CVE-2020-8145

The UniFi Video Server Windows web interface configuration restore functionality at the “backup” and “wizard” endpoints does not implement sufficient privilege checks. Low privileged users, belonging to the PUBLICGROUP or CUSTOMGROUP groups, can access these endpoints and overwrite the current...

CVE-2019-6331

An issue was found in Samsung Mobile Print Android versions prior to 4.08.007. A potential security vulnerability caused by incomplete obfuscation of application configuration information...

Dell EMC Integrated Data Protection Appliance ACM Password Storage Vulnerability

Dell EMC Integrated Data Protection Appliance is a disk-based backup and recovery solution from Dell, Inc.ACM is one of the application configuration management components. A password storage vulnerability exists in the Dell EMC Integrated Data Protection Appliance ACM. An attacker could exploit...

The vulnerability of the application configuration mechanism of Cisco Firepower Threat Defense software allows attackers to gain access to protected information.

The vulnerability of the application configuration mechanism of Cisco Firepower Threat Defense microprogramming network interfaces arises due to errors in application identification. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected...

CVE-2019-4210

IBM QRadar SIEM 7.3.2 could allow a user to bypass authentication exposing certain functionality which could lead to information disclosure or modification of application configuration. IBM X-Force ID: 158986...

CVE-2019-4210

CVE-2019-4210 affects IBM QRadar SIEM 7.3.2, where a flaw allows a user to bypass authentication, potentially exposing sensitive information or enabling modification of application configuration. The issue is documented with a high/moderate mix of CVSS scores (up to 9.4 base in IBM bulletin, 8.1/...

CVE-2019-4210

IBM QRadar SIEM 7.3.2 could allow a user to bypass authentication exposing certain functionality which could lead to information disclosure or modification of application configuration. IBM X-Force ID: 158986...

Security Bulletin: IBM QRadar SIEM is vulnerable to authentication bypass (CVE-2019-4210)

Summary IBM QRadar SIEM is vulnerable to authentication bypass which could lead to disclosure of sensitive information Vulnerability Details CVEID: CVE-2019-4210 Description: IBM QRadar SIEM could allow a user to bypass authentication exposing certain functionality which could lead to information...

Design/Logic Flaw

A potential security vulnerability caused by incomplete obfuscation of application configuration information was discovered in Tommy Hilfiger TH24/7 Android app versions 2.0.0.11, 2.0.1.14, 2.1.0.16, and 2.2.0.19. HP has no access to customer data as a result of this issue...

CVE-2017-2752

A potential security vulnerability caused by incomplete obfuscation of application configuration information was discovered in Tommy Hilfiger TH24/7 Android app versions 2.0.0.11, 2.0.1.14, 2.1.0.16, and 2.2.0.19. HP has no access to customer data as a result of this issue...

[SECURITY] Fedora 27 Update: iniparser-4.0-7.20160821git.fc27

iniParser is an ANSI C library to parse "INI-style" files, often used to hold application configuration information...

CVE-2018-5235

Norton Utilities prior to 16.0.3.44 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the application is configured, it will...

Cisco Unified Communications Domain Manager Remote Code Execution Vulnerability

A vulnerability in Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to bypass security protections, gain elevated privileges, and execute arbitrary code. The vulnerability is due to insecure key generation during application configuration. An attacker...

HPSBGN03577 rev 1 - Exposure of Application Configuration Details - Tommy Hilfiger TH24/7 Android app

Potential Security Impact Information exposure of application configuration. Reported By: Akshay Jain VULNERABILITY SUMMARY A potential security vulnerability caused by incomplete obfuscation of application configuration information was discovered. HP has no access to customer data as a result of...

CVE-2017-7222

A cross-site scripting XSS vulnerability in MantisBT before 2.1.1 allows remote attackers to inject arbitrary HTML or JavaScript if MantisBT's CSP settings permit it by modifying 'windowtitle' in the application configuration. This requires privileged access to MantisBT configuration management...

CVE-2014-0005

CVE-2014-0005 affects PicketBox/JBossSX used in Red Hat JBoss EAP 6.2.2 and JBoss BRMS before 6.0.3 roll up patch 2; the issue allows remote authenticated users to read/modify the application server configuration and state by deploying a crafted application. The NVD notes a LOW (3.6) base score w...

HybridAuth install.php PHP Code Execution

This module exploits a PHP code execution vulnerability in HybridAuth versions 2.0.9 to 2.2.2. The install file 'install.php' is not removed after installation allowing unauthenticated users to write PHP code to the application configuration file 'config.php'. Note: This exploit will overwrite th...

PHP-Nuke Error Manager Module 2.1 error.php language Variable Path Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/9911/info It has been reported that Error Manager is prone to multiple vulnerabilities. These issues are due to failure to validate user input, failure to handle exceptional conditions and simple design errors. These issu...

Code injection

Unspecified vulnerability in the Diagnostics SMD agent in SAP Solution Manager allows remote attackers to obtain sensitive information, modify the configuration of applications, and install or remove applications via vectors involving the P4 protocol...

Zend-Framework - Full Information Disclosure

Zend-Framework - Full Information Disclosure Exploit Title : Zend-Framework Full Info Disclosure Google Dork : inurl:/application/configs/application.ini Date : 26/11/2013 Exploit Author : Ariel Orellana Vendor Homepage : http://framework.zend.com/ Category : Web applications Tested on : GNU/Linu...