345 matches found
Starbucks: Misuse of an authentication cookie combined with a path traversal on app.starbucks.com permitted access to restricted data
zlz and rhynorater discovered that by obtaining a valid authentication cookie and then combining that with a path traversal, this allowed access to restricted data. noapearson assisted by providing additional information post discovery. @zlz / @rhynorater / @noapearson — thank you for reporting...
SAP Adaptive Server Enterprise Injection Vulnerability
SAP Adaptive Server Enterprise ASE is a relational database server from SAP, Germany. An injection vulnerability exists in SAP Adaptive Server Enterprise, which originates when the program does not perform the required authentication checks on an authenticated user. An attacker could exploit the...
SAP Business Objects Business Intelligence Platform Information Disclosure Vulnerability (CNVD-2020-29751)
SAP Business Objects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP, Germany. The product features report generation, analytics, and data visualization. An information disclosure vulnerability exists in SAP Business Object...
ABB Telephone Gateway TG/S and Busch-Jaeger Telefon-Gateway Privilege Permission and Access Control Issues Vulnerabilities
The ABB Telephone Gateway TG/S and the Busch-Jaeger 6186/11 Telefon-Gateway are both a telephone gateway product from ABB Switzerland. A privileged license and access control vulnerability exists in the ABB Telephone Gateway TG/S version 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway version, which...
CVE-2019-19106
Improper implementation of Access Control in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows an unauthorized user to access data marked as restricted, such as viewing or editing user profiles and application settings...
PT-2020-10048
Name of the Vulnerable Software and Affected Versions ABB Telephone Gateway TG/S version 3.2 Busch-Jaeger 6186/11 Telefon-Gateway affected versions not specified Description The issue is related to the improper implementation of Access Control, allowing unauthorized users to access restricted dat...
CVE-2019-19106: Undefined Security Weakness
Improper implementation of Access Control in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows an unauthorized user to access data marked as restricted, such as viewing or editing user profiles and application settings...
CVE-2020-11660
CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view restricted sensitive information...
WordPress LearnPress Information Disclosure Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.LearnPress is a learning management system plugin used in it. A security vulnerability exists in the beteacher file in the...
CVE-2020-7916
beteacher in class-lp-admin-ajax.php in the LearnPress plugin 3.2.6.5 and earlier for WordPress allows any registered user to assign itself the teacher role via the wp-admin/admin-ajax.php?action=learnpressbeteacher URI without any additional permission checks. Therefore, any user can change its...
CVE-2020-7916
beteacher in class-lp-admin-ajax.php in the LearnPress plugin 3.2.6.5 and earlier for WordPress allows any registered user to assign itself the teacher role via the wp-admin/admin-ajax.php?action=learnpressbeteacher URI without any additional permission checks. Therefore, any user can change its...
LearnPress < 3.2.6.7 - Privilege Escalation
Any authenticated user can change its role to an instructor/teacher and gain access to otherwise restricted data...
GitLab EE Access Control Error Vulnerability
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Enterprise and...
PT-2019-6139 · Tvt · Tvt Nvms-1000
Name of the Vulnerable Software and Affected Versions: TVT NVMS-1000 affected versions not specified Description: The issue is related to directory traversal in TVT NVMS-1000 devices, allowing unauthorized access to restricted information. This is due to incorrect limitation of the path name to a...
TP-Link TL-R600VPN HTTP Server Unauthorized Access
The vulnerability of the HTTP server of the microprogrammed VPN router TP-Link TL-R600VPN relates to incorrect path name restrictions for restricted access directories. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information ...
CVE-2019-0318
Under certain conditions SAP NetWeaver Application Server for Java Startup Framework, versions 7.21, 7.22, 7.45, 7.49, and 7.53, allows an attacker to access information which would otherwise be restricted...
CVE-2019-1032
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
CVE-2019-0289
Under certain conditions SAP BusinessObjects Business Intelligence platform Analysis for OLAP, versions 4.2 and 4.3, allows an attacker to access information which would otherwise be restricted...
Microsoft Internet Explorer Security Bypass Vulnerability (CNVD-2019-07240)
Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A security bypass vulnerability exists in Microsoft Internet Explorer 11 that stems from a VBScript execution policy that fails to properly restrict VBScript, which...