100tb.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-712337 Description| Value ---|--- Affected Website:| 100tb.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| hidden...

Access control error vulnerability in discuz v3.2

Discuz! is a very popular Web forum program in the Chinese community. An access control error vulnerability exists in discuz v3.2. An attacker can exploit this vulnerability to compromise the confidentiality and availability of the program...

Google Android Easel Component Permission License and Access Control Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Easel is a component. An elevation vulnerability exists in the Easel component of Android. A local attacker can exploit this vulnerability to elevate privileges write out...

SUSE-SU-2018:3996-1 Security update for rubygem-activejob-5_1

This update for rubygem-activejob-51 fixes the following issues: Security issue fixed: - CVE-2018-16476: Fixed broken access control vulnerability bsc1117632...

loc.gov Improper Access Control vulnerability

Open Bug Bounty ID: OBB-700401 Description| Value ---|--- Affected Website:| loc.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| hidden unti...

faringdontowncouncil.gov.uk Improper Access Control vulnerability

Open Bug Bounty ID: OBB-695908 Description| Value ---|--- Affected Website:| faringdontowncouncil.gov.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3...

CVE-2018-1000805

Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity...

DEBIAN-CVE-2018-17456

Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing of a recursive "git clone" of a superproject if a .gitmodules file has a URL field beginning with a '-' character...

185.62.238.82 Improper Access Control vulnerability

Open Bug Bounty ID: OBB-682815 Description| Value ---|--- Affected Website:| 185.62.238.82 Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| hidde...

universitas21.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-681045 Description| Value ---|--- Affected Website:| universitas21.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

CVE-2018-6503

A potential Access Control vulnerability has been identified in ArcSight Management Center ArcMC in all versions prior to 2.81. This vulnerability could be exploited to allow for vulnerable Access Controls...

CVE-2018-6504 MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability

A potential Cross-Site Request Forgery CSRF vulnerability has been identified in ArcSight Management Center ArcMC in all versions prior to 2.81. This vulnerability could be exploited to allow for Cross-Site Request Forgery CSRF...

CVE-2018-6500 MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability

A potential Directory Traversal Security vulnerability has been identified in ArcSight Management Center ArcMC in all versions prior to 2.81. This vulnerability could be remotely exploited to allow Directory Traversal...

Intel OpenVINO Toolkit for Windows Privilege License and Access Control Issues Vulnerability

Intel OpenVINO Toolkit for Windows is a Windows-based toolkit for developing multi-platform computer vision solutions from Intel. Intel OpenVINO Toolkit for Windows is vulnerable to a privilege permission and access control issue. An attacker could exploit this vulnerability to execute code using...

aiesec.nl Improper Access Control vulnerability

Open Bug Bounty ID: OBB-675520 Description| Value ---|--- Affected Website:| aiesec.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

forums.fogproject.org Improper Access Control vulnerability

Open Bug Bounty ID: OBB-673655 Description| Value ---|--- Affected Website:| forums.fogproject.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

Samsung Email Privilege Access Control Vulnerability

Samsung Email is an application from Samsung South Korea for sending, receiving and managing e-mail. A privilege=access control vulnerability exists in the handling of EML files in Samsung Email, which stems from the program failing to properly validate user-submitted data. The vulnerability can ...

CVE-2018-16142

PHPOK 4.8.278 has a Reflected XSS vulnerability in framework/www/logincontrol.php via the back parameter to the okf function...

Remote Control Vulnerability in HOLLYWOOD LE5109L PLCs

HOLLIS Group is a professional automation company integrating R&D, production, sales and technical service. A remote control vulnerability exists in the HELISE LE5109L PLC, which can be exploited by an attacker to cause the PLC to be remotely controlled by constructing specific private protocol...

Remote Control Vulnerability in Haiwell C10S0R(-e) PLCs

C10S0R-e PLC is a product in the programmable logic controller PLC series of Xiamen Haiwei Technology Co. The Haiwell C10S0R-e PLC suffers from a remote control vulnerability, which can be exploited by an attacker to control PLC startup and stopping via unauthorized construction of specific netwo...