CVE-2022-27192

The Reporting module in Aseco Lietuva document management system DVS Avilys before 3.5.58 allows unauthorized file download. An unauthenticated attacker can impersonate an administrator by reading administrative files...

CVE-2022-27192

The Reporting module in Aseco Lietuva document management system DVS Avilys before 3.5.58 allows unauthorized file download. An unauthenticated attacker can impersonate an administrator by reading administrative files...

Design/Logic Flaw

The Reporting module in Aseco Lietuva document management system DVS Avilys before 3.5.58 allows unauthorized file download. An unauthenticated attacker can impersonate an administrator by reading administrative files...

CVE-2022-27192

The issue (CVE-2022-27192) affects the DVS Avilys document management system, specifically the Reporting module, with versions prior to 3.5.58. The underlying flaw allows an unauthenticated attacker to download arbitrary files and impersonate an administrator by reading administrative files. Affe...

CVE-2022-27192

The Reporting module in Aseco Lietuva document management system DVS Avilys before 3.5.58 allows unauthorized file download. An unauthenticated attacker can impersonate an administrator by reading administrative files...

PT-2022-18279 · Dvs · Dvs Avilys

Name of the Vulnerable Software and Affected Versions: DVS Avilys versions prior to 3.5.58 Description: The issue affects the Reporting module in the DVS Avilys document management system, allowing unauthorized file download. An unauthenticated attacker can impersonate an administrator by reading...

dvs-mail.de Improper Access Control vulnerability OBB-2410201

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Weak password vulnerability in NVMS-1000 of Shenzhen Tongwei Digital Technology Co.

NVMS-1000 is a video surveillance management software launched by Shenzhen Tongwei Digital Technology Co., Ltd, which can be used with DVR, NVR, IPC, DVS, decoder and so on. Shenzhen Tongwei Digital Technology Co., Ltd NVMS-1000 suffers from a weak password vulnerability, which can be exploited b...

Verizon Wireless Internal Credentials, Infrastructure Details Exposed in Amazon S3 Bucket

Organizations continue to leak data through publicly accessible Amazon S3 buckets, pointing a harsh finger at continued lax attitudes toward the custodianship of sensitive data. Verizon is the latest business affected by this epidemic, leaking in this case files marked confidential from an intern...

DVS Custom Notification - Cross-Site Request Forgery

The dvs-custom-notification WordPress plugin was affected by a Cross-Site Request Forgery security vulnerability...

CVE-2012-4921

Multiple cross-site request forgery CSRF vulnerabilities in the DVS Custom Notification plugin 1.0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 change application settings or 2 conduct cross-site scripting XSS attacks...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the DVS Custom Notification plugin 1.0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 change application settings or 2 conduct cross-site scripting XSS attacks...

CVE-2012-4921

The CVE-2012-4921 entry concerns the WordPress plugin DVS Custom Notification (versions

CVE-2012-4921

Multiple cross-site request forgery CSRF vulnerabilities in the DVS Custom Notification plugin 1.0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 change application settings or 2 conduct cross-site scripting XSS attacks...

WordPress DVS Custom Notification Plugin <= 1.0.1 - Multiple CSRF and XSS

Because of these vulnerabilities, the attackers can hijack the authentication of administrators for requests that conduct cross-site scripting attacks orchange application settings. Solution Update the plugin...