Design/Logic Flaw

This vulnerability allows local attackers to escalate privileges on vulnerable installations of ABB MicroSCADA 9.3 with FP 1-2-3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

CVE-2018-1168

This vulnerability allows local attackers to escalate privileges on vulnerable installations of ABB MicroSCADA 9.3 with FP 1-2-3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

CVE-2018-1168

ABB MicroSCADA 9.3 with FP 1-2-3 is affected by an improper access-control configuration in the installed product files. The installation procedure leaves critical files open to manipulation by any authenticated user, allowing local privilege escalation to SYSTEM. Root cause identified as misconf...

CVE-2018-1164

This vulnerability allows remote attackers to cause a denial-of-service condition on vulnerable installations of ZyXEL P-870H-51 DSL Router 1.00AWG.3D5. Authentication is not required to exploit this vulnerability. The specific flaw exists within numerous exposed CGI endpoints. The vulnerability ...

foreman: privilege escalation through Organization and Locations API

It was found that Satellite 6 did not properly enforce access controls on certain resources. An attacker, with access to the API and knowledge of the ID name, can potentially access other resources in other organizations...

Authentication Bypass

xenon-common is vulnerable to authentication bypass. Xenon doesn't correctly use access controls on utility endpoints which can result in information disclosure...

CVE-2017-15914

Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3...

DEBIAN-CVE-2017-15914

Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3...

PYSEC-2018-105

Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3...

Information disclosure

Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3...

CVE-2017-15914

Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3...

PYSEC-2018-105

Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3...

UBUNTU-CVE-2017-15914

Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3...

CVE-2017-15914

The CVE describes an improper access-control flaw in BorgBackup 1.1.x prior to 1.1.3 that lets remote users override repository restrictions. Affected component is Borg servers (backup repository access control); root cause is incorrect access-control implementation. Impact is high on confidentia...

CVE-2017-15914

Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3...

Sandstorm Server-Side Request Forgery Vulnerability Vulnerability

Sandstorm is a personal cloud platform. The platform features file storage, application management, task and project management, and more. A server-side request forgery vulnerability exists in the install application process in versions prior to Sandstorm build 0.203. A remote attacker can exploi...

PT-2018-10744 · Abb · Abb Microscada

Name of the Vulnerable Software and Affected Versions: ABB MicroSCADA versions 9.3 with FP 1-2-3 Description: This issue allows local attackers to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

CVE-2014-9503

CVE-2014-9503 affects the Open Atrium 7.x-2.x Discussions sub module (pre-7.x-2.26). The vulnerability allows remote authenticated users with "access content" permissions to modify arbitrary nodes due to improper access checks on unspecified AJAX callbacks. Impact is limited to Drupal/Open Atrium...

The vulnerability in the Splunk Web platform for operational analysis of Splunk Enterprise’s web interface allows a perpetrator to bypass existing access restrictions or perform arbitrary actions on behalf of legitimate users.

The vulnerability of the Splunk Web platform for operational analysis in Splunk Enterprise is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions or perform arbitrary actions on behalf of legitimate syst...

Semrush: CORS (Cross-Origin Resource Sharing)

Affected URL: https://ta.semrush.com/version/ Description: The application implements an HTML5 cross-origin resource sharing CORS policy for this request which allows access from any domain. Allowing access from all domains means that any domain can perform two-way interaction with the applicatio...