CVE-2020-7912

In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups...

CVE-2020-7998

An arbitrary file upload vulnerability has been discovered in the Super File Explorer app 1.0.1 for iOS. The vulnerability is located in the developer path that is accessible and hidden next to the root path. By default, there is no password set for the FTP or Web UI service...

CVE-2020-2534

Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Exposed Endpoints

github.com/kubernetes/ingress-nginx is uses publicly exposed endpoints. The prometheus metrics and healthz of the Kubernetes defaultbackend can be accessed by a remote attacker using a port-forward request to access the publicly accessible metrics...

CVE-2012-3824

In Arial Campaign Enterprise before 11.0.551, multiple pages are accessible without authentication or authorization...

U.S. Dept Of Defense: Publicly accessible Grafana install allows pivoting to Prometheus datasource

Summary: A publicly accessible Grafana install exposes semi sensitive Dashboards. This also exposes the Prometheus proxied datasources which allow direct queries to a Prometheus instance which reveals sensitive data an opens the instance up to potential DoS via crafted requests. Description: Impa...

Samsung J7 Pro Access Control Error Vulnerability

The Samsung J7 Pro is a smartphone from the South Korean company Samsung Samsung. An access control error vulnerability exists in the Samsung J7 Pro. The vulnerability stems from the network system or product not properly restricting access to resources from unauthorized roles. An attacker could...

Samsung S7 Edge Access Control Error Vulnerability

Samsung S7 Edge is a smartphone from the South Korean company Samsung Samsung. An access control error vulnerability exists in Samsung S7 Edge. The vulnerability stems from the network system or product not properly restricting access to resources from unauthorized roles. An attacker could exploi...

Samsung S7 Edge Access Control Error Vulnerability (CNVD-2020-14775)

Samsung S7 Edge is a smartphone from the South Korean company Samsung Samsung. An access control error vulnerability exists in Samsung S7 Edge. The vulnerability stems from the network system or product not properly restricting access to resources from unauthorized roles. An attacker could exploi...

Samsung J6 Access Control Error Vulnerability

The Samsung J6 is a smartphone from the South Korean company Samsung Samsung. An access control error vulnerability exists in the Samsung J6. The vulnerability stems from the network system or product not properly restricting access to resources from unauthorized roles. An attacker could exploit...

Samsung on7xelteskt Access Control Error Vulnerability

Samsung on7xelteskt is a smartphone from the South Korean company Samsung Samsung. An access control error vulnerability exists in Samsung on7xelteskt. The vulnerability arises from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacke...

Samsung XCover4 Access Control Error Vulnerability

Samsung XCover4 is a smartphone from Samsung South Korea. An access control error vulnerability exists in the Samsung XCover4. The vulnerability stems from the network system or product not properly restricting access to resources from unauthorized roles. An attacker could exploit the vulnerabili...

Samsung j3popeltecan Access Control Error Vulnerability

Samsung j3popeltecan is a smartphone from Samsung South Korea. An access control error vulnerability exists in Samsung j3popeltecan. The vulnerability stems from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker could exploit the...

Samsung J5 Access Control Error Vulnerability

The Samsung J5 is a smartphone from the South Korean company Samsung Samsung. An access control error vulnerability exists in the Samsung J5. The vulnerability arises from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker could...

Samsung J4 Access Control Error Vulnerability (CNVD-2020-14767)

The Samsung J4 is a smartphone from the South Korean company Samsung Samsung. An access control error vulnerability exists in the Samsung J4. The vulnerability stems from a network system or product not properly restricting access to resources from unauthorized roles. An attacker could exploit th...

Samsung J3 Access Control Error Vulnerability

The Samsung J3 is a smartphone from the South Korean company Samsung Samsung. An access control error vulnerability exists in the Samsung J3. The vulnerability arises from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker could...

Samsung J3 Access Control Error Vulnerability (CNVD-2020-14799)

The Samsung J3 is a smartphone from the South Korean company Samsung Samsung. An access control error vulnerability exists in the Samsung J3. The vulnerability arises from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker could...

Samsung XCover4 Access Control Error Vulnerability (CNVD-2020-14771)

Samsung XCover4 is a smartphone from Samsung South Korea. An access control error vulnerability exists in the Samsung XCover4. The vulnerability stems from the network system or product not properly restricting access to resources from unauthorized roles. An attacker could exploit the vulnerabili...

ASUS ZenFone Max 4 Access Control Error Vulnerability

The ASUS ZenFone Max 4 is a smartphone from Asus ASUS of Taiwan, China. An access control error vulnerability exists in the ASUS ZenFone Max 4. The vulnerability arises from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker could...

Samsung J7 Neo Access Control Error Vulnerability

Samsung J7 Neo is a smartphone from Samsung South Korea. An access control error vulnerability exists in the Samsung J7 Neo. The vulnerability stems from the network system or product not properly restricting access to resources from unauthorized roles. An attacker could exploit the vulnerability...