CVE-2020-35610

An issue was discovered in Joomla! 2.5.0 through 3.9.22. The autosuggestion feature of comfinder did not respect the access level of the corresponding terms...

CVE-2020-35610 [20201101] - Core - com_finder ignores access levels on autosuggest

An issue was discovered in Joomla! 2.5.0 through 3.9.22. The autosuggestion feature of comfinder did not respect the access level of the corresponding terms...

CVE-2020-35610

CVE-2020-35610 affects Joomla! 2.5.0 through 3.9.22 where the autosuggestion feature of the component com_finder ignores the access level of terms, potentially exposing restricted information. The issue is described across multiple sources, noting the same root cause and affected range. The CVSS ...

Joomla! 安全漏洞

Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. An information disclosure vulnerability exists in Joomla! 2.5.0 - 3.9.22. The...

Joomla 1.7.x < 3.9.23 Multiple Vulnerabilities (5828-joomla-3-9-23)

According to its self-reported version, the instance of Joomla! running on the remote web server is 1.7.x prior to 3.9.23. It is, therefore, affected by multiple vulnerabilities. - The autosuggestion feature of comfinder did not respect the access level of the corresponding terms. - The global...

CVE-2020-13282

Removed by vendor...

CVE-2020-13282

CVE-2020-13282 affects GitLab prior to 13.0.12, 13.1.6, and 13.2.3. After a group transfer, users who were members of a parent group retain their access level on the (child) subgroup, causing improper access control. The description and connected sources (NVD, OSV, CVE lists, and vendor/Nessus re...

Joomla 2.5.x < 3.9.17 Multiple Vulnerabilities (5807-joomla-3-9-17)

According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.9.17. It is, therefore, affected by multiple vulnerabilities. - An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of comusers allow...

Code injection

An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of comusers allow the unauthorized editing of usergroups...

CVE-2020-11891

An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of comusers allow the unauthorized editing of usergroups...

GitLab: Members from parent group keep their access level on a subgroup transfer and are invisible

Summary There's an option that allows to transfer groups from one namespace to another, it doesn't work as intended when transferring subgroups from inside a parent group to another group. Users that were part of the first parent group from where the subgroup has been transfered, keep their...

Information disclosure

The Privacy Phone Number feature in the Telegram app 5.10 for Android and iOS provides an incorrect indication that the access level is Nobody, because attackers can find these numbers via the Group Info feature, e.g., by adding a significant fraction of a region's assigned phone numbers...

Joomla! 1.5.x < 3.8.13 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - Mail submission in disabled forms due to inadequate checks in comcontact affects Joomla 2.5.0 through 3.8.12 - Inadequate default access level for comjoomlaupdate affects...

CVE-2018-17857

Summary: CVE-2018-17857 affects Joomla! before 3.8.13, where inadequate checks on the tags search fields can lead to an access level violation . The issue is associated with com_tags and is documented across multiple sources indicating the vulnerability type and affected version range (prior to 3...

[20181003] - Core - Access level Violation in com_tags

Inadequate checks on the tags search fields can lead to an access level violation...

Joomla! security bypass vulnerability (CNVD-2018-15194)

Joomla! is an open source content management system CMS. The system provides RSS feeds , site search and other features . Joomla! Core is a Joomla! core. A security vulnerability exists in Joomla! Core versions prior to 3.8.8, which stems from the program's failure to perform adequate testing. Th...

Input validation

Perspective ICM Investigation & Case 5.1.1.16 allows remote authenticated users to modify access level permissions and consequently gain privileges by leveraging insufficient validation methods and missing cross server side checking mechanisms...

CVE-2017-11319

Perspective ICM Investigation & Case 5.1.1.16 allows remote authenticated users to modify access level permissions and consequently gain privileges by leveraging insufficient validation methods and missing cross server side checking mechanisms...

Perspective ICM Investigation & Case 5.1.1.16 - Privilege Escalation

Exploit Title: Privilege Escalation - Perspective ICM Investigation & Case - 5.1.1.16 Date Reported to vendor: Jun 28, 2017 Date Accepted by vendor: Jun 11, 2017 Exploit Author: [email protected] Vendor Homepage: www.resolver.com Version: Perspective ICM Investigation & Case -...

Privilege escalation

An elevation of privilege vulnerability in Telephony could enable a local malicious application to access system functions beyond its access level. This issue is rated as Moderate because it is a local bypass of restrictions on a constrained process. Product: Android. Versions: 6.0, 6.0.1, 7.0...