V-Zug Combi-Steam MSLQ Authorization Issue Vulnerability (CNVD-2019-42365)

The V-Zug Combi-Steam MSLQ is an all-in-one microwave, oven, and steam machine unit from Swiss Swiss V-Zug. An authorization issue vulnerability exists in the V-Zug Combi-Steam MSLQ using firmware versions prior to Ethernet R07 and firmware versions prior to WLAN R05. The vulnerability stems from...

Juniper Networks Junos OS Authorization Issues Vulnerability (CNVD-2019-41474)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. An authorization issue vulnerability exists in Juniper Networks Junos OS. The vulnerability stems from a lack of...

CVE-2019-5231

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.186C00E180R2P1 have an improper authorization vulnerability. The software incorrectly performs an authorization check when a user attempts to perform certain action. Successful exploit could allow the attacker to update a crafted package...

CVE-2019-3764

Dell EMC iDRAC7 versions prior to 2.65.65.65, iDRAC8 versions prior to 2.70.70.70 and iDRAC9 versions prior to 3.36.36.36 contain an improper authorization vulnerability. A remote authenticated malicious iDRAC user with low privileges may potentially exploit this vulnerability to obtain sensitive...

CVE-2019-3764

Dell EMC iDRAC7 versions prior to 2.65.65.65, iDRAC8 versions prior to 2.70.70.70 and iDRAC9 versions prior to 3.36.36.36 contain an improper authorization vulnerability. A remote authenticated malicious iDRAC user with low privileges may potentially exploit this vulnerability to obtain sensitive...

CVE-2019-3764

Dell EMC iDRAC7 (versions <2.65.65.65), iDRAC8 (<2.70.70.70), and iDRAC9 (

Red Hat Wildfly wildfly-core Authorization Issues Vulnerability

Red Hat Wildfly is the United States Red Hat Red Hat a lightweight JavaEE-based open source application server . wildfly-core is Wildfly use a core runtime program . An authorization issue vulnerability exists in Red Hat wildfly-core versions prior to 7.2.5.GA. The vulnerability stems from a lack...

Oracle Primavera P6 Enterprise Project Portfolio Management (EPPM) Multiple Vulnerabilities (Oct 2019 CPU)

According to its self-reported version number, the Oracle Primavera P6 Enterprise Project Portfolio Management EPPM installation running on the remote web server is 15.x prior to 15.2.18.7, 16.x prior to 16.2.19.1, 17.x prior to 17.12.15.0, or 18.8.x prior to 18.8.14.0. It is, therefore, affected...

Oracle E-Business Suite Field Service Wireless Component Authorization Issue Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. field Service formerly known as...

cPanel Authorization Issues Vulnerability (CNVD-2019-36125)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An authorization issue vulnerability exists in cPanel. An attacker can exploit this vulnerability to transform set weak domlog...

cPanel Authorization Issues Vulnerability (CNVD-2019-36124)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An authorization issue vulnerability exists in cPanel. An attacker can exploit this vulnerability to create the cpdavderrorlog fi...

IBM Security Guardium Authorization Issues Vulnerability

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. An authorization issue vulnerability exists in IBM Security Guardium...

SilverStripe License Issues Vulnerabilities

SilverStripe is New Zealand SilverStripe company's set of open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . An authorization issue vulnerability exists in SilverStripe 4.3.3 and earlier versions...

Couchbase Server Authorization Issues Vulnerability

Couchbase Server is a distributed open source NoSQL non-relational database from the U.S. company Couchbase , which mainly supports data query , full-text search and active global replication and other functions . An authorization issue vulnerability exists in Couchbase Server 5.0 and prior...

Moodle Authorization Issues Vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. An authorization issue vulnerability exists in Moodle, which can be exploited by an attacker to gain access to the Teacher role...

F5 BIG-IQ Centralized Management Authorization Issues Vulnerability

F5 BIG-IQ Centralized Management is a software-based cloud management solution from F5 USA. The solution supports the deployment of application delivery and network services across public and private clouds, traditional data centers and hybrid environments. An authorization issue vulnerability...

Advantech WebAccess Authorization Issues Vulnerability (CNVD-2019-32470)

Advantech WebAccess is a set of HMI/SCADA software based on browser architecture from Advantech, Taiwan, China. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. An authorization issue vulnerability exists...

CVE-2019-6838

CVE-2019-6838 describes an Incorrect Authorization (CWE-863) vulnerability in U.motion Server family (MEG6501-0001, MEG6501-0002, MEG6260-0410, MEG6260-0415, Touch 10/15). A user with low privileges could delete a critical file via network access. The vulnerability is documented across multiple s...

CVE-2019-6836

CVE-2019-6836 describes a CWE-863: Incorrect Authorization vulnerability in Schneider Electric U.motion Server family (MEG6501-0001 – U.motion KNX server, MEG6501-0002 – U.motion KNX Server Plus, MEG6260-0410 – U.motion KNX Server Plus, Touch 10, MEG6260-0415 – U.motion KNX Server Plus, Touch 15)...

ICSA-19-253-02 Siemens SINETPLAN

1. EXECUTIVE SUMMARY CVSS v3 8.0 ATTENTION: Low skill level to exploit Vendor: Siemens Equipment: Siemens Network Planner SINETPLAN Vulnerability: Improper Authorization 2. RISK EVALUATION Successful exploitation of this vulnerability could allow information disclosure, code execution, and...