PT-2021-31133

This module provides a system for building an ecommerce solution in their Drupal site. The module doesn't sufficiently verify access to profile data in certain circumstances. This vulnerability is mitigated by the fact that an attacker must have permission to perform the checkout operation...

Tula Access Rights Insufficient

The vulnerability of the automated personal data management system “Tula” is related to insufficient verification of access rights. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information through a specially crafted URL...

Azure DevOps Server Privilege Escalation

The vulnerability of the Azure DevOps Server development tool is related to insufficient verification of access rights to projects. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...