2266 matches found
CVE-2019-1604
A vulnerability in the user account management interface of Cisco NX-OS Software could allow an authenticated, local attacker to gain elevated privileges on an affected device. The vulnerability is due to an incorrect authorization check of user accounts and their associated Group ID GID. An...
Dolibarr 8.0.4 - user privilege escalation Vulnerability
Exploit for php platform in category web applications Exploit title : Dolibarr 8.0.4 - user privilege escalation Google Dork : N/A Date : 06.02.2019 Exploit Author : Mikayıl İlyas / Cyber-warrior.org - Bug Researchers group Vendor Homepage : https://dolibarr.org Software download :...
The vulnerability of the Oracle User Management component of the Oracle E-Business Suite automation system allows a perpetrator to gain access to protected information.
The vulnerability of the Oracle User Management component in the Oracle E-Business Suite automation system is related to insufficient access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to protected information using the HTTP protocol...
Universal Password Login Vulnerability in the User Management Platform of Beijing Yiwei Cloud Data Technology Co.
Beijing Yiwei Cloud Data Technology Co., Ltd. is an innovative enterprise focusing on providing Internet basic data services and data operation for small and medium-sized enterprises. There is a universal password login vulnerability in the user management platform of Beijing Yiwei Cloud Data...
Kentix MultiSensor-LAN Authentication Bypass Vulnerability
Kentix MultiSensor-LAN is a sensor device for use in IT rooms from Kentix Germany. The device is able to monitor the status of IT and server rooms, data centers and other infrastructures. An authentication bypass vulnerability exists in Kentix MultiSensor-LAN version 5.63.00 and earlier versions,...
How to Find Your Netflix Freeloaders—and Kick Them Out
Sharing is caring. But it's worth checking if your streaming accounts have picked up any suspicious stragglers along the way...
Kentix MultiSensor-LAN 5.63.00 Authentication Bypass Vulnerability
Kentix MultiSensor-LAN versions 5.63.00 and below suffer from an authentication bypass vulnerability. The web based application is not using a usual session concept with a session cookie for managing authenticated user sessions. Some URLs are protected with HTTP Basic Authentication, but the user...
CVE-2018-20728
A cross site request forgery CSRF vulnerability in NeDi before 1.7Cp3 allows remote attackers to escalate privileges via User-Management.php...
3S-Smart Software Solutions GmbH CODESYS Control V3 Products
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low skill level to exploit Vendor : 3S-Smart Software Solutions GmbH Equipment : CODESYS Control V3 products Vulnerability : Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could allow...
3S-Smart Software Solutions GmbH CODESYS V3 Products
1. EXECUTIVE SUMMARY CVSS v3 9.4 ATTENTION : Exploitable remotely/low skill level to exploit Vendor : 3S-Smart Software Solutions GmbH Equipment : CODESYS V3 products Vulnerabilities : Use of Insufficiently Random Values, Improper Restriction of Communication Channel to Intended Endpoints 2. RISK...
The vulnerability of user management functions of the Cisco Registered Envelope Service allows attackers to disclose the protected information.
The vulnerability of the user management functions of the Cisco Registered Envelope Service CRES is related to deficiencies in indexing mechanisms. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...
CVE-2018-15448
A vulnerability in the user management functions of Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to discover sensitive user information. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to an insecu...
Spoofing
A vulnerability in the user management functions of Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to discover sensitive user information. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to an insecu...
CVE-2018-15448 Cisco Registered Envelope Service Information Disclosure Vulnerability
A vulnerability in the user management functions of Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to discover sensitive user information. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to an insecu...
CVE-2018-15448 Cisco Registered Envelope Service Information Disclosure Vulnerability
A vulnerability in the user management functions of Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to discover sensitive user information. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to an insecu...
CVE-2018-15448
Cisco Registered Envelope Service suffers an information-disclosure vulnerability where an insecure configuration enables improper indexing, allowing unauthenticated, remote attackers to discover sensitive user data (e.g., usernames) via search engines. The root cause is misconfiguring indexing o...
Cisco Registered Envelope Service Information Disclosure Vulnerability
Cisco Registered Envelope Service is a set of mail service solutions from Cisco USA. The product includes read receipts for mail, mail recycling, mail forwarding and reply functions, and provides smartphone support. An information disclosure vulnerability exists in the user management functionali...
Ladder CMS Cross-Site Scripting Vulnerability
Tianti tianti is a free lightweight CMS system written in Java , currently provides a total solution from the back-end management to the front-end display . A cross-site scripting vulnerability exists in the user management module in tianti 2.3, which can be exploited by an attacker via the...