232 matches found
Joomla! 安全漏洞
Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. An information disclosure vulnerability exists in Joomla! 2.5.0 - 3.9.22. The...
Joomla 1.7.x < 3.9.23 Multiple Vulnerabilities (5828-joomla-3-9-23)
According to its self-reported version, the instance of Joomla! running on the remote web server is 1.7.x prior to 3.9.23. It is, therefore, affected by multiple vulnerabilities. - The autosuggestion feature of comfinder did not respect the access level of the corresponding terms. - The global...
CVE-2020-13282
CVE-2020-13282 affects GitLab prior to 13.0.12, 13.1.6, and 13.2.3. After a group transfer, users who were members of a parent group retain their access level on the (child) subgroup, causing improper access control. The description and connected sources (NVD, OSV, CVE lists, and vendor/Nessus re...
CVE-2020-13282
Removed by vendor...
Joomla 2.5.x < 3.9.17 Multiple Vulnerabilities (5807-joomla-3-9-17)
According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.9.17. It is, therefore, affected by multiple vulnerabilities. - An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of comusers allow...
Code injection
An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of comusers allow the unauthorized editing of usergroups...
CVE-2020-11891
An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of comusers allow the unauthorized editing of usergroups...
GitLab: Members from parent group keep their access level on a subgroup transfer and are invisible
Summary There's an option that allows to transfer groups from one namespace to another, it doesn't work as intended when transferring subgroups from inside a parent group to another group. Users that were part of the first parent group from where the subgroup has been transfered, keep their...
Information disclosure
The Privacy Phone Number feature in the Telegram app 5.10 for Android and iOS provides an incorrect indication that the access level is Nobody, because attackers can find these numbers via the Group Info feature, e.g., by adding a significant fraction of a region's assigned phone numbers...
Joomla! 1.5.x < 3.8.13 Multiple Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - Mail submission in disabled forms due to inadequate checks in comcontact affects Joomla 2.5.0 through 3.8.12 - Inadequate default access level for comjoomlaupdate affects...
CVE-2018-17857
Summary: CVE-2018-17857 affects Joomla! before 3.8.13, where inadequate checks on the tags search fields can lead to an access level violation . The issue is associated with com_tags and is documented across multiple sources indicating the vulnerability type and affected version range (prior to 3...
[20181003] - Core - Access level Violation in com_tags
Inadequate checks on the tags search fields can lead to an access level violation...
Joomla! security bypass vulnerability (CNVD-2018-15194)
Joomla! is an open source content management system CMS. The system provides RSS feeds , site search and other features . Joomla! Core is a Joomla! core. A security vulnerability exists in Joomla! Core versions prior to 3.8.8, which stems from the program's failure to perform adequate testing. Th...
Input validation
Perspective ICM Investigation & Case 5.1.1.16 allows remote authenticated users to modify access level permissions and consequently gain privileges by leveraging insufficient validation methods and missing cross server side checking mechanisms...
CVE-2017-11319
Perspective ICM Investigation & Case 5.1.1.16 allows remote authenticated users to modify access level permissions and consequently gain privileges by leveraging insufficient validation methods and missing cross server side checking mechanisms...
Perspective ICM Investigation & Case 5.1.1.16 - Privilege Escalation
Exploit Title: Privilege Escalation - Perspective ICM Investigation & Case - 5.1.1.16 Date Reported to vendor: Jun 28, 2017 Date Accepted by vendor: Jun 11, 2017 Exploit Author: [email protected] Vendor Homepage: www.resolver.com Version: Perspective ICM Investigation & Case -...
Privilege escalation
An elevation of privilege vulnerability in Telephony could enable a local malicious application to access system functions beyond its access level. This issue is rated as Moderate because it is a local bypass of restrictions on a constrained process. Product: Android. Versions: 6.0, 6.0.1, 7.0...
Update Rollup 2 for Windows Server 2012 Essentials
Update Rollup 2 for Windows Server 2012 Essentials Introduction This article lists the issues that are fixed in Update Rollup 2 for Windows Server 2012 Essentials. Important This update rollup contains server-side fixes. After you apply this update rollup, the client-side package is installed...
Honeywell IP-Camera LFI and Credential Disclosure Vulnerabilities
Honeywell IP-Camera is prone to local file disclosure and credential disclosure vulnerabilities SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Symphony CMS Session Fixation Vulnerability
Symphony CMS is prone to a session fixation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...