Authentication flaw

Improper authentication vulnerability in SCT-40CM01SR and AT-40CM01SR allows an attacker to bypass access restriction and execute an arbitrary command via telnet...

PT-2021-5561

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 91.0.4472.77 Description The issue is related to insufficient policy enforcement in the content security policy of Google Chrome, which can be exploited by a remote attacker to bypass the existing access...

CVE-2021-3512

Improper access control vulnerability in Buffalo broadband routers BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and prior, WHR-G301N firmware Ver.1.86 and...

CVE-2021-20633

Improper access control vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the date of Cabinet via unspecified vectors...

Improper access control

Improper access control vulnerability in Custom App of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the date of Custom App via unspecified vectors...

CVE-2020-5545: Undefined Security Weakness

TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to bypass access restriction and to stop the network functions or execute malware via a specially crafted packet...

CVE-2019-5955

The CVE-2019-5955 issue concerns the CREATE SD official App for Android (version 1.0.2 and earlier). The root cause is an improper access control vulnerability (CWE-284) in how the app handles Intents, enabling a remote attacker to craft an interaction that directs a user to an arbitrary URL. Thi...

CVE-2019-5955

CREATE SD official App for Android version 1.0.2 and earlier allows remote attackers to bypass access restriction to lead a user to access an arbitrary website via vulnerable application and conduct phishing attacks...

Security Bulletin: Vulnerability in Enterprise Networking Operating System (ENOS) affects IBM Flex System Networking Switch Products (CVE-2017-3765)

Summary IBM Flex System Networking Switch Products have addressed the following vulnerability in Enterprise Networking Operating System ENOS. Vulnerability Details Summary IBM Flex System Networking Switch Products have addressed the following vulnerability in Enterprise Networking Operating Syst...

CVE-2017-10833

"Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows remote attackers to bypass access restriction to view information or modify configurations via unspecified vectors...

PT-2015-1224

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader affected versions not specified Description The issue arises from the interaction with the JavaScript API, potentially allowing a remote attacker to bypass current access restriction rules. Recommendations At the moment,...

PT-2015-1227

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader affected versions not specified Description The issue arises from the interaction with the JavaScript API, potentially allowing a remote attacker to bypass current access restriction rules. Recommendations At the moment,...

PT-2015-1223

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader affected versions not specified Adobe Acrobat affected versions not specified Description The issue arises from the interaction with the JavaScript API, potentially allowing a remote attacker to bypass current access...

PT-2015-1226

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader affected versions not specified Adobe Acrobat affected versions not specified Description The issue arises from the interaction with the JavaScript API, potentially allowing a remote attacker to bypass current access...

PT-2015-1218

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader affected versions not specified Description The issue arises when handling JavaScript API, potentially allowing a remote attacker to bypass current access restriction rules. Recommendations At the moment, there is no...