resource management system that integrates enterprise management concepts, business processes, basic data, human and material resources, computer hardware and software. An authorization issue vulnerability...

Google Android System Privilege Bypass Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Android version 10.0. The vulnerability can be exploited by an attacker to obtain information...

CVE-2019-19980

The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a privilege bypass flaw that allowed authenticated users Subscriber or greater access to send test emails from the administrative dashboard on behalf of an administrator. This occurs because the plugin registers a wpajax...

CVE-2019-19980

The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a privilege bypass flaw that allowed authenticated users Subscriber or greater access to send test emails from the administrative dashboard on behalf of an administrator. This occurs because the plugin registers a wpajax...

Privilege escalation

The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a privilege bypass flaw that allowed authenticated users Subscriber or greater access to send test emails from the administrative dashboard on behalf of an administrator. This occurs because the plugin registers a wpajax...

CVE-2019-19980

The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a privilege bypass flaw that allowed authenticated users Subscriber or greater access to send test emails from the administrative dashboard on behalf of an administrator. This occurs because the plugin registers a wpajax...

CVE-2019-19241

CVE-2019-19241 affects the Linux kernel prior to 5.4.2 where the io_uring path can cause requests to appear with UID 0 and full capabilities due to IORING_OP_SENDMSG handling by kernel worker threads in contexts from unprivileged users. Affected code paths include fs/io-wq.c, fs/io_uring.c, and n...

JavaScript Privilege Bypass Vulnerability in Adobe Acrobat and Reader

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat and Reader there is a JavaScript privilege bypass vulnerability, attackers...

Unauthorized Access Vulnerability in ZTE ZXR10 1800-2S

The ZXR10 1800-2S is a router product from China's ZTE Corporation ZTE. An unauthorized access vulnerability exists in the ZTE ZXR10 1800-2S. An attacker can exploit the vulnerability to bypass privileges and reset the router configuration file...

Cloudera Data Science Workbench Privilege Check Bypass Vulnerability

Cloudera Data Science Workbench CDSW is a suite of data science platforms from Cloudera. A security vulnerability exists in Cloudera CDSW versions 1.4.0 through 1.4.2. The vulnerability stems from the system not properly restricting access to resources from unauthorized roles. An attacker can...

Red Hat 389 Directory Server deref plugin permission check bypass vulnerability

Red Hat 389 Directory Server formerly known as Fedora Directory Server is an enterprise-class Linux directory server from Red Hat, USA. The server fully supports the LDAPv3 specification and features scalability, multi-master replication, etc. deref is one of the deref plug-ins. A privilege check...

Unspecified Vulnerability in CloudBees Jenkins Deploy WebLogic Plugin

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Deploy WebLogic Plugin is used in which a...

Authentication Bypass Vulnerability in GE PLC IC695CPE330

The GE PLC IC695CPE330 is a General Electric programmable logic controller. The GE PLC IC695CPE330 suffers from an authentication bypass vulnerability that can be exploited by an attacker to bypass privilege validation and gain access to all WEB content...

OpenSSH < 4.5 Multiple Vulnerabilities

Binary data 701165.prm...

Atlassian Jira Privilege Bypass Vulnerability

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. A privilege bypass vulnerability exists in Atlassian Jira versions prior to 7.12.3, which can be exploited by an attacker to set...

Siemens SIMATIC S7-300 PLC Privilege Bypass Vulnerability

The Siemens SIMATIC S7-300 CPU is a modular general-purpose controller from Siemens for the manufacturing industry. The Siemens SIMATIC S7-300 PLC module is vulnerable to an unauthorized, execute CPU attack via privilege bypass. An attacker can construct special application layer data messages th...

CloudBees Jenkins Information Disclosure Vulnerability (CNVD-2019-26388)

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . LTS is a long-term support for...