CVE-2022-32277

Squiz Matrix CMS 6.20 is vulnerable to an Insecure Direct Object Reference caused by failure to correctly validate authorization when submitting a request to change a user's contact details. NOTE: this is disputed by both the vendor and the original discoverer because it is a site-specific findin...

CVE-2022-25625

A malicious unauthorized PAM user can access the administration configuration data and change the values...

CVE-2022-30229

CVE-2022-30229 affects Siemens SICAM GridEdge (Classic) and related variants prior to v2.6.6, where the product does not require authentication for privileged functions. An unauthenticated attacker could alter user data (e.g., credentials) if the user ID is known. The CVSS details in public recor...

CVE-2022-30229

A vulnerability has been identified in SICAM GridEdge Classic All versions V2.6.6. The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to change data of a user, such as credentials, in case that user's id is known...

WordPress 跨站请求伪造漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the WordPress MouseWheel Smooth Scroll plugin in versions...

Cybozu Remote Service Operation Restriction Bypass Vulnerability

Cybozu Remote Service is a remote service management software used to access Cybozu's internal systems. a bypass vulnerability exists in the Cybozu Remote Service management interface. A remote authenticated attacker can use this vulnerability to change the data in the management interface...

CVE-2021-20764

Improper input validation vulnerability in Attaching Files of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to alter the data of Attaching Files...

Cybozu Garoon Bulletin Operational Restriction Bypass Vulnerability

An operational restriction bypass vulnerability exists in Bulletin in Cybozu Garoon, a portal-based OA office system of Cybozu Japan. An attacker can use this vulnerability to change the data in the bulletin without proper privileges...

Cybozu Garoon User Profile Incorrect Input Validation Vulnerability

A security vulnerability exists in the User Profile of Cybozu Garoon, a portal-based OA office system from Cybozu Japan. An attacker can use this vulnerability to change data in the user profile without proper privileges...

Cybozu Garoon E-mail Operation Restriction Bypass Vulnerability

An operational restriction bypass vulnerability exists in e-mail in Cybozu Garoon, a portal-based OA office system of Cybozu Japan. An attacker can use this vulnerability to change e-mail data without proper privileges...

Cybozu Garoon 输入验证错误漏洞

A security vulnerability exists in the User Profile of Cybozu Garoon, a portal-based OA office system from Cybozu Japan. An attacker can use this vulnerability to change data in the user profile without proper privileges...

Unspecified Vulnerability in Oracle Hyperion Lifecycle Management Shared Services

Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications. The software provides financial settlement, report production and other functions. Oracle Hyperion Lifecycle Management Shared Services version 11.1.2.4 contains a security vulnerability that coul...

OpenJDK: Certificate blacklist bypass via alternate certificate encodings (Libraries, 8237995)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multipl...

Unspecified Vulnerability in Oracle Java SE and Oracle Java SE Embedded (CNVD-2020-61053)

Oracle Java SE and Oracle Java SE Embedded are both products of Oracle Corporation.Oracle Java SE is a Java platform for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments.Oracle Java SE Embedded is a Java platform that targets Java...

CVE-2020-14832

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Integration Broker. Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

Unspecified Vulnerability in Oracle Supply Chain AutoVue

Oracle AutoVue is a multi-purpose, multi-functional graphic browsing, annotation, collaborative work applications from Oracle. A security vulnerability exists in Oracle Supply Chain AutoVue, which can be exploited by an attacker to unauthorizedly update, insert, or delete data, affecting the...

The vulnerability of the Media Foundation component in Windows operating systems allows attackers to enhance their privileges or gain access to modify, add, or delete data.

The vulnerability of the Media Foundation component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges or gain access to modify, add, or delete data...

Unspecified Vulnerability in Oracle E-Business Suite Installed Base Component

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. installed Base is one of the installation base...

CVE-2018-7111

A remote unauthorized access vulnerability was identified in HPE UIoT versions 1.5, 1.4.0, 1.4.1, 1.4.2, 1.2.4.2. Specifically, there is a malfunction identified in some section of the DSM portal and some DSM APIs. The impact of the malfunction is that the info can be changed by other users...

CVE-2017-17708

Because of insufficient authorization checks it is possible for any authenticated user to change profile data of other users in Pleasant Password Server before 7.8.3...