2067 matches found
CVE-2018-1822: Improper Authentication
IBM FlashSystem 900 product GUI allows a specially crafted attack to bypass the authentication requirements of the system, resulting in the ability to remotely change the superuser password. This can be used by an attacker to gain administrative control or to deny service. IBM X-Force ID: 150296...
The installation wizard in DotNetNuke (DNN) allows privilege escalation
The installation wizard in DotNetNuke DNN before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx...
GHSA-X8F7-H444-97W4 The installation wizard in DotNetNuke (DNN) allows privilege escalation
The installation wizard in DotNetNuke DNN before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx...
CVE-2018-1198
Pivotal Cloud Cache, versions prior to 1.3.1, prints a superuser password in plain text during BOSH deployment logs. A malicious user with access to the logs could escalate their privileges using this password...
Default credentials
Pivotal Cloud Cache, versions prior to 1.3.1, prints a superuser password in plain text during BOSH deployment logs. A malicious user with access to the logs could escalate their privileges using this password...
PT-2018-10929
Name of the Vulnerable Software and Affected Versions Pivotal Cloud Cache versions prior to 1.3.1 Description The issue allows a malicious user with access to the logs to escalate their privileges using a superuser password printed in plain text during BOSH deployment logs. Recommendations For...
CVE-2018-17037: Incorrect Permission Assignment for Critical Resource
user/editpost.php in UCMS 1.4.6 mishandles levels, which allows escalation from the normal user level of 1 to the superuser level of 3...
PT-2018-13853
Name of the Vulnerable Software and Affected Versions UCMS version 1.4.6 Description The issue in UCMS allows escalation from the normal user level of 1 to the superuser level of 3 due to mishandling of levels in the user/editpost.php file. Recommendations For UCMS version 1.4.6, consider...
postgresql: Uncontrolled search path element in pg_dump and other client applications
A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database...
Design/Logic Flaw
In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, an attacker with both the superuser password and physical access can enter the superuser password that can be used to access and modify all settings on the device, as well as allow the user to reset...
CVE-2018-14801
In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, an attacker with both the superuser password and physical access can enter the superuser password that can be used to access and modify all settings on the device, as well as allow the user to reset...
CVE-2018-14801
In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, an attacker with both the superuser password and physical access can enter the superuser password that can be used to access and modify all settings on the device, as well as allow the user to reset...
CVE-2018-14801
CVE-2018-14801 affects Philips PageWriter TC10/TC20/TC30/TC50/TC70 Cardiographs. The vulnerability arises from hard-coded credentials allowing an attacker who has the superuser password and physical access to enter the superuser password and gain access to/modify all device settings, including re...
CVE-2018-14801: Use of Hard-coded Credentials
In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, an attacker with both the superuser password and physical access can enter the superuser password that can be used to access and modify all settings on the device, as well as allow the user to reset...
Hard-coded credential vulnerability in multiple Philips products
Philips PageWriter TC10 Cardiograph and others are different models of electrocardiograph equipment from Philips Netherlands. A security vulnerability exists in a number of Philips products that stems from the program's use of hard-coded credentials. An attacker in close physical proximity could...
postgresql: Uncontrolled search path element in pg_dump and other client applications
A flaw was found in the way Postgresql allowed a user to modify the behavior of a query for other users. An attacker with a user account could use this flaw to execute code with the permissions of superuser in the database...
PT-2018-2615
Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 11.1 PostgreSQL versions prior to 10.6 Description The issue is related to SQL injection in pg upgrade and pg dump via CREATE TRIGGER ... REFERENCING. An attacker can cause arbitrary SQL statements to run with...
Design/Logic Flaw
QFX5200 and QFX10002 devices that have been shipped with Junos OS 15.1X53-D21, 15.1X53-D30, 15.1X53-D31, 15.1X53-D32, 15.1X53-D33 and 15.1X53-D60 or have been upgraded to these releases using the .bin or .iso images may contain an unintended additional Open Network Install Environment ONIE...
PT-2018-2733
Name of the Vulnerable Software and Affected Versions macOS High Sierra versions prior to 10.13.5 Description The issue is related to the CUPS print server and involves improper handling of certain include directives, allowing an unprivileged user to read arbitrary files as a superuser. This...
ECESSA ShieldLink SL175EHQ Cross-Site Request Forgery Vulnerability
ECESSA ShieldLink SL175EHQ is a WAN link controller from ECESSA, which includes ISP/WAN link aggregation, load balancing and traffic monitoring. A cross-site request forgery vulnerability exists in ECESSA ShieldLink SL175EHQ version 10.7.4. A remote attacker can exploit this vulnerability to add ...