91 matches found
CVE-2023-6758
The CVE-2023-6758 entry affects Thecosy IceCMS 2.0.1, specifically the API endpoint /adplanet/PlanetCommentList. The issue is an improper access control in an unknown functionality of that API component, with remote exploitation possible and public disclosure of the exploit. Multiple sources corr...
CVE-2022-2702
A vulnerability was found in SourceCodester Company Website CMS and classified as critical. Affected by this issue is some unknown functionality of the file site-settings.php of the component Cookie Handler. The manipulation leads to improper access controls. The attack may be launched remotely...
CVE-2022-22394
The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by improper enforcement of access controls. By signing in, an attacker could exploit this vulnerability to bypass security and gain unauthorized administrator or node access to the...
PT-2021-7799
Name of the Vulnerable Software and Affected Versions ARIS controller software affected versions not specified Description The issue is related to errors in access control within the ARIS controller's embedded software. Exploitation of this issue could allow a remote attacker to elevate their...
CVE-2020-25015
A specific router allows changing the Wi-Fi password remotely. Genexis Platinum 4410 V2-1.28, a compact router generally used at homes and offices was found to be vulnerable to Broken Access Control and CSRF which could be combined to remotely change the WIFI access point’s password...
Rockwell Automation FactoryTalk View SE Privilege License and Access Control Issues Vulnerability
Rockwell Automation FactoryTalk View SE is an industrial automation system view interface from Rockwell Automation. A vulnerability exists in Rockwell Automation FactoryTalk View SE with privileged license and access control issues. A remote attacker could exploit this vulnerability to conduct da...
Cerberus Enters the Android Malware Rental Scene
A never-before-seen Android banking trojan, dubbed Cerberus, is being rented out on underground forums by a threat group that likes to engage with the defense community publicly via Twitter. According to a Tuesday posting from ThreatFabric, Cerberus isn’t based on the leaked Anubis source code th...
CVE-2019-11653
Remote Access Control Bypass in Micro Focus Content Manager. versions 9.1, 9.2, 9.3. The vulnerability could be exploited to manipulate data stored during another user’s CheckIn request...
CVE-2019-11653
The CVE-2019-11653 entry affects Micro Focus Content Manager versions 9.1, 9.2, and 9.3 and is described as a Remote Access Control Bypass that could allow manipulation of data stored during another user’s CheckIn request. The connected records (RH, NVD, NVD duplicates) confirm the affected produ...
PT-2019-12456
Name of the Vulnerable Software and Affected Versions Micro Focus Content Manager versions 9.1 through 9.3 Description The issue allows for a bypass of remote access control, potentially enabling manipulation of data stored during another user’s CheckIn request. Recommendations For versions 9.1...
UBUNTU-CVE-2017-11365
Certain Symfony products are affected by: Incorrect Access Control. This affects Symfony 2.7.30 and Symfony 2.8.23 and Symfony 3.2.10 and Symfony 3.3.3. The type of exploitation is: remote. The component is: Password validator...
CVE-2017-11365: Improper Access Control
Certain Symfony products are affected by: Incorrect Access Control. This affects Symfony 2.7.30 and Symfony 2.8.23 and Symfony 3.2.10 and Symfony 3.3.3. The type of exploitation is: remote. The component is: Password validator...
CVE-2018-12922
The CVE-2018-12922 entry concerns Emerson Liebert IntelliSlot Web Card devices, where a remote attacker can reconfigure access control via the config/configUser.htm or config/configTelnet.htm URIs. Affected product is Emerson Liebert IntelliSlot Web Card devices; the root cause is a vulnerability...
[SECURITY] [DSA 2806-1] nbd security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2806-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 29, 2013 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2712-1] otrs2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2712-1 [email protected] http://www.debian.org/security/ Florian Weimer June 19, 2013 http://www.debian.org/security/faq -...
CVE-2012-0701
The client applications in the DataStage Administrator client in InfoSphere DataStage in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 rely on client-side access control, which allows remote authenticated users to gain privileges via unspecified vectors...
Design/Logic Flaw
The client applications in the DataStage Administrator client in InfoSphere DataStage in IBM InfoSphere Information Server 8.1, 8.5 before FP3, and 8.7 rely on client-side access control, which allows remote authenticated users to gain privileges via unspecified vectors...
[SECURITY] [DSA 667-1] New squid packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 667-1 [email protected] http://www.debian.org/security/ Martin Schulze February 4th, 2005 http://www.debian.org/security/faq -...
CVE-2004-0601
CVE-2004-0601 affects distcc prior to 2.16 on 64-bit platforms. The issue is that IP-based access control rules are not interpreted correctly, enabling remote attackers to bypass intended restrictions. The connected documents confirm the vulnerable component and the root cause as described, and d...