33 matches found
CVE-2024-27605
Alldata V0.4.6 is vulnerable to Insecure Permissions. Using users test can query information about the users in the system...
CVE-2024-21665
ecommerce-framework-bundle is the Pimcore Ecommerce Framework Bundle. An authenticated and unauthorized user can access the back-office orders list and be able to query over the information returned. Access control and permissions are not being enforced. This vulnerability has been patched in...
CVE-2022-39030
smart eVision has inadequate authorization for system information query function. An unauthenticated remote attacker, who is not explicitly authorized to access the information, can access sensitive information...
CVE-2022-39030 Smart eVision - Exposure of Sensitive Information to an Unauthorized Actor -2
smart eVision has inadequate authorization for system information query function. An unauthenticated remote attacker, who is not explicitly authorized to access the information, can access sensitive information...
CVE-2022-39030
CVE-2022-39030 affects smart eVision. The vulnerability is an inadequate authorization issue for the system information query function, allowing an unauthenticated remote attacker to access sensitive information. CVSSv3.1 base score 7.5 (HIGH) with network attack vector, low complexity, no privil...
Oracle Hyperion BI+ IQR Access Control Error Vulnerability
Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications. The software provides financial settlement, report production and other functions. A security vulnerability exists in Oracle Hyperion BI+ IQR component version 11.1.2.4, which can be exploited by ...
D-Link DSP-W w110 v1.05b01 - Multiple Vulnerabilities
Exploit for hardware platform in category web applications Exploit Title: D-Link DSP-W Arbitrary Arbitrary file upload Date: 30/06/2015 Exploit Author: DNO Vendor Homepage: link Version: w110 v1.05b01 Tested on: linux CVE : N/A ======================================== the only 'filtering' on this...
D-Link DSP-W w110 v1.05b01 - Multiple Vulnerabilities
D-Link DSP-W w110 v1.05b01 - Multiple Vulnerabilities Exploit Title: D-Link DSP-W Arbitrary Arbitrary file upload Date: 30/06/2015 Exploit Author: DNO Vendor Homepage: link Version: w110 v1.05b01 Tested on: linux CVE : N/A ======================================== the only 'filtering' on this...
D-Link DSP-W w110 v1.05b01 - Multiple Vulnerabilities
Exploit Title: D-Link DSP-W Arbitrary Arbitrary file upload Date: 30/06/2015 Exploit Author: DNO Vendor Homepage: link Version: w110 v1.05b01 Tested on: linux CVE : N/A ======================================== the only 'filtering' on this resources appears to be a sprintf call which statically...
D-Link DSP-W110 Command Execution / SQL Injection / File Upload Vulnerabilities
D-Link DSP-W110 suffers from command execution, remote file upload, and remote SQL injection vulnerabilities. D-Link DSP-W110 - multiple vulnerabilities ---- Discovered by: ---- Peter Adkins ---- Access: ---- Local network; unauthenticated access. ---- Tracking and identifiers: ---- CVE - None...
ICMP Node Information Query Information Disclosure
The remote host answers to an ICMPv6 Node Information Query and responds with its DNS name, the list of IPv4 addresses and the list of IPv6 addresses to which it is bound. An attacker can use this information to understand how the network is architected, which may help him bypass filters. TRUSTED...
Information disclosure
The Networking component in Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to obtain all addresses for a host, including link-local addresses, via a Node Information Query...