Design/Logic Flaw

An issue was discovered in Serpico before 1.3.3. The /admin/attacmentsbackup endpoint can be requested by non-admin authenticated users. This means that an attacker with a user account can retrieve all of the attachments of all users including administrators from the database...

CVE-2020-12687

CVE-2020-12687 affects Serpico prior to 1.3.3. The /admin/attacments_backup endpoint may be accessed by non-admin authenticated users, allowing retrieval of all user attachments (including administrator data). Red Hat, CNVD, OSV, and other sources corroborate this information. A fix is available ...

UBUNTU-CVE-2020-12691

An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. Any authenticated user can create an EC2 credential for themselves for a project that they have a specified role on, and then perform an update to the credential user and project, allowing them to masquerade as another user...

OpenStack Keystone Elevation of Privilege Vulnerability

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration NASA in collaboration with Rackspace in the U.S. OpenStack Keystone is a module used in OpenStack to manage the authentication, service rules, and service token functions. A security...

The vulnerability of LDAP authentication modules (mod_auth_ldap and mod_auth_ldap2) in the Prosody Jabber/XMPP server allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the LDAP authentication modules modauthldap and modauthldap2 in the Prosody Jabber/XMPP server relates to the improper checking of the XMPP address during the determination of whether a user has administrative access. Exploiting this vulnerability can allow an attacker to gai...

PT-2020-6502

Name of the Vulnerable Software and Affected Versions IBM Data Risk Manager versions 2.0.1 through 2.0.6 Description The issue is related to the implementation of SAML Security Assertion Markup Language technology in IBM Data Risk Manager, which is associated with deficiencies in the authenticati...

Design/Logic Flaw

IPSec UDP key material can be retrieved from machine-to-machine interfaces and human-accessible interfaces by a user with admin credentials. Such a user, with the required system knowledge, could use this material to decrypt in-flight communication. 2. The vulnerability requires administrative...

CVE-2019-20002

Formula Injection exists in the export feature in SolarWinds WebHelpDesk 12.7.1 via a value provided by a low-privileged user in the Subject field of a help request form that is mishandled in a TicketActions/view?tab=group TSV export by an admin user...

Shanxi Xianqi Technology Co., Ltd. environmental times enterprise online bookkeeping management system there are logic flaws vulnerability

Eco Times Business Online Bookkeeping Management System is a bookkeeping system for micro and small businesses and households. Shanxi Xianqi Technology Co., Ltd Environmental Times Enterprise Online Bookkeeping Management System has a logic flaw vulnerability that can be exploited by an attacker ...

Exploit for Missing Authentication for Critical Function in Vmware Vcenter_Server

Proof of concept for CVE-2020-3952https://www.guardicore.co...

CVE-2020-11885

WSO2 Enterprise Integrator through 6.6.0 has an XXE vulnerability where a user with admin console access can use the XML validator to make unintended network invocations such as SSRF via an uploaded file...

CVE-2020-2746

Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Admin privilege with network access via HTTP to compromise...

CVE-2020-6195

SAP Business Objects Business Intelligence Platform CMC, version 4.1, 4.2, shows cleartext password in the response, leading to Information Disclosure. It involves social engineering in order to gain access to system and If password is known, it would give administrative rights to the attacker to...

File Upload Vulnerability in PHPOA System of Guilin Tiansheng Zhichuang Information Technology Co.

PHPOA using PHP + MYSQL open source language , Guilin Born Wisdom Information Technology Co., Ltd. has been committed to application management software development at the grass-roots level . Guilin Tiansheng Zhichuang Information Technology Co., Ltd. PHPOA system file upload vulnerability,...

Argo Authorization Issues Vulnerability

Argo is an open source container native workflow engine. Argo suffers from an authorization issue vulnerability that stems from the program setting the default administrator password to the argocd-server container group name. An attacker can exploit this vulnerability to gain administrator...

CVE-2020-1614

A Use of Hard-coded Credentials vulnerability exists in the NFX250 Series for the vSRX Virtual Network Function VNF instance, which allows an attacker to take control of the vSRX VNF instance if they have the ability to access an administrative service e.g. SSH on the VNF, either locally, or...

File Upload Vulnerability in MetInfo Backend

MetInfo is an open source free CMS building system suitable for enterprise building. MetInfo backend file upload vulnerability can be exploited by attackers to upload malicious files and obtain site administration privileges...

File Upload Vulnerability in Liangjing OA Office System

Good Precision OA Office System is an application system that assists in the daily operation and management of an organization. A file upload vulnerability exists in Lite-On OA Office System, which can be exploited by attackers to upload malicious files and gain administrative privileges on the w...

CVE-2019-19699

There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at 22:30 every day. T...

Remote code execution

There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, leading to system compromise via apache crontab misconfiguration, This allows the apache user to modify an executable file executed by root at 22:30 every day. T...