9398 matches found
CVE-2016-0373
IBM UrbanCode Deploy 6.0 through 6.2.2.1 could allow an authenticated user to read sensitive information due to UCD REST endpoints not properly authorizing users when determining who can read data. IBM X-Force ID: 112119...
CVE-2016-0373: Improper Authorization
IBM UrbanCode Deploy 6.0 through 6.2.2.1 could allow an authenticated user to read sensitive information due to UCD REST endpoints not properly authorizing users when determining who can read data. IBM X-Force ID: 112119...
CVE-2014-6049: Improper Authorization
phpMyFAQ before 2.8.13 allows remote authenticated users with admin privileges to bypass authorization via a crafted instance ID parameter...
CloudBees Jenkins Improper Authorization Vulnerability
CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . An...
CVE-2018-1999047
A improper authorization vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in UpdateCenter.java that allows attackers to cancel a Jenkins restart scheduled through the update center...
Authorization
A improper authorization vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in UpdateCenter.java that allows attackers to cancel a Jenkins restart scheduled through the update center...
CVE-2018-1999047
A improper authorization vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in UpdateCenter.java that allows attackers to cancel a Jenkins restart scheduled through the update center...
PT-2018-15226
Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.137 Jenkins versions 2.121.2 and earlier Description A vulnerability exists due to improper authorization in the UpdateCenter.java file, allowing attackers to cancel a scheduled Jenkins restart through the update...
CVE-2018-1999047: Incorrect Authorization
A improper authorization vulnerability exists in Jenkins 2.137 and earlier, 2.121.2 and earlier in UpdateCenter.java that allows attackers to cancel a Jenkins restart scheduled through the update center...
Improper Authorization in aedes
Versions of aedes before 0.35.1 does not respect its own authorization rules when a client sets a Last Will. Recommendation Update to version 0.35.1 or later...
PT-2018-2663
Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 10.5 PostgreSQL versions prior to 9.6.10 PostgreSQL versions prior to 9.5.14 PostgreSQL versions prior to 9.4.19 PostgreSQL versions prior to 9.3.24 Description The issue is related to errors in authorization withi...
CVE-2018-3778
Improper authorization in aedes version 0.35.0 will publish a LWT in a channel when a client is not authorized...
CVE-2018-3778
Improper authorization in aedes version 0.35.0 will publish a LWT in a channel when a client is not authorized...
CVE-2018-3778
Improper authorization in aedes version 0.35.0 will publish a LWT in a channel when a client is not authorized...
CVE-2018-3778
Improper authorization in aedes version 0.35.0 will publish a LWT in a channel when a client is not authorized...
CVE-2018-3778: Improper Authorization
Improper authorization in aedes version 0.35.0 will publish a LWT in a channel when a client is not authorized...
PT-2018-16989
Name of the Vulnerable Software and Affected Versions NetApp 7-Mode Transition Tool versions prior to 2.0 Description The issue allows users with valid credentials to access functions and information that may have been intended for administrators or privileged users. This occurs because versions...
CVE-2018-12466: Improper Authorization
openSUSE openbuildservice before 9.2.4 allowed authenticated users to delete packages on specific projects with project links...
CVE-2018-0391: Improper Authorization
A vulnerability in the password change function of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to cause the system to become inoperable. The vulnerability is due to insufficient validation of a password change request. An attacker could exploit this...
CVE-2018-12467: Improper Authorization
Authorized users of the openbuildservice before 2.9.4 could delete packages by using a malicious request against projects having the OBS:InitializeDevelPackage attribute, a similar issue to CVE-2018-7689...