NPM: Auth.js SDK has Improper Permission Checking

NPM: Auth.js SDK has Improper Permission Checking vulnerability discovered by ? in WordPress Npm auth0-js versions = 8.11.0, = 9.32.0...

Input validation

Improper permission or value checking in the CLI console may allow a non-privileged user to obtain Fortinet FortiOS plaint text private keys of system's builtin local certificates via unsetting the keys encryption password in FortiOS 6.2.0, 6.0.0 to 6.0.6, 5.6.10 and below or for user uploaded...

PT-2019-4459

Name of the Vulnerable Software and Affected Versions FortiOS versions 5.6.10 and below FortiOS versions 6.0.0 through 6.0.6 FortiOS version 6.2.0 FortiOS version 6.2.1 Description The issue is related to improper permission or value checking in the CLI console, which may allow a non-privileged...

CVE-2017-5618

GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions...

PT-2015-7816

Name of the Vulnerable Software and Affected Versions Token Insert Entity module versions 7.x-1.x before 7.x-1.1 for Drupal Description The issue allows remote authenticated users with certain permissions to bypass intended access restrictions and possibly obtain sensitive information by insertin...

PT-2015-6945

Name of the Vulnerable Software and Affected Versions Entityform Block module versions 7.x-1.x through 7.x-1.2 Description The issue allows remote attackers to obtain access to certain entityforms due to improper permission checking when a form is locked to a role. Recommendations For Entityform...

PT-2015-4251

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.18 Description The issue allows remote authenticated users to obtain sensitive information about restricted issues due to improper permission checking when sending an email about related monitored issues...

PT-2014-5541

Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 5.0.16 ownCloud Server versions 6.0.x prior to 6.0.3 Description The issue allows remote authenticated users to read the names of files of other users by leveraging access to multiple accounts, due to improper...

PT-2014-5639

Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 6.0.1 Description The issue allows remote authenticated users to access arbitrary preview pictures due to improper permission checking. Recommendations For ownCloud Server versions prior to 6.0.1, update to...

PT-2014-5546

Name of the Vulnerable Software and Affected Versions TinyMCE Color Picker plugin versions prior to 1.2 Description The issue concerns improper permission checking, which allows remote attackers to modify plugin settings. Recommendations For versions prior to 1.2, update to version 1.2 or later t...

PT-2014-3255

Name of the Vulnerable Software and Affected Versions Invitation module versions 7.x-2.x Description The issue allows remote attackers to obtain sensitive information due to improper permission checking. Recommendations For Invitation module versions 7.x-2.x, update the module to a version that...

PT-2012-6038

Name of the Vulnerable Software and Affected Versions Email Field module versions 6.x-1.x before 6.x-1.3 for Drupal Description The issue allows remote attackers to email the stored address via unspecified vectors when the field contact field formatter is set to the full or teaser display mode an...

PT-2012-5437

Name of the Vulnerable Software and Affected Versions The Monthly Archive by Node Type module version 6.x for Drupal Description The issue is related to improper permission checking by the module, allowing remote attackers to access restricted nodes. Recommendations For The Monthly Archive by Nod...

PT-2012-4756

Name of the Vulnerable Software and Affected Versions Condor versions 7.6.x through 7.6.9 Condor versions 7.8.x through 7.8.3 Description The issue is related to improper permission checking of jobs, allowing remote authenticated users to remove arbitrary idle jobs. Recommendations For Condor...

PT-2012-3777

Name of the Vulnerable Software and Affected Versions Drupal Slidebox module versions prior to 7.x-1.4 Description The issue allows remote attackers to obtain sensitive information due to improper permission checking. Recommendations For versions prior to 7.x-1.4, update to version 7.x-1.4 or lat...