Authentication Bypass Vulnerability in Multiple Canon Products

Canon LBP6650 and others are printer devices from Canon Japan. A security vulnerability exists in several Canon products. The vulnerability can be exploited by an attacker to bypass the administrator mode authentication of the /tlogin.cgi file...

lastore-daemon D-Bus Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in lastore-daemon D-Bus. An attacker can exploit the vulnerability to perform an elevation of privilege and gain administrator user access...

Advantech WebAccess Node bwblcmd Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech WebAccess Node. Authentication is not required to exploit this vulnerability. The specific flaw exists within bwblcmd.exe, which is accessed through the 0x2711 IOCTL in the webvrpcs process...

Meross MSS110 TELNET listener unauthorized access vulnerability

Meross MSS110 is a smart WiFi socket device from Meross Technologies, China.TELNET listenerhi one of the TELNET listening components. A security vulnerability exists in the TELNET listener in Meross MSS110 versions prior to 1.1.24. The vulnerability can be exploited by an attacker to access the...

Authentication Flaw Vulnerability in CMS Made Simple Version 2.2.7

CMS Made Simple is an open source content management system. It is built using PHP and Smarty Engine , which separates content , functionality and templates . CMS Made Simple version 2.2.7 suffers from an authentication flaw vulnerability, which can be exploited by an attacker to elevate an...

The vulnerability of the microprogramming software of the TIM 1531 IRC communication module, related to authentication errors, allows a perpetrator to gain access to the device with administrator privileges.

The vulnerability of the microprogramming software for the TIM 1531 IRC communication module is related to the improper implementation of the authentication algorithm. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the device with administrator...

The vulnerability of the AMD Secure Processor implementation in EPYC Server processors allows for writing to the secure memory region of the processor.

The vulnerability of the AMD Secure Processor implementation in EPYC Server processors lies in the deficiencies in the implementation of the loader responsible for verifying the functionality of the hardware, as well as for initiating the AMD Secure Processor module. Exploiting this vulnerability...

The vulnerability of AMD Secure Processor technology allows for the execution of arbitrary code on a secure processor.

The vulnerability of AMD Secure Processor-based Ryzen and Ryzen Pro processors lies in the implementation flaws of security functions. Exploiting this vulnerability allows an attacker who has access to the targeted computer and possesses administrator privileges to execute arbitrary code on the...

The vulnerability of the AMD Secure Processor technology in processors like Ryzen, Ryzen Pro, and Ryzen Mobile allows for writing to the secure area of the processor.

The vulnerability of the AMD Secure Processor-based processors, including Ryzen, Ryzen Pro, and Ryzen Mobile, is related to deficiencies in the implementation of security functions. Exploiting this vulnerability allows an attacker who has access to the targeted computer and possesses administrato...

The vulnerability affects the implementation of the AMD Secure Processor technology in CPUs such as Ryzen, Ryzen Pro, Ryzen Mobile, and EPYC Server. This allows malicious code to be injected into a computer’s BIOS.

The vulnerability of AMD Secure Processor-based processors, such as Ryzen, Ryzen Pro, Ryzen Mobile, and EPYC Server, stems from the absence of a mechanism for detecting damage to flash memory contents. Exploiting this vulnerability allows an attacker who has access to the targeted computer and...

CVE-2017-4028

Maliciously misconfigured registry vulnerability in all Microsoft Windows products in McAfee consumer and corporate products allows an administrator to inject arbitrary code into a debugged McAfee process via manipulation of registry parameters...

SQL Code Injection

textpattern/lock is vulnerable to SQL injection. The attacker can launch the attack via the "qty" on the page index.php with authentication as administrator...

Code injection

Kentico 9.0 before 9.0.51 and 10.0 before 10.0.48 allows remote attackers to obtain Global Administrator access by visiting CMSInstall/install.aspx and then navigating to the CMS Administration Dashboard...

CVE-2016-0235

CVE-2016-0235 affects IBM Security Guardium Database Activity Monitor V10, where a hard-coded password available to an administrator or root user enables potential access across GRUB-based systems. The root cause is use of a hard-coded credential within the Guardium component, allowing local acce...

CVE-2018-7228

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to bypass authentication and get the administrator privileges...

CVE-2017-17323

Huawei iBMC on V200R002C10/C20/C30 contains an improper authorization vulnerability where a normal user can access information intended for admins due to inadequate authorization checks, potentially leading to information disclosure. A Huawei security advisory confirms a fix in iBMC and notes pat...

CVE-2018-5313

A vulnerability allows local attackers to escalate privilege on Rapid Scada 5.5.0 because of weak C:\SCADA permissions. The specific flaw exists within the access control that is set and modified during the installation of the product. The product sets weak access control restrictions. An attacke...

CVE-2018-6926

In app/Controller/ServersController.php in MISP 2.4.87, a server setting permitted the override of a path variable on certain Red Hed Enterprise Linux and CentOS systems where rhshellfix was enabled, and consequently allowed site admins to inject arbitrary OS commands. The impact is limited by th...

Cozy Cross-Site Scripting Vulnerability

Cozy is a personal cloud platform. The platform features file storage and management, application backup, and schedule management. A cross-site scripting vulnerability exists in Cozy. A remote attacker can exploit this vulnerability to gain administrator access via JavaScript code in the 'url'...

Enable Alt-Tab Hotkey Within A Citrix Desktop Session - Citrix Workspace App

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Executing ALT+TAB keys, toggles opened applications on endpoint machine instead of Citrix Desktop...