505 matches found
Joomla! access control error vulnerability (CNVD-2019-15988)
Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. An Access Control Error vulnerability exists in Joomla! versions prior to 3.9.4, which stems from a lack of ACL checking in the Sample Data plugin a...
SAP Manufacturing Integration and Intelligence Cross-Site Request Forgery Vulnerability
SAP Manufacturing Integration and Intelligence MII,xMII is a set of Germany's SAP SAP will be the core of the manufacturing system and enterprise process integration platform system. The system supports the creation of manufacturing engineering, manufacturing execution and enterprise workflow...
The vulnerability of the Oracle FLEXCUBE Direct Banking (Logoff Page) component of the banking analytics system in the Oracle Financial Services Applications model allows a perpetrator to gain access to protected information.
The vulnerability of the Oracle FLEXCUBE Direct Banking Logoff Page component of the banking analytics system in the Oracle Financial Services Applications is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain...
Vulnerability of the Server component: The Replication function of the Oracle MySQL Server database management system, which allows attackers to gain unauthorized access to the device.
The vulnerability of the Oracle MySQL Server database management system’s replication component is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to the device remotely...
CVE-2018-7691
A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center SSC, versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access...
Design/Logic Flaw
A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center SSC, versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access...
CVE-2018-7691 MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access
A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center SSC, versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access...
CVE-2018-7691
CVE-2018-7691 affects Micro Focus Fortify Software Security Center (SSC) versions 17.10, 17.20 and 18.10. The root cause is insecure direct object references (IDOR) in the REST API: ownership of the field "authEntities" is not properly checked, allowing remote authenticated (view-only) users to r...
CVE-2018-7690 MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access
A potential Remote Unauthorized Access in Micro Focus Fortify Software Security Center SSC, versions 17.10, 17.20, 18.10 this exploitation could allow Remote Unauthorized Access...
CVE-2018-7110
A remote unauthorized disclosure of information vulnerability was identified in HPE Service Governance Framework SGF version 4.2, 4.3. A race condition under high load in SGF exists where SGF transferred different parameter to the enabler...
CVE-2018-13821
A lack of authentication, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows remote attackers to conduct a variety of attacks, including file reading/writing...
HPE 3PAR Service Processor Cross-Site Request Forgery Vulnerability
HPE 3PAR Service Processor SP is a suite of virtual service processors deployed on the VMware vSphere hypervisor from Hewlett Packard Enterprise HPE, USA. A cross-site request forgery vulnerability exists in versions prior to HPE 3PAR SP SP-4.4.0.GA-110 MU7. A remote attacker could exploit this...
The vulnerability of the InnoDB component of the MySQL database management system allows a hacker to gain unauthorized access to protected data or cause service failures.
The vulnerability of the InnoDB component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected data and cause network protocol-related service failure...
CVE-2018-11636
Cross-site request forgery CSRF vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to execute malicious and unauthorized actions...
Synology Photo Station Cross-Site Request Forgery Vulnerability
Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. A cross-site request forgery vulnerability exists in the admin/user.php file in Synology Photo Station versions prior to 6.8.5-3471 and prior to 6.3-2975. A remote attacker can exploit the...
Cisco Linksys EA4500 Cross-Site Request Forgery Vulnerability
The Cisco Linksys EA4500 devices is a router device from Cisco USA. A cross-site request forgery vulnerability exists in Cisco Linksys EA4500 devices using firmware versions prior to 2.1.41.164606. A remote attacker could exploit this vulnerability to perform unauthorized operations...
Schneider Electric MGE UPS and MGE STS 66074 MGE Network Management Card Transverse Improper Authorization Vulnerability
The Schneider Electric MGE UPS and MGE STS are both products of the French company Schneider Electric.The Schneider Electric MGE UPS is an uninterruptible power supply unit.The MGE STS is a static toggle switch.66074 MGE Network Management Card Transverse is one of the network management cards...
HPESBUX03817 rev.2 - HP-UX CIFS Server, Local and Remote Vulnerabilities
Potential Security Impact: Local: Unauthorized Data Access; Remote: Disclosure of Information, Unauthorized Data Access, Unauthorized Modification Of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX Common Internet File System CIFS, Client/Server Software...