54 matches found
CVE-2021-42640
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference IDOR vulnerability that allows an unauthenticated attacker to reassign drivers for any printer...
CVE-2021-42640
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference IDOR vulnerability that allows an unauthenticated attacker to reassign drivers for any printer...
CVE-2021-42640: Exposure of Resource to Wrong Sphere
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference IDOR vulnerability that allows an unauthenticated attacker to reassign drivers for any printer...
CVE-2021-43830
OpenProject is a web-based project management software. OpenProject versions = 12.0.0 are vulnerable to a SQL injection in the budgets module. For authenticated users with the "Edit budgets" permission, the request to reassign work packages to another budget unsufficiently sanitizes user input in...
Sql injection
OpenProject is a web-based project management software. OpenProject versions = 12.0.0 are vulnerable to a SQL injection in the budgets module. For authenticated users with the "Edit budgets" permission, the request to reassign work packages to another budget unsufficiently sanitizes user input in...
Tremor 资源管理错误漏洞
Tremor is an open source event processing system for unstructured data. A resource management error vulnerability exists in Tremor Tremor-runtime, which arises when the product causes access to freed memory when using patch or merge on a state and assigning the result back to the state state. The...
PT-2019-7571
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 60.0.25 Description The issue allows arbitrary file-chown operations via the reassign post terminate cruft function. Recommendations For versions prior to 60.0.25, update to version 60.0.25 or later to resolve the issu...
PT-2019-8365
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 66.0.2 Description The issue concerns incorrect setting of user and group ownership when using the reassign post terminate cruft function. Recommendations For versions prior to 66.0.2, update to version 66.0.2 or later...
PT-2017-8485
Name of the Vulnerable Software and Affected Versions HPE Helion Openstack Glance affected versions not specified Description The issue allows remote authenticated users to cause other users to boot into a modified image without notification of the change by reassigning deleted image ids...
CVE-2014-2019
The iCloud subsystem in Apple iOS before 7.1 allows physically proximate attackers to bypass an intended password requirement, and turn off the Find My iPhone service or complete a Delete Account action and then associate this service with a different Apple ID account, by entering an arbitrary...
CVE-2013-1834
notes/edit.php in Moodle 1.9.x through 1.9.19, 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated users to reassign notes via a modified 1 userid or 2 courseid field...
CVE-2013-1834: Undefined Security Weakness
notes/edit.php in Moodle 1.9.x through 1.9.19, 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated users to reassign notes via a modified 1 userid or 2 courseid field...
CVE-2013-1834
notes/edit.php in Moodle 1.9.x through 1.9.19, 2.x through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote authenticated users to reassign notes via a modified 1 userid or 2 courseid field...
PT-2013-3419
Name of the Vulnerable Software and Affected Versions Moodle versions 1.9.x through 1.9.19 Moodle versions 2.x through 2.1.10 Moodle versions 2.2.x before 2.2.8 Moodle versions 2.3.x before 2.3.5 Moodle versions 2.4.x before 2.4.2 Description The issue allows remote authenticated users to reassig...