CVE-2022-24343

In JetBrains YouTrack before 2021.4.31698, a custom logo could be set by a user who has read-only permissions...

CVE-2022-24343

In JetBrains YouTrack before 2021.4.31698, a custom logo could be set by a user who has read-only permissions...

CVE-2022-24343

In JetBrains YouTrack before 2021.4.31698, a custom logo could be set by a user who has read-only permissions...

Design/Logic Flaw

In JetBrains YouTrack before 2021.4.31698, a custom logo could be set by a user who has read-only permissions...

CVE-2022-24343

JetBrains YouTrack (before 2021.4.31698) contains an elevation-of-privilege issue where a user with read-only permissions could set a custom logo. This vulnerability is documented across multiple sources (NVD/Red Hat/CNVD) and is resolved in YouTrack 2021.4.31698, per JetBrains’ security bulletin...

CVE-2022-24343

In JetBrains YouTrack before 2021.4.31698, a custom logo could be set by a user who has read-only permissions...

JetBrains YouTrack 安全漏洞

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software features error tracking, creating workflows and monitoring project progress.An elevation of privilege vulnerability exists in versions prior to JetBrains YouTrack...

AZL-8766 CVE-2020-25718 affecting package samba 4.12.5-7

A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC read-only domain controller. This would allow an RODC to print administrator tickets...

AZL-36994 CVE-2020-25718 affecting package samba for versions less than 4.18.3-1

A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC read-only domain controller. This would allow an RODC to print administrator tickets...

DEBIAN-CVE-2020-25718

A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC read-only domain controller. This would allow an RODC to print administrator tickets...

CVE-2022-20680

A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to access sensitive information on an affected device. This vulnerability is due to improper enforcement of Administrator privilege levels for low-value sensitive dat...

CVE-2022-22535

SAP ERP HCM Portugal - versions 600, 604, 608, does not perform necessary authorization checks for a report that reads the payroll data of employees in a certain area. Since the affected report only reads the payroll information, the attacker can neither modify any information nor cause...

CVE-2022-20680

A vulnerability in the web-based management interface of Cisco Prime Service Catalog could allow an authenticated, remote attacker to access sensitive information on an affected device. This vulnerability is due to improper enforcement of Administrator privilege levels for low-value sensitive dat...

PT-2022-2312 · Cisco · Cisco Prime Service Catalog

Name of the Vulnerable Software and Affected Versions: Cisco Prime Service Catalog affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, remote attacker to access sensitive information on an affected device. This issue is...

CVE-2021-28962

Stormshield Network Security SNS before 4.2.2 allows a read-only administrator to gain privileges via CLI commands...

CVE-2021-28962

Stormshield Network Security SNS before 4.2.2 allows a read-only administrator to gain privileges via CLI commands...

CVE-2021-28962

Stormshield Network Security SNS before 4.2.2 allows a read-only administrator to gain privileges via CLI commands...

Stormshield Network Security 命令注入漏洞

Stormshield Network Security is a next-generation UTM Unified Threat Management firewall from the French company Stormshield. A command injection vulnerability exists in Stormshield Network Security because the product does not effectively restrict command line input data. The vulnerability can b...

PT-2022-9906 · Stormshield · Stormshield Network Security

Name of the Vulnerable Software and Affected Versions: Stormshield Network Security SNS versions prior to 4.2.2 Description: The issue allows a read-only administrator to gain privileges via CLI commands. Recommendations: For versions prior to 4.2.2, update to version 4.2.2 or later to resolve th...

StarWind Command Center 权限许可和访问控制问题漏洞

StarWind Command Center is a single management platform for managing and monitoring Ui from StarWind, Inc. designed to simplify and automate the control of day-to-day Hci routines. StarWind Command Center has a Privilege Permission and Access Control Issue vulnerability that stems from the fact...