4846 matches found
Mail.ru: Disclosure of personal support email addresses on 'support-fleet.city-mobil.ru'
IDOR vulnerability in support-fleet.city-mobil.ru allowed to disclose the support staff e-mail addresses...
PT-2020-3569
Name of the Vulnerable Software and Affected Versions Red Hat CloudForms versions 4.7 through 5 Description The issue is related to insufficient access control in the CloudForms Management Engine, allowing for insecure direct object references IDOR and functional level access control bypass due t...
Mail.ru: В самокате можно просматривать и изменять данные любого заказа без авторизации
IDOR in smart.space API allowed to change orders and list items of order content...
Lark Technologies: [IDOR] Modify other team's reminders via reminderId parameter
An IDOR Insecure Direct Object Reference vulnerability was found in Larksuite reminders, allowing an attacker to modify any other user's reminder in the POST request via "reminderId" parameter. We thank imrannisar for reporting this vulnerability and confirming its resolution...
UBICOD Medivision Digital Signage 1.5.1 - Authorization Bypass Vulnerability
Exploit for hardware platform in category web applications Title: UBICOD Medivision Digital Signage 1.5.1 - Authorization Bypass Author: LiquidWorm Product web page: http://www.medivision.co.kr CVE: N/A Vendor: UBICOD Co., Ltd. | MEDIVISION INC. Product web page: http://www.medivision.co.kr...
UBICOD Medivision Digital Signage 1.5.1 - Authorization Bypass
Title: UBICOD Medivision Digital Signage 1.5.1 - Authorization Bypass Date: 2020-07-23 Author: LiquidWorm Product web page: http://www.medivision.co.kr CVE: N/A Vendor: UBICOD Co., Ltd. | MEDIVISION INC. Product web page: http://www.medivision.co.kr Affected version: Firmware 1.5.1 2013.01.3...
Atlassian JIRA < 7.13.16 / 8.0.x < 8.5.7 / 8.6.x < 8.9.2 / 8.10.x < 8.10.1 Insecure Direct Object References (IDOR) (JRASERVER-71275)
According to its self-reported version number, the instance of Atlassian JIRA hosted on the remote web server is potentially affected by Insecure Direct Object References IDOR vulnerability. Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view titles of a...
UBICOD Medivision Digital Signage 1.5.1 Privilege Escalation
UBICOD Medivision Digital Signage 1.5.1 Privilege Escalation Through Authorization Bypass Vendor: UBICOD Co., Ltd. | MEDIVISION INC. Product web page: http://www.medivision.co.kr Affected version: Firmware 1.5.1 2013.01.3 Summary: Medivision is a service that provides everything from DID operatio...
Mail.ru: Access to information about any video and its owner via GraphQL endpoint [dictor.mail.ru]
An IDOR vulnerability in dictor.mail.ru allowed to obtain arbitrary video information via direct GraphQL query...
CVE-2020-13923
IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04...
Security feature bypass
IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04...
CVE-2020-13923
IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04...
CVE-2020-13923
CVE-2020-13923 is an IDOR vulnerability in the order processing feature of the ERP/commerce component of Apache OFBiz, affecting versions prior to 17.12.04. The connected CNVD entry characterizes the issue as an input validation error that enables bypassing security restrictions and direct access...
CVE-2020-13923
IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04...
CVE-2020-13923: Authorization Bypass Through User-Controlled Key
IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04...
PT-2020-13783
Name of the Vulnerable Software and Affected Versions Apache OFBiz versions prior to 17.12.04 Description The issue is related to an IDOR vulnerability in the order processing feature of the ecommerce component. This vulnerability may allow unauthorized access or modifications to orders...
Mail.ru: IDOR of contracts on dictor.mail.ru
API endpoint at dictor.mail.ru disclosed e-mails of registered users...
CVE-2020-14174
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view titles of a private project via an Insecure Direct Object References IDOR vulnerability in the Administration Permission Helper. The affected versions are before version 7.13.6, from version 8.0.0 before...
CVE-2020-14174
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view titles of a private project via an Insecure Direct Object References IDOR vulnerability in the Administration Permission Helper. The affected versions are before version 7.13.6, from version 8.0.0 before...
Spoofing
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view titles of a private project via an Insecure Direct Object References IDOR vulnerability in the Administration Permission Helper. The affected versions are before version 7.13.6, from version 8.0.0 before...