2579 matches found
CloudBees Jenkins Pipeline Maven Integration Plugin Authorization Issue Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . Pipeline Maven Integration Plugin is used ...
Ubuntu License Issues Vulnerabilities
Ubuntu is a set of GNU/Linux operating systems for desktop applications from the British company Canonical and Ubuntu. An authorization issue vulnerability exists in trust-store in Ubuntu. An attacker could exploit this vulnerability to access restricted locations...
Cisco Webex Meetings Scheduled Meeting Template Creation Vulnerability
Cisco Webex Meetings provides affordable enterprise virtual meeting solutions. A scheduled meeting template creation vulnerability exists in Cisco Webex Meetings versions prior to 40.7.0. The vulnerability stems from insufficient execution of authorization for scheduled meeting template creation...
Cisco SD-WAN vManage Software License Issue Vulnerability (CNVD-2020-44061)
Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. An authorization issue vulnerability exists in the web management interface in Cisco SD-WAN vManage Software. A remote attacker could exploit this vulnerability with a...
Cisco SD-WAN vManage Software License Issue Vulnerability
Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. An authorization issue vulnerability exists in the CLI in Cisco SD-WAN vManage Software that stems from insufficient input validation. A local attacker can exploit the...
SAP Disclosure Management Authorization Issues Vulnerability
SAP Disclosure Management is an automated financial disclosure management system from SAP. The system provides a collaborative financial disclosure process across teams, geographies, systems and data sources. SAP Disclosure Management is vulnerable to authorization issues, and no details of the...
Visma Public: A sales only user can edit the purchase invoice drafts.
The researcher has found a missing authorization issue: a sales only user could edit the purchase invoice drafts that he shouldn't...
CloudBees Jenkins Fortify on Demand Plugin Authorization Issue Vulnerability
CloudBees Jenkins Hudson Labs is a set of Java-based continuous integration tools from CloudBees. The product is mainly used to monitor the continuous software version of the release/testing project and some timed tasks . Fortify on Demand Plugin is used in one of the support for uploading code...
Unspecified Vulnerability in CloudBees Jenkins Zephyr for JIRA Test Management Plugin
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . Zephyr for JIRA Test Management Plugin is used...
PrestaShop Authorization Issues Vulnerability
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. PrestaShop suffers from an authorization issue vulnerability that originates from an...
OpenClinic GA Authorization Issue Vulnerability (CNVD-2021-17443)
OpenClinic GA is an open source hospital information management system. The system supports financial management, clinical management and laboratory management and other functions. An authorization issue vulnerability exists in OpenClinic GA versions 5.09.02 and 5.89.05b, which stems from the...
OpenClinic GA Authorization Issue Vulnerability (CNVD-2021-17438)
OpenClinic GA is an open source hospital information management system. The system supports financial management, clinical management and laboratory management and other functions. An authorization issue vulnerability exists in OpenClinic GA versions 5.09.02 and 5.89.05b, which can be exploited b...
PrestaShop Authorization Issues Vulnerability (CNVD-2020-50514)
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. An authorization issue vulnerability exists in PrestaShop versions after 1.5.0.0 fixe...
OpenClinic GA License Issue Vulnerability
OpenClinic GA is an open source hospital information management system. The system supports financial management, clinical management and laboratory management and other functions. An authorization issue vulnerability exists in OpenClinic GA versions 5.09.02 and 5.89.05b, which can be exploited b...
Atlassian JIRA Server and Data Center Authorization Issues Vulnerability (CNVD-2021-17354)
Atlassian JIRA Server and Atlassian JIRA Data Center are both products of Atlassian Australia.Atlassian JIRA Server is the server version of a defect tracking management system. Atlassian JIRA Server is the server version of a defect tracking management system that is used to track and manage all...
MK-AUTH Authorization Issues Vulnerability
MK-AUTH is an access control system from the Brazilian software developer Pedro Filho. An authorization issue vulnerability exists in the Web login feature in MK-AUTH version 19.01, which can be exploited by an attacker to bypass authentication and gain client privileges...
Mattermost Desktop App Authorization Issue Vulnerability
Mattermost Desktop App is a messaging desktop application from Mattermost USA. An authorization issue vulnerability exists in Mattermost Desktop App versions prior to 4.4.0, which stems from the program failing to properly handle the popup of the HTTP Basic Authentication box and can be exploited...
CVE-2020-13263
An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthorized users to impersonate as a maintainer to perform limited actions...
CVE-2020-13263
CVE-2020-13263 describes an authorization issue in GitLab Enterprise Edition (EE) 9.5 and later through 13.0.1 that could allow unauthorized users to impersonate a project maintainer and perform limited actions. The connected sources consistently identify the vulnerability as an impersonation/mai...
