13416 matches found
Business Logic Errors
microweber/microweber is vulnerable to business logic errors. The vulnerability exists in updatecart function of CartManager.php due to missing validations which allows an attacker to exploit the flaw...
CmActLicense Component Rename Files
The vulnerability of the CmActLicense component in the CodeMeter license management application is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to rename arbitrary files remotely...
ROS-2-708
2.708 Vulnerability in Mozilla Thunderbird email client CVE-2021-29970, CVE-2021-30547, CVE-2021-29976, CVE-2021-29969. 1. Vulnerability Description: CVE-2021-29970 Vulnerability in Mozilla Thunderbird email client, related to HTML content processing error. Exploitation of the vulnerability could...
CVE-2022-0746
Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0...
UBUNTU-CVE-2022-0746
Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0...
CVE-2022-0746
Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0...
CVE-2022-0746
Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0...
CVE-2022-0746 Business Logic Errors in dolibarr/dolibarr
Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0...
CVE-2022-0746 Business Logic Errors in dolibarr/dolibarr
Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0...
CVE-2022-0746
Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0...
CVE-2022-0746
CVE-2022-0746 affects dolibarr/dolibarr prior to 16.0 and is described as a business-logic error. Connected records (GHSA-8VQ6-5F66-HP3R) indicate that, prior to 16.0, low-privilege users could update their login name, which should be admin-only. The provided documents do not specify a concrete e...
EulerOS 2.0 SP10 : kernel (EulerOS-SA-2022-1227)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with...
CVE-2022-0746: Undefined Security Weakness
Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0...
ImageMagick code issue vulnerability (CNVD-2022-18008)
Imagemagick Studio ImageMagick is a set of open source image processing software from the American company ImageMagick Studio Imagemagick Studio. The software can read, convert, or write images in a variety of formats.ImageMagick has a security vulnerability that stems from a null pointer...
Microsoft Dynamics GP Information Presentation Error
The vulnerability of the software package for accounting or resource planning of Microsoft Dynamics GP involves information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...
Windows DWM Core Library Privilege Escalation
The vulnerability of the Windows DWM Core Library in operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to gain increased privileges...
Microsoft Edge Information Disclosure
The vulnerability of Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform spear-phishing attacks remotely...
Windows Common Log File System Driver Privilege Escalation
The vulnerability of the Windows Common Log File System Driver in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to gain increased privileges...
Microsoft SharePoint Server Spoofing
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Server Subscription Edition packages is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform a...
Windows Print Spooler Privilege Escalation
The vulnerability of the Windows Print Spooler in operating systems related to the print queue is associated with security configuration errors. Exploiting this vulnerability can allow attackers to gain increased privileges...