CVE-2020-7993

CVE-2020-7993 : Affected component is Prototype 1.6.0.1. The issue allows remote authenticated users to forge ticket creation on behalf of other user accounts via a modified email ID field. Root cause appears to be insufficient access control around ticket creation. Practical impact is potential ...

Authentication flaw

Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the correct URL...

CVE-2019-19550

Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the correct URL...

CVE-2019-19550

CVE-2019-19550 concerns a Remote Authentication Bypass in Senior Rubiweb (versions 6.2.34.28 and 6.2.34.37). The underlying issue is an Incorrect Access Control that lets an attacker access admin functionality and view sensitive user information by visiting a specific URI (e.g., /rubiweb/conector...

Design/Logic Flaw

The Flippy module 7.x-1.x before 7.x-1.2 for Drupal does not properly restrict access to nodes, which allows remote authenticated users with the permission to access content to read a link or alias to a restricted node...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Senior Rubiweb

CVE-2019-19550 ------------------------------------------...

Code injection

The parsecmd function in lib/gitlabshell.rb in GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote authenticated users to gain privileges and clone arbitrary repositories...

CVE-2013-4862

Vulnerability CVE-2013-4862 affects MiCasaVerde VeraLite firmware 1.5.408. The issue arises from improper access restrictions that enable remote authenticated users to (1) update the firmware via the squashfs parameter to upgrade_step2.sh and (2) retrieve hashed passwords via the cgi-bin/cmh/back...

CVE-2013-4582

CVE-2013-4582 affects GitLab: the functions create_branch, create_tag, import_project, and fork_project in lib/gitlab_projects.rb allow remote authenticated users to include information from local files into the metadata of a Git repository via the web interface. Affected are GitLab 5.0 up to 5.4...

CVE-2014-8161

PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain sensitive column values by triggering constraint violation and then reading the error message...

CVE-2012-6451

Lorex LNC116 and LNC104 IP Cameras have a Remote Authentication Bypass Vulnerability...

Authentication flaw

Lorex LNC116 and LNC104 IP Cameras have a Remote Authentication Bypass Vulnerability...

CVE-2012-6451

Affected products: Lorex LNC116 and LNC104 IP Cameras. Vulnerability: Remote authentication bypass due to the web interface using HTTP Basic authentication but validating credentials only on the home page; direct URL navigation bypasses login. Impact: unauthorized viewing of live video feed and p...

CVE-2012-6451

Lorex LNC116 and LNC104 IP Cameras have a Remote Authentication Bypass Vulnerability...

Cisco Unified Communications Manager Information Disclosure Vulnerability (CNVD-2020-03755)

Cisco Unified Communications Manager is the centerpiece of the Cisco Collaboration Platform, enabling a person to easily communicate with others via voice, video, and messaging from any device, on any operating system. An information disclosure vulnerability exists in the web-based management...

CVE-2019-10956

Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated user, using a specially crafted URL command, to execute commands as root...

CVE-2019-10956

Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated user, using a specially crafted URL command, to execute commands as root...

CVE-2019-10957

Geutebruck IP Cameras G-CodeEEC-2xxx, G-CamEBC-21xx/EFD-22xx/ETHC-22xx/EWPC-22xx: All versions 1.12.0.25 and prior may allow a remote authenticated attacker with access to event configuration to store malicious code on the server, which could later be triggered by a legitimate user resulting in...

CVE-2019-10956

Geutebruck IP Cameras G-Code (EEC-2xxx) and G-Cam (EBC-21xx, EFD-22xx, ETHC-22xx, EWPC-22xx) with firmware up to 1.12.0.25 are affected by CVE-2019-10956 via OS command injection. A remote authenticated user can send a specially crafted URL command to the device and execute commands with root pri...

CVE-2015-5071

AR System Mid Tier in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary files via the report parameter of the BIRT viewer servlet...