46 matches found
CGA-FP6J-Q7HC-8XVC
Bulletin has no description...
CGA-RXR7-QJJ9-XF8J
Bulletin has no description...
CGA-R9QQ-3R2C-H7G5
Bulletin has no description...
PT-2025-28384 · Google · Isemtelephony
Name of the Vulnerable Software and Affected Versions: isemtelephony versions prior to Android 15 Description: The issue is related to improper access control in isemtelephony, allowing local attackers to access sensitive information. Recommendations: For versions prior to Android 15, update to...
GHSA-QC99-R4WH-C8H6 Incorrect Access Control in NodeBB
In NodeBB prior to 3.6.7 an attacker was able to access the restricted tabs for the Admin group which are only allowed the the administrators...
WyreStorm Apollo VX20 Security Vulnerability
Wyrestorm Apollo VX20 is an advanced conferencing video appliance from Wyrestorm. A security vulnerability exists in the WyreStorm Apollo VX20 prior to version 1.3.58, which stems from plaintext credentials that allow a remote attacker to access the SoftAP router via a simple HTTP GET request...
PT-2023-29387 · Supsystic · Contact Form By Supsystic
Name of the Vulnerable Software and Affected Versions: Supsystic Contact Form by Supsystic plugin versions = 1.7.27 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended action...
Redirecting and amending port to URL : https://URL and http://URL to https://URL:8443
...
CVE-2022-40207
Improper access control in the IntelR SUR software before version 2.4.8989 may allow an authenticated user to potentially enable escalation of privilege via local access...
Microsoft Windows Media Foundation Memory Corruption Vulnerability (CNVD-2020-33806)
Microsoft Windows is an operating system for personal devices from Microsoft, of which Media Foundation is a multimedia development library. A memory corruption vulnerability exists in Microsoft Windows Media Foundation, which arises from a program's failure to properly handle objects in memory,...
Microsoft Excel 2016 XML External Entity Information Disclosure Vulnerability
Description Microsoft Excel 2016 is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Excel 2016 1901 Recommendations Deploy network intrusion detection systems to...
Microsoft Office SharePoint CVE-2019-0556 Cross Site Scripting Vulnerability
Description Microsoft Office SharePoint is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This...
Microsoft Edge CVE-2019-0566 Remote Privilege Escalation Vulnerability
Description Microsoft Edge is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Edge Recommendations Block external access at the network boundary, unless external parties require service. Filter...
CVE-2016-3165
The Form API in Drupal 6.x before 6.38 ignores access restrictions on submit buttons, which might allow remote attackers to bypass intended access restrictions by leveraging permission to submit a form with a button that has "access" set to FALSE in the server-side form definition...
German A1 for Beginners Free - Customized SSL, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application German A1 for Beginners Free published at the 'play' market has multiple vulnerabilities...
PYSEC-2011-27
The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability than CVE-2011-3587...
PYSEC-2009-13
MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when aclhierarchic is set to True, which might allow remote attackers to bypass intended access restrictions, a different vulnerability than CVE-2008-1937...
BlooMooWeb ActiveX unauthorized access
Control has unsafe functions...
CVE-2005-0173
squidldapauth in Squid 2.5 and earlier allows remote authenticated users to bypass username-based Access Control Lists ACLs via a username with a space at the beginning or end, which is ignored by the LDAP server...
