5606 matches found
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016. Notes: none...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2014. Notes: none...
CVE-2019-12264: Improper Neutralization of Argument Delimiters in a Command
Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component...
CVE-2017-18392
cPanel before 68.0.15 allows collisions because PostgreSQL databases can be assigned to multiple accounts SEC-325...
Code injection
cPanel before 68.0.15 allows collisions because PostgreSQL databases can be assigned to multiple accounts SEC-325...
Unauthorized Modification
moodle is vulnerable to unauthorized modification. The vulnerability is possible because it does not observe separate groups mode before overriding assignment group, allowing teachers in an assignment group to modify group overrides...
CVE-2018-20936: Incorrect Permission Assignment for Critical Resource
cPanel before 68.0.27 allows attackers to read the SRS secret via exim.conf SEC-308...
CVE-2018-20906: Incorrect Permission Assignment for Critical Resource
cPanel before 71.9980.37 allows attackers to make API calls that bypass the images feature restriction SEC-430...
CVE-2018-20907: Incorrect Permission Assignment for Critical Resource
cPanel before 71.9980.37 does not enforce the Mime::listhotlinks API feature restriction SEC-432...
Design/Logic Flaw
A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Teachers in an assignment group could modify group overrides for other groups in the same assignment...
CVE-2019-10189
A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Teachers in an assignment group could modify group overrides for other groups in the same assignment...
UBUNTU-CVE-2019-10189
A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Teachers in an assignment group could modify group overrides for other groups in the same assignment...
CVE-2019-10189
CVE-2019-10189 affects Moodle prior to 3.7.1, 3.6.5, and 3.5.7. The vulnerability is an improper access control vulnerability where teachers in an assignment group can modify group overrides for other groups within the same assignment. The description only states the existence and affected versio...
CVE-2019-10189: Improper Access Control
A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Teachers in an assignment group could modify group overrides for other groups in the same assignment...
VxWorks 6.9.x < 6.9.4.12 / 7 (SR540) / 7 (SR610) Multiple Vulnerabilities (URGENT/11)
Binary data 701083.prm...
CVE-2018-2024: Incorrect Permission Assignment for Critical Resource
IBM QRadar SIEM 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 155350...
PT-2019-6408 · Oracle +6 · Mysql Server +5
Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.16 and prior Description: The issue is related to incorrect privilege assignment in the MySQL Server component of Oracle MySQL, allowing a high-privileged attacker with network access via multiple protocols to...
The vulnerability of the ZebOS component of the FortiOS operating system, which allows a hacker to modify routing settings
The vulnerability of the ZebOS component of the FortiOS operating system is related to the improper assignment of privileges. Exploiting this vulnerability allows a malicious actor to remotely modify routing settings...
Security Bulletin: An IBM QRadar SIEM protocol is vulnerable to Incorrect Permission Assignment (CVE-2018-2024)
Summary The Log file protocol could allow permissions to a resource to be read or modified by unintended actors. Vulnerability Details CVEID: CVE-2018-2024 Description: IBM QRadar specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by...