7884 matches found
Authorization
An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow remote attackers to access the OBR host as a non-admin user...
CVE-2020-11856
The CVE covers Micro Focus Operations Bridge Reporter (OBR) vulnerable through its JMX remote interface. Connected sources confirm: affected product is OBR, version 10.40 and earlier, with a root cause described as misconfigured or unauthenticated JMX access that allows remote code execution. The...
CVE-2020-11856
Arbitrary code execution vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow remote attackers to execute arbitrary code on affected installations of OBR...
CVE-2020-11857
CVE-2020-11857 affects Micro Focus Operations Bridge Reporter up to v10.40, with an authorization bypass (and, per ZDI, a hard-coded shrboadmin password) enabling remote access to the OBR host and, in the cited advisory, remote code execution. Affected versions are 10.40 and earlier; no explicit ...
CVE-2020-11857
An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow remote attackers to access the OBR host as a non-admin user...
CVE-2020-11855
CVE-2020-11855 is a local authorization-bypass vulnerability in Micro Focus Operations Bridge Reporter (OBR) and affected OBM/OBR components up to version 10.40 and earlier. The root cause is incorrect permissions/authorization handling, enabling a local attacker on the OBR host to execute code w...
CVE-2020-11855
An Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow local attackers on the OBR host to execute code with escalated privileges...
The vulnerability of the Windows Storage Services data storage service on Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows Storage Services data storage service in Windows operating systems is related to file operation processing errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
MISP Link Jumping Vulnerability
MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.4.132. The vulnerability stems...
Denial Of Service (DoS)
linux is vulnerable to denial of service DoS. The vulnerability exists through a deadlock in btreegccoalesce in drivers/md/bcache/btree.c, when a coalescing operation fails...
Arbitrary Code Execution
qemu is vulnerable to arbitrary code execution. The romcopy in hw/core/loader.c does not validate the relationship between two addresses and allows attackers to perform an invalid memory copy operation...
Denial Of Service (DoS)
busybox is vulnerable to denial of service DoS. huftbuild in archival/libarchive/decompressgunzip.c in BusyBox misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file...
CVE-2020-11861
Unauthorized escalation of local privileges vulnerability on Micro Focus Operation Agent, affecting all versions prior to versions 12.11. The vulnerability could be exploited to escalate the local privileges and gain root access on the system...
CVE-2020-11861
Unauthorized escalation of local privileges vulnerability on Micro Focus Operation Agent, affecting all versions prior to versions 12.11. The vulnerability could be exploited to escalate the local privileges and gain root access on the system...
Design/Logic Flaw
Unauthorized escalation of local privileges vulnerability on Micro Focus Operation Agent, affecting all versions prior to versions 12.11. The vulnerability could be exploited to escalate the local privileges and gain root access on the system...
CVE-2020-11861
CVE-2020-11861 affects Micro Focus Operation Agent, with all versions prior to 12.11 vulnerable to local privilege escalation. The issue enables an attacker with local access to escalate privileges to root. Remediation: upgrade to version 12.11 or later. No explicit exploit details are provided i...
CVE-2020-11861
Unauthorized escalation of local privileges vulnerability on Micro Focus Operation Agent, affecting all versions prior to versions 12.11. The vulnerability could be exploited to escalate the local privileges and gain root access on the system...
CVE-2020-25766
An issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST operation on a form that is not linked to the login page...