CVE-2020-28405

CVE-2020-28405 concerns an improper authorization flaw in Star Practice Management Web version 2019.2.0.6. An unauthorized user can change privileges for any user, enabling self-authorization to the administrative role or removing all administrative accounts. The vulnerability is described consis...

CVE-2020-28405

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to change the privileges of any user of the application. This can be used to grant himself the administrative role or remove all administrative accounts of the...

CVE-2020-28404

CVE-2020-28404 affects Star Practice Management Web (version 2019.2.0.6). The connected documents describe an improper authorization vulnerability that allows an unauthorized user to access the Billing page without the appropriate privileges, indicating an access-control error in the web applicat...

CVE-2020-28403

The CVE-2020-28403 entry concerns Star Practice Management Web (v2019.2.0.6) and describes a Cross-Site Request Forgery (CSRF) vulnerability that can allow an attacker to change privileges for any user, including granting themselves admin or removing an admin account. The provided connected docum...

CVE-2020-28402

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access Launcher Configuration Panel...

CVE-2020-28402

CVE-2020-28402 affects Star Practice Management Web (v2019.2.0.6). The issue is an improper authorization that could allow an unauthorized user to access the Launcher Configuration Panel. Documented by multiple sources (NVD, Red Hat, CNVD and others) with no public exploitation details or fixes p...

CVE-2020-28401

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access WIP details about jobs he should not have access to...

CVE-2020-28401

CVE-2020-28401 affects Star Practice Management Web (version 2019.2.0.6). The cited entries describe an improper authorization vulnerability that allows an unauthorized user to access WIP details for jobs they should not see. The core issue is access control: an attacker can retrieve sensitive WI...

Star Computer Star Practice Management Web 访问控制错误漏洞

Star Computer Star Practice Management Web is a web service used for time-based billing by Star Computer, a UK-based company. The vulnerability can be exploited to access the WIP details of unauthorized jobs...

Star Computer Star Practice Management Web 访问控制错误漏洞

Star Computer Star Practice Management Web is a web service applied to billing based on time by Star Computer UK.An access control error vulnerability exists in Star Practice Management Web version 2019.2.0.6, which could be exploited by an unauthorized The vulnerability can be exploited by an...

Star Computer Star Practice Management Web 访问控制错误漏洞

Star Computer Star Practice Management Web is a web service used for time-based billing by Star Computer UK.An access control error vulnerability exists in Star Practice Management Web version 2019.2.0.6, which could be exploited by an attacker to The vulnerability can be exploited to change the...

Star Computer Star Practice Management Web 访问控制错误漏洞

Star Computer Star Practice Management Web is a web service from Star Computer UK that applies billing based on time.An access control error vulnerability exists in Star Practice Management Web version 2019.2.0.6, which could be exploited by an unauthorized The vulnerability can be exploited by a...

Star Computer Star Practice Management Web 跨站请求伪造漏洞

Star Computer Star Practice Management Web is a web service used for time-based billing by Star Computer UK.A cross-site request forgery vulnerability exists in Star Practice Management Web version 2019.2.0.6, which could be exploited by an attacker to The vulnerability can be exploited to change...

Denial of Service Vulnerability in YR1881XG of Shenzhen Meike Star Communication Technology Co.

The YR1881XG is a router. Shenzhen Meikexing Communication Technology Co., Ltd YR1881XG suffers from a denial of service vulnerability, which can be exploited by an attacker to cause a denial of service by sending a carefully constructed packet...

Denial of Service Vulnerability in MERCURY MR108GP-AC V2.0

MR108GP-AC is an enterprise router from Shenzhen Meike Star Communication Technology Co. A denial of service vulnerability exists in the MERCURY MR108GP-AC V2.0, which can be exploited by attackers to cause a denial of service attack...

Denial of Service Vulnerability in YR1800XG of Shenzhen Meike Star Communication Technology Co.

YR1800XG is a router from Shenzhen Meike Star Communication Technology Co. Shenzhen Meikexing Communication Technology Co., Ltd YR1800XG suffers from a denial-of-service vulnerability that can be exploited by attackers to cause denial-of-service attacks...

Denial of Service Vulnerability in X188G of Shenzhen Meike Star Communication Technology Co.

The X188G is a router. The X188G has a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

Denial of Service Vulnerability in M18G of Shenzhen Meike Star Communication Technology Co.

The M18G is a wireless router. A denial-of-service vulnerability exists in the M18G of Shenzhen Meike Star Communication Technology Co. An attacker can exploit the vulnerability to cause a denial of service to the target router and its upper tier operator's router by sending a carefully construct...

Denial of Service Vulnerability in Mercuery X18G Routers

The business scope of Shenzhen Meike Star Communication Technology Co., Ltd. includes the technical development of computer wireless LAN products, computer hardware and software, communication equipment, electronic products and network security equipment. A denial of service vulnerability exists ...

Mercury X18G Router Denial of Service Vulnerability

The business scope of Shenzhen Meike Star Communication Technology Co., Ltd. includes: computer wireless LAN products, computer hardware and software, communication equipment, electronic products and so on. Mercury X18G Router denial of service vulnerability can be exploited by attackers to cause...