Code injection

In Modicon Quantum all firmware versions, a CWE-94: Code Injection vulnerability could cause an unauthorized firmware modification with possible Denial of Service when using Modbus protocol...

Unauthorized Modification

.NET Core is vulnerable to unauthorized modification vulnerability. The vulnerability exists in the NuGet Package Manager for Linux and Mac. An attacker could change a NuGet package's folder structure and bypass certain security restrictions and perform unauthorized actions...

Unauthorized Modification

Java SE and Java SE Embedded are vulnerable to unauthorized modification attacks. An unauthenticated attacker can exploit a flaw in the FTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate FTP connections established by a...

The vulnerability of the fly-admin-printer package allows unauthorized changes to the general access settings for printers on the Astra Linux operating system. This vulnerability enables a hacker to modify these settings without authorization.

The vulnerability of the fly-admin-printer package for configuring the printing system and printer options in the Astra Linux operating system is related to incorrect configuration of general access parameters. Exploiting this vulnerability may allow a malicious individual to unauthorizedly modif...

CVE-2018-18812: Incorrect Permission Assignment for Critical Resource

The Spotfire Library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace, and TIBCO Spotfire Server contains a vulnerability that might theoretically fail to restrict users with read-only access from modifying files stored in the Spotfire Library, only when th...

PT-2019-9635

Name of the Vulnerable Software and Affected Versions TIBCO Spotfire Analytics Platform for AWS Marketplace versions up to and including 10.0.0 TIBCO Spotfire Server versions up to and including 7.14.0, 10.0.0 Description The Spotfire Library component contains an issue that might fail to restric...

Authorization Bypass

java-1.8.0-openjdk is vulnerable to authorization bypass attacks. The vulnerability exists as a vulnerability in the Java SE component of Oracle Java SE subcomponent: Smart Card IO. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Difficult to exploit vulnerability...

Unauthorized Modification

jbossas is vulnerable to unauthorized modification attacks. The vulnerability exists in the 1 JNDI service, 2 HA-JNDI service, and 3 HAJNDIFactory invoker servlet in JBoss Enterprise Application Platform 4.3.0 CP10 and 5.1.2, Web Platform 5.1.2, SOA Platform 4.2.0.CP05 and 4.3.0.CP05, Portal...

PT-2019-1187

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1 through 12.1.3 Description The issue is related to inadequate access control in the Oracle Performance Management component, specifically the Performance Management Plan subcomponent. This can be exploit...

PT-2019-8722

Name of the Vulnerable Software and Affected Versions Jenkins JUnit Plugin versions 1.25 and earlier Description A cross-site request forgery issue exists in the TestObject.java file, allowing unauthorized modification of test result descriptions. Recommendations For Jenkins JUnit Plugin versions...

PT-2018-18284

Name of the Vulnerable Software and Affected Versions: FoxView HMI SCADA versions prior to Foxboro DCS Control Core Services 9.4 and FoxView 10.5 Description: A Credential Management issue exists that could lead to unauthorized disclosure, modification, or disruption in service when the password ...

F5 Networks BIG-IP : Linux kernel vulnerability (K80440915)

The mm subsystem in the Linux kernel through 4.10.10 does not properly enforce the CONFIGSTRICTDEVMEM protection mechanism, which allows local users to read or write to kernel memory locations in the first megabyte and bypass slab-allocation access restrictions via an application that opens the...

F5 Networks BIG-IP : ssldump vulnerability (K46121888)

Administrative users by way of undisclosed methods can exploit the ssldump utilityto write to arbitrary file paths. For users who do not have Advanced Shell access for example, any user when licensed for Appliance Mode, this allows more permissive file access than intended. CVE-2018-5519 Impact...

Unspecified Vulnerability in Oracle Supply Chain Products Suite Demantra Demand Management Component

Oracle Supply Chain Products Suite is a suite of supply chain solutions from Oracle that provides value chain planning, value chain execution, product lifecycle management, etc. Demantra Demand Management is one of the components used to manage supply chain demand. An unspecified vulnerability...

CVE-2018-2911

Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware subcomponent: Java Server Faces. The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GlassFish Server...

PT-2018-16036

Name of the Vulnerable Software and Affected Versions Oracle Retail Open Commerce Platform versions 5.3, 6.0, and 6.0.1 Description The issue allows a low-privileged attacker with network access via HTTP to compromise the Oracle Retail Open Commerce Platform. Successful attacks can result in...

PT-2018-11403

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.0 through 6.4 Description The issue is related to an input validation bypass, which could allow unauthorized modification of information if successfully exploited. Recommendations For Adobe Experience Manage...

HPESBHF03886 rev.1 - HPE Comware 5 and Comware 7 Switches and Routers using NTP, Remote Denial of Service

Potential Security Impact: Local: Unauthorized Modification; Remote: Denial of Service DoS, Unauthorized Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Switch Fabric Modules Comware 5, Comware 7 HPE 9500 Switch Series Comware 5 HPE FlexFabric 5830...

Elasticsearch ESA-2017-15

An error was found in the X-Pack Security TLS trust manager for versions 5.0.0 to 5.5.1. If reloading the trust material fails the trust manager will be replaced with an instance that trusts all certificates. This could allow any node using any certificate to join a cluster. The proper behavior i...

HPESBNW03878 rev.1 - HPE Comware 5 and Comware 7 Switches and Routers using NTP, Remote Denial of Service

Potential Security Impact: Local: Unauthorized Modification; Remote: Denial of Service DoS, Unauthorized Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Switch Fabric Modules Comware 5, Comware 7 HPE 9500 Switch Series Comware 5 HPE FlexFabric 5830...