SUSE CVE-2008-5184

The web interface cgi-bin/admin.c in CUPS before 1.3.8 uses the guest username when a user is not logged on to the web server, which makes it easier for remote attackers to bypass intended policy and conduct CSRF attacks via the 1 add and 2 cancel RSS subscription functions...

CVE-2016-10929

The advanced-ajax-page-loader plugin before 2.7.7 for WordPress has no protection against the reading of uploaded files when not logged in...

Deep Impact AD Reporting System Override Access Vulnerability

SINFOR AD is the latest application delivery series equipment launched by SINFOR, and its outstanding feature is the intelligent analysis function of SINFOR AD. SINFOR AD reporting system has an overstepping access vulnerability, which allows attackers to exploit the vulnerability to realize...