Cisco Unified Contact Center Management Portal和Cisco Unified Contact Center Domain Manager 安全漏洞

Cisco Unified Contact Center Management Portal and Cisco Unified Contact Center Domain Manager are both products of Cisco Corporation. Management Portal is an intuitive and secure Web-based application that allows supervisors and managers to meet the complex and changing demands of the contact...

CVE-2021-24918

The Smash Balloon Social Post Feed WordPress plugin before 4.0.1 did not have any privilege or nonce validation before saving the plugin's setting. As a result, any logged-in user on a vulnerable site could update the settings and store rogue JavaScript on each of its posts and pages...

CVE-2021-24918

The Smash Balloon Social Post Feed WordPress plugin before 4.0.1 did not have any privilege or nonce validation before saving the plugin's setting. As a result, any logged-in user on a vulnerable site could update the settings and store rogue JavaScript on each of its posts and pages...

CVE-2021-23193

Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server allows authenticated unprivileged operators to retrieve sensitive information from the Command Centre Server. This issue affects: Gallagher Command Centre 8.50 versions prior to 8.50.2048 MR3 ; 8.40...

CVE-2021-23193

Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server allows authenticated unprivileged operators to retrieve sensitive information from the Command Centre Server. This issue affects: Gallagher Command Centre 8.50 versions prior to 8.50.2048 MR3 ; 8.40...

Input validation

Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server allows authenticated unprivileged operators to retrieve sensitive information from the Command Centre Server. This issue affects: Gallagher Command Centre 8.50 versions prior to 8.50.2048 MR3 ; 8.40...

CVE-2021-23193

Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server allows authenticated unprivileged operators to retrieve sensitive information from the Command Centre Server. This issue affects: Gallagher Command Centre 8.50 versions prior to 8.50.2048 MR3 ; 8.40...

CVE-2021-23193

The CVE-2021-23193 entry describes an improper privilege validation vulnerability in the COM interface of Gallagher Command Centre Server. This allows an authenticated, unprivileged operator to retrieve sensitive information from the Command Centre Server. Affected are Gallagher Command Centre 8....

CVE-2021-23193

Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server allows authenticated unprivileged operators to retrieve sensitive information from the Command Centre Server. This issue affects: Gallagher Command Centre 8.50 versions prior to 8.50.2048 MR3 ; 8.40...

Huawei Emui and Magic UI Privilege Verification Vulnerability

Huawei Emui is a mobile operating system developed on Android, and Magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to a privilege validation vulnerability that stems from an error in the product's privilege validation. An attacker could exploit...

IBM Jazz Team Server Elevation of Privilege Vulnerability

IBM Jazz Team Server is an application server from IBM USA. Provides base services that enable a group of tools to work together as a single logical server and includes any number of Jazz Team Server Extensions that provide tool-specific functionality. An elevation of privilege vulnerability exis...

Huawei Smartphone 授权问题漏洞

Huawei Emui is a mobile operating system developed on Android, and Magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to a privilege validation vulnerability that stems from an error in the product's privilege validation. An attacker could exploit...

Emerson WirelessHART Gateway 访问控制错误漏洞

Emerson WirelessHART Gateway is a wireless gateway from Emerson Corporation. The Emerson WirelessHART Gateway suffers from an Access Control Error vulnerability that stems from the susceptibility of the affected product to lack of privilege validation during system backup restoration. An attacker...

Emerson WirelessHART Gateway 访问控制错误漏洞

The Emerson WirelessHART Gateway is a wireless gateway from Emerson USA. An access control error vulnerability exists in Emerson WirelessHART Gateway that stems from a lack of privilege validation on system backup recovery. An attacker could use this vulnerability to take over an account and chan...

Motorola CX2 授权问题漏洞

The Motorola CX2 is a wireless router from Motorola USA. An authorization issue vulnerability exists in the Motorola CX2 router CX, which stems from a lack of valid privilege validation for the Syslog download feature in the product. The following products and versions are affected: Motorola CX2...

CVE-2021-0364

In mobilelogd, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID:...

WordPress NextScripts: Social Networks Auto-Poster plugin <= 4.3.17 - Insufficient Privilege Validation vulnerability

Insufficient Privilege Validation vulnerability found by John Castro Sucuri in WordPress NextScripts: Social Networks Auto-Poster plugin versions = 4.3.17. Solution Update the WordPress NextScripts: Social Networks Auto-Poster plugin to the latest available version at least 4.3.18...

NextScripts: Social Networks Auto-Poster < 4.3.18 - Insufficient Privilege Validation

The plugin is giving access to several functionalities without proper authorisation checks, allowing low privileged attackers the possibility to Remove Posts by corrupting the post type and other data, Post Arbitrary Information in the site social networks as well as Change the plugin settings...

CVE-2020-7583

A vulnerability has been identified in Automation License Manager 5 All versions, Automation License Manager 6 All versions V6.0.8. The application does not properly validate the users' privileges when executing some operations, which could allow a user with low permissions to arbitrary modify...

CVE-2020-7583

A vulnerability has been identified in Automation License Manager 5 All versions, Automation License Manager 6 All versions V6.0.8. The application does not properly validate the users' privileges when executing some operations, which could allow a user with low permissions to arbitrary modify...