EUVD-2013-4208

Malware in sbrugna...

EUVD-2015-3299

Malware in sbrugna...

EUVD-2013-4707

Malware in sbrugna...

EUVD-2014-3028

Malware in sbrugna...

EUVD-2009-0387

Malware in sbrugna...

EUVD-2012-3357

Malware in sbrugna...

EUVD-2022-3428

Malicious code in bioql PyPI...

EUVD-2022-1688

Malicious code in bioql PyPI...

CVE-2015-3029

The web interface in McAfee Advanced Threat Defense MATD before 3.4.4.63 does not properly restrict access, which allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2014-9154

The Notify module 7.x-1.x before 7.x-1.1 for Drupal does not properly restrict access to 1 new or 2 modified nodes or 3 their fields, which allows remote authenticated users to obtain node titles, teasers, and fields by reading a notification email...

CVE-2024-10306

CVE-2024-10306 affects the mod_proxy_cluster module (Apache HTTP Server). The issue arises because the Directory directive does not enforce access restrictions as strongly as the Location directive, enabling unauthorized MCMP requests that could add/remove/update balancer nodes. Public exploit de...

CVE-2023-34965

SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information...

PT-2021-19038 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15 iPadOS versions prior to 15 Description: An access issue was addressed with improved access restrictions. An attacker in a privileged network position may be able to leak sensitive user information. Recommendations: F...

sp mode mail issue when accessing attachments in incoming mail

Overview sp mode mail provided by NTT DOCOMO contains a function that allows other Android applications to access attachments for incoming emails. This function contains an issue in the restriction of access permissions. Satoru Takekoshi reported this vulnerability to IPA. JPCERT/CC coordinated...

CVE-1999-1455

RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user comes from an authorized host, which could allow unauthorized users to access the service by logging in from an authorized host...