CVE-2014-5443

Seafile Server before 3.1.2 and Server Professional Edition before 3.1.0 allow local users to gain privileges via vectors related to ccnet handling user accounts...

CVE-2014-5443

Seafile Server prior to 3.1.2 and Server Pro Edition prior to 3.1.0 are affected. Local users can exploit ccnet handling of user accounts to gain privileges. Root cause involves how ccnet processes account information, enabling local privilege escalation with partial confidentiality/integrity/ava...

CVE-2014-5443

Seafile Server before 3.1.2 and Server Professional Edition before 3.1.0 allow local users to gain privileges via vectors related to ccnet handling user accounts...

CVE-2014-5443

Seafile Server before 3.1.2 and Server Professional Edition before 3.1.0 allow local users to gain privileges via vectors related to ccnet handling user accounts...

4 Steps to Monitor and Audit Privileged Users of Data Stores

Changing regulatory requirements for protection and privacy of data and increasing numbers of data breaches are driving a greater focus on data protection. Understanding who is accessing critical data, what was accessed and when it was accessed is a critical component of strong security operation...

Design/Logic Flaw

IBM Security Guardium Big Data Intelligence SonarG 3.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 137772...

CVE-2018-1372

IBM Security Guardium Big Data Intelligence SonarG 3.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 137772...

CVE-2018-1372

CVE-2018-1372 affects IBM Security Guardium Big Data Intelligence (SonarG) 3.1. The vulnerability arises from a default weak password policy, permitting account compromise without strong passwords by default. IBM’s advisory references a remediation to version 3.2, indicating an updated password p...

CVE-2018-1372

IBM Security Guardium Big Data Intelligence SonarG 3.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 137772...

Teen Exposes T-Mobile Flaw Allowing Mass Hijacking of User Accounts

By Waqas Users of popular cell phone carrier T-Mobile could have been This is a post from HackRead.com Read the original post: Teen Exposes T-Mobile Flaw Allowing Mass Hijacking of User Accounts...

MyBB Cross-Site Request Forgery Vulnerability (CNVD-2018-05796)

MyBB aka MyBulletinBoard is a free and web-based forum software developed by MyBB team using PHP and MySQL. The software is characterized by its simplicity, multi-language support and extensibility. A security vulnerability exists in MyBB version 1.8.14, which stems from the program's failure to...

MyBB <= 1.8.14 CSRF Vulnerability

MyBB is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb";...

CVE-2018-7305

MyBB 1.8.14 is not checking for a valid CSRF token, leading to arbitrary deletion of user accounts...

CVE-2018-7305

MyBB 1.8.14 is not checking for a valid CSRF token, leading to arbitrary deletion of user accounts...

Typesetter Cross-Site Request Forgery Vulnerability

Typesetter is a free CMS Content Management System. A cross-site request forgery vulnerability exists in the User Permissions page aka Admin/Users in Typesetter version 5.1, which stems from the lack of an anti-CSRF token. A remote attacker can exploit this vulnerability by sending a spoofed HTTP...

Design/Logic Flaw

Jenkins versions 2.88 and earlier and 2.73.2 and earlier stores metadata related to 'people', which encompasses actual user accounts, as well as users appearing in SCM, in directories corresponding to the user ID on disk. These directories used the user ID for their name without additional...

CVE-2017-1000391

Jenkins versions 2.88 and earlier and 2.73.2 and earlier stores metadata related to 'people', which encompasses actual user accounts, as well as users appearing in SCM, in directories corresponding to the user ID on disk. These directories used the user ID for their name without additional...

Information disclosure

Jenkins 2.73.1 and earlier, 2.83 and earlier provides information about Jenkins user accounts which is generally available to anyone with Overall/Read permissions via the /user/username/api remote API. This included e.g. Jenkins users' email addresses if the Mailer Plugin is installed. The remote...

CVE-2017-1000391

Jenkins versions 2.88 and earlier and 2.73.2 and earlier stores metadata related to 'people', which encompasses actual user accounts, as well as users appearing in SCM, in directories corresponding to the user ID on disk. These directories used the user ID for their name without additional...

CVE-2017-1000395

Jenkins 2.73.1 and earlier, 2.83 and earlier provides information about Jenkins user accounts which is generally available to anyone with Overall/Read permissions via the /user/username/api remote API. This included e.g. Jenkins users' email addresses if the Mailer Plugin is installed. The remote...