Cross site scripting

baserCMS 4.3.6 and earlier is affected by Cross Site Scripting XSS via arbitrary script execution. Admin access is required to exploit this vulnerability. The affected components are: contentfields.php, contentinfo.php, contentoptions.php, contentrelated.php, indexlisttree.php, jquery.bcTree.js...

CVE-2020-15154

CVE-2020-15154 affects baserCMS 4.3.6 and earlier, enabling Cross Site Scripting (XSS) via arbitrary script execution with admin privileges required. Affected components include: content_fields.php, content_info.php, content_options.php, content_related.php, index_list_tree.php, and jquery.bcTree...

CVE-2020-15154 Cross Site Scripting in baserCMS

baserCMS 4.3.6 and earlier is affected by Cross Site Scripting XSS via arbitrary script execution. Admin access is required to exploit this vulnerability. The affected components are: contentfields.php, contentinfo.php, contentoptions.php, contentrelated.php, indexlisttree.php, jquery.bcTree.js...

CVE-2020-5621

Cross-site request forgery CSRF vulnerability in NETGEAR switching hubs GS716Tv2 Firmware version 5.4.2.30 and earlier, and GS724Tv3 Firmware version 5.4.2.30 and earlier allow remote attackers to hijack the authentication of administrators and alter the settings of the device via unspecified...

CVE-2020-19885

DBHcms v1.2.0 has a stored xss vulnerability as there is no htmlspecialchars function for '$POST'pageparaminsertname'' variable in dbhcms\mod\mod.page.edit.php line 227, A remote authenticated with admin user can exploit this vulnerability to hijack other users...

PT-2020-13861 · Codiad · Codiad

Name of the Vulnerable Software and Affected Versions: Codiad versions 1.7.8 and later Description: A Cross Side Request Forgery CSRF vulnerability was found in the request to download a plugin from the marketplace, which is only available to admin users. The issue lies in the...

PT-2020-5179 · Cisco · Cisco Data Center Network Manager

Name of the Vulnerable Software and Affected Versions: Cisco Data Center Network Manager DCNM affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, remote attacker to view, modify, and delete data without proper...

PT-2020-14229 · Openmage · Openmage

Name of the Vulnerable Software and Affected Versions: OpenMage versions prior to 19.4.6 OpenMage versions prior to 20.0.2 Description: This issue allows attackers to circumvent the fromkey protection in the Admin Interface, increasing the attack surface for Cross Site Request Forgery attacks...

AZL-36991 CVE-2020-1472 affecting package samba for versions less than 4.18.3-1

An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol MS-NRPC. An attacker who successfully exploited the vulnerability could run a specially crafted application on a...

Rapid SCADA Local Elevation of Privilege Vulnerability

Rapid SCADA is a free, open source, full-featured SCADA data acquisition and monitoring system software. A local elevation of privilege vulnerability exists in the ScadaAgentSvc.exe executable file in Rapid SCADA 5.8.0. The vulnerability can be exploited to gain administrator privileges by placin...

Shopify: Admin web sessions remain active after logout of Shopify ID

previously on 837729 a session is still valid and the store password can be seen. this time I report that the session is still valid despite changing the email address on the shopify account. summary: accounts that have changed email addresses still have permission to enter the store through...

NETGEAR R6700 Stack Buffer Overflow Vulnerability

The NETGEAR R6700 is an AC1750 Smart WiFi Router. A stack buffer overflow vulnerability exists in the acsd service in the NETGEAR R6700 prior to version 1.0.4.98. The vulnerability stems from a failure to properly validate the length of user-supplied data before copying it to a fixed-length stack...

CVE-2020-15408

An issue was discovered in Pulse Secure Pulse Connect Secure before 9.1R8. An authenticated attacker can access the admin page console via the end-user web interface because of a rewrite...

openstack-keystone: Credentials endpoint policy logic allows changing credential owner and target project ID

A vulnerability was found in Keystone's EC2 credentials API. This flaw allows any authenticated user to create an EC2 credential for themselves for a project that they have a specified role, and then perform an update to the credential user and project, allowing them to masquerade as another user...

Code Execution Vulnerability in WMCMS of Chongqing Yu Yue Optoelectronics Technology Co.

WMCMS is a set of PHP + MYSQL based on the core development, free + open source professional Chinese labeling station-building system. WMCMS has a code execution vulnerability that can be exploited by an attacker to gain administrative privileges on the web server...

CVE-2020-3140

A vulnerability in the web management interface of Cisco Prime License Manager PLM Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of user input on the web management interface. An...

Critical RCE Flaw Affects F5 BIG-IP Application Security Servers

Cybersecurity researchers today issued a security advisory warning enterprises and governments across the globe to immediately patch a highly-critical remote code execution vulnerability affecting F5's BIG-IP networking devices running application security servers. The vulnerability, assigned...

CVE-2020-5906

In versions 13.1.0-13.1.3.3, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, the BIG-IP system does not properly enforce the access controls for the scp.blacklist files. This allows Admin and Resource Admin users with Secure Copy SCP protocol access to read and overwrite blacklisted files via SCP...

CVE-2020-9414

The MFT admin service component of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center and TIBCO Managed File Transfer Internet Server contains a vulnerability that theoretically allows an authenticated user with specific permissions to obtain the session identifier of another user...

MK-AUTH Trust Management Issue Vulnerability

MK-AUTH is an access control system from the Brazilian software developer Pedro Filho. A trust management issue vulnerability exists in the Web login feature in MK-AUTH version 19.01, which can be exploited to bypass authentication and gain administrator access with the help of the...