110 matches found
CVE-2020-10783
Red Hat CloudForms 4.7 and 5 is affected by a role-based privilege escalation flaw. An attacker with EVM-Operator group can perform actions restricted only to EVM-Super-administrator group, leads to, exporting or importing administrator files...
Privilege escalation
Red Hat CloudForms 4.7 and 5 is affected by a role-based privilege escalation flaw. An attacker with EVM-Operator group can perform actions restricted only to EVM-Super-administrator group, leads to, exporting or importing administrator files...
openSUSE Security Update : phpMyAdmin (openSUSE-2019-2599)
This update for phpMyAdmin fixes the following issues : phpMyAdmin was updated to 4.9.2 : - CVE-2019-18622: SQL injection in Designer feature boo1157614 - Fixes for 'Failed to set session cookie' error - Advisor with MySQL 8.0.3 and newer - Fix PHP deprecation errors - Fix a situation where...
Arbitrary file deletion
There was a local file disclosure vulnerability in Confluence Server and Confluence Data Center via page exporting. An attacker with permission to editing a page is able to exploit this issue to read arbitrary file on the server under /confluence/WEB-INF directory, which may contain configuration...
CVE-2019-3394
There was a local file disclosure vulnerability in Confluence Server and Confluence Data Center via page exporting. An attacker with permission to editing a page is able to exploit this issue to read arbitrary file on the server under /confluence/WEB-INF directory, which may contain configuration...
CVE-2019-3394
CVE-2019-3394 affects Atlassian Confluence Server/Data Center: a local file disclosure in the page export feature allows an authenticated attacker with page-edit permission to read arbitrary files under the Confluence install directory (notably /confluence/WEB-INF). Impact could include leakage o...
CVE-2019-3394: Improper Limitation of a Pathname to a Restricted Directory
There was a local file disclosure vulnerability in Confluence Server and Confluence Data Center via page exporting. An attacker with permission to editing a page is able to exploit this issue to read arbitrary file on the server under /confluence/WEB-INF directory, which may contain configuration...
PT-2019-16553
Name of the Vulnerable Software and Affected Versions Confluence Server versions 6.1.0 through 6.6.15 Confluence Server versions 6.7.0 through 6.13.6 Confluence Server versions 6.14.0 through 6.15.7 Confluence Data Center versions 6.1.0 through 6.6.15 Confluence Data Center versions 6.7.0 through...
Information disclosure
IBM QRadar SIEM 7.2 and 7.3 could allow a local user to obtain sensitive information when exporting content that could aid an attacker in further attacks against the system. IBM X-Force ID: 156563...
CVE-2019-11019
Lack of authentication in case-exporting components in DDRT Dashcom Live through 2019-05-08 allows anyone to remotely access all claim details by visiting easily guessable exportpdf/allclaimdetail.php?claimid= URLs...
openSUSE Security Update : libreoffice (openSUSE-2018-941)
This update for libreoffice to 6.0.5.2 fixes the following issues : Security issues fixed : - CVE-2018-10583: An information disclosure vulnerability occurs during automatic processing and initiating an SMB connection embedded in a malicious file, as demonstrated by...
Security Bulletin: Insufficient authorization check for project actions in IBM Business Process Manager (CVE-2014-4844)
Summary By using IBM Business Process Manager BPM you can import and export process applications and toolkits. Although this functionality is available only to authorized users, the actual server side code accepts requests from lower privileged users. Vulnerability Details CVE ID: CVE-2014-4844...
Code injection
Etherpad 1.5.x and 1.6.x before 1.6.4 allows an attacker to export all the existing pads of an instance without knowledge of pad names...
Samsung SRN-1670D Web Viewer Version 1.0.0.193 Arbitrary File Read and Upload
Samsung NVR Recorder SRN-1670D is a high performance network video recorder. An arbitrary file upload vulnerability was found in the Web Viewer component, which could allow an authenticated user to upload a PHP payload to get code execution. Recent assessments: jvazquez-r7 at September 12, 2019...
[SECURITY] Fedora 26 Update: rawtherapee-5.2-2.fc26
Rawtherapee is a RAW image processing software. It gives full control over many parameters to enhance the raw picture before finally exporting it to some common image format...
Insight into Installed Apps Widget
XenMobile Dashboard provides different widgets which help admins to view useful information at a glance. Other than just viewing the summary that appears in form of graphs, admins can also export the complete set of data as a CSV file to view the details. Installed Apps widget is one of the very...
Google Chrome View Notifications
The vulnerability of Google Chrome arises from the inability to process notifications displayed when changing the exported images. Exploiting this vulnerability allows a malicious actor to view unauthorized notifications through a specially crafted HTML page...
Design/Logic Flaw
A vulnerability in exporting functions of the user interface for Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to view file directory listings and download files. Affected Products: Cisco Prime Collaboration Assurance software versions 11.0, 11.1, and 11.5 are...
[SECURITY] Fedora 22 Update: gd-2.1.1-3.fc22
The gd graphics library allows your code to quickly draw images complete with lines, arcs, text, multiple colors, cut and paste from other images, and flood fills, and to write out the result as a PNG or JPEG file. This is particularly useful in Web applications, where PNG and JPEG are two of the...
