loc.gov Improper Access Control vulnerability

Open Bug Bounty ID: OBB-700401 Description| Value ---|--- Affected Website:| loc.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| hidden unti...

faringdontowncouncil.gov.uk Improper Access Control vulnerability

Open Bug Bounty ID: OBB-695908 Description| Value ---|--- Affected Website:| faringdontowncouncil.gov.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3...

CVE-2018-1000805

Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity...

DEBIAN-CVE-2018-17456

Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing of a recursive "git clone" of a superproject if a .gitmodules file has a URL field beginning with a '-' character...

185.62.238.82 Improper Access Control vulnerability

Open Bug Bounty ID: OBB-682815 Description| Value ---|--- Affected Website:| 185.62.238.82 Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| hidde...

universitas21.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-681045 Description| Value ---|--- Affected Website:| universitas21.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

CVE-2018-6503

A potential Access Control vulnerability has been identified in ArcSight Management Center ArcMC in all versions prior to 2.81. This vulnerability could be exploited to allow for vulnerable Access Controls...

CVE-2018-6504 MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability

A potential Cross-Site Request Forgery CSRF vulnerability has been identified in ArcSight Management Center ArcMC in all versions prior to 2.81. This vulnerability could be exploited to allow for Cross-Site Request Forgery CSRF...

CVE-2018-6500 MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability

A potential Directory Traversal Security vulnerability has been identified in ArcSight Management Center ArcMC in all versions prior to 2.81. This vulnerability could be remotely exploited to allow Directory Traversal...

CVE-2018-6503: Undefined Security Weakness

A potential Access Control vulnerability has been identified in ArcSight Management Center ArcMC in all versions prior to 2.81. This vulnerability could be exploited to allow for vulnerable Access Controls...

Intel OpenVINO Toolkit for Windows Privilege License and Access Control Issues Vulnerability

Intel OpenVINO Toolkit for Windows is a Windows-based toolkit for developing multi-platform computer vision solutions from Intel. Intel OpenVINO Toolkit for Windows is vulnerable to a privilege permission and access control issue. An attacker could exploit this vulnerability to execute code using...

aiesec.nl Improper Access Control vulnerability

Open Bug Bounty ID: OBB-675520 Description| Value ---|--- Affected Website:| aiesec.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

forums.fogproject.org Improper Access Control vulnerability

Open Bug Bounty ID: OBB-673655 Description| Value ---|--- Affected Website:| forums.fogproject.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

Samsung Email Privilege Access Control Vulnerability

Samsung Email is an application from Samsung South Korea for sending, receiving and managing e-mail. A privilege=access control vulnerability exists in the handling of EML files in Samsung Email, which stems from the program failing to properly validate user-submitted data. The vulnerability can ...

CVE-2018-16142

PHPOK 4.8.278 has a Reflected XSS vulnerability in framework/www/logincontrol.php via the back parameter to the okf function...

Remote Control Vulnerability in HOLLYWOOD LE5109L PLCs

HOLLIS Group is a professional automation company integrating R&D, production, sales and technical service. A remote control vulnerability exists in the HELISE LE5109L PLC, which can be exploited by an attacker to cause the PLC to be remotely controlled by constructing specific private protocol...

Remote Control Vulnerability in Haiwell C10S0R(-e) PLCs

C10S0R-e PLC is a product in the programmable logic controller PLC series of Xiamen Haiwei Technology Co. The Haiwell C10S0R-e PLC suffers from a remote control vulnerability, which can be exploited by an attacker to control PLC startup and stopping via unauthorized construction of specific netwo...

The vulnerability of the API components of Sun ZFS Storage Appliance Kit allows a hacker to gain full control over the application.

The vulnerability of the API framework components of the Sun ZFS Storage Appliance Kit AK is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to gain full control over the application...

The vulnerability of the Product Diagnostic Tools component of the Order Management system allows a perpetrator to gain full control over the application.

The vulnerability of the Product Diagnostic Tools component in the Order Management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the application...

Remote Control Vulnerability in Hologic PLC FCS

HOLLIS Group is a professional automation company integrating R&D, production, sales and technical service. A remote control vulnerability exists in the Hologic PLC FCS, which can be exploited by an attacker to arbitrarily control the FCS by sending constructed packets that conform to a private...