Authentication flaw

Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot Intel Rapid Storage Response Technology iRST Manager menu. An attacker with physical access to the system could perform unauthorized changes to the BIOS Setup configuration settin...

Unspecified Vulnerability in Oracle Hyperion Financial Close Management

Oracle Hyperion is the United States Oracle Oracle company's set of financial modeling applications. The software provides financial settlement, report production and other functions. An unspecified vulnerability exists in Oracle Hyperion Financial Close Management. An attacker could exploit this...

Atlassian Jira Server and Data Center Authorization Issues Vulnerability (CNVD-2020-04825)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. An authorization issue vulnerability exists in Atlassian Jira Server and Data Center. The vulnerability stems from a lack of...

Linux: SSH /etc/ssh/sshd_config chown

The /etc/ssh/sshdconfig file contains configuration specifications for sshd. This should be protected from unauthorized changes by non-privileged users. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or...

GitLab CE/EE Access Control Error Vulnerability (CNVD-2020-03780)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An access control error vulnerability exists in GitLab...

ASUS ZenFone 4 Selfie Access Control Error Vulnerability

The ASUS ZenFone 4 Selfie is a smartphone from Asus ASUS of Taiwan, China. An access control error vulnerability exists in ASUS ZenFone 4 Selfie. The vulnerability arises from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker can...

Elephone A4 Access Control Error Vulnerability

Elephone A4 is a smartphone from China's ELEPHONE Communication Technology. An Access Control Error vulnerability exists in the Elephone A4. The vulnerability arises from a network system or product that does not properly restrict access to resources from unauthorized roles and can be exploited b...

Doogee Mix has an unspecified vulnerability

Doogee Mix is a smartphone from the Chinese company Doogee. A security vulnerability exists in the com.mediatek.factorymode app in Doogee Mix build fingerprint: DOOGEE/MIX/MIX:7.0/NRD90M/1495809471:user/release-keys. An attacker could use this vulnerability to make unauthorized changes to wireles...

Unspecified Vulnerability in Doogee BL5000

Doogee BL5000 is a smartphone from Doogee, a Chinese company. A security vulnerability exists in the com.mediatek.factorymode app in the Doogee BL5000 build fingerprint: DOOGEE/BL5000/BL5000:7.0/NRD90M/1497072355:user/release-keys. An attacker could use this vulnerability to make unauthorized...

Unspecified Vulnerability in Kata M4s

Kata M4s is a smartphone. The com.mediatek.factorymode app in the Kata M4s build fingerprint: alps/fullhct675066n/hct675066n:7.0/NRD90M/1495624556:user/test-keys has a security vulnerability. An attacker could use this vulnerability to make unauthorized changes to wireless settings via other...

Unspecified Vulnerability in Bluboo Bluboo_S1

Bluboo BlubooS1 is a smartphone. The com.mediatek.factorymode app in Bluboo BlubooS1 build fingerprint: BLUBOO/BlubooS1/BlubooS1:7.0/NRD90M/1495809471:user/release-keys A security vulnerability exists. An attacker could use this vulnerability to make unauthorized changes to wireless settings via...

Xiaomi Mi Note 2 is vulnerable

Xiaomi Mi Note 2 is a smartphone from Chinese company Xiaomi Technology Xiaomi. A security vulnerability exists in the com.miui.powerkeeper app in Xiaomi Mi Note 2 build fingerprint: Xiaomi/scorpio/scorpio:6.0.1/MXB48T/7.1.5:user/release-keys. An attacker can exploit this vulnerability to make...

Xiaomi Mi Mix has an unspecified vulnerability

The Xiaomi Mi Mix is a smartphone from Chinese company Xiaomi Technology Xiaomi. A security vulnerability exists in Xiaomi Mi Mix build fingerprint: Xiaomi/lithium/lithium:6.0.1/MXB48T/7.1.5:user/release-keys in Xiaomi/lithium/lithium:6.0.1/MXB48T/7.1 A security vulnerability exists in...

Xiaomi Mi A2 Lite Access Control Error Vulnerability (CNVD-2019-41689)

Xiaomi Mi A2 Lite is a smartphone from Chinese company Xiaomi Technology Xiaomi. The Xiaomi Mi A2 Lite build fingerprint: xiaomi/daisy/daisysprout:9/PKQ1.180917.001/V10.0.3.0.PDLMIXM:user/release-keys in the com.huaqin. An access control error vulnerability exists in the factory app. An attacker...

DEBIAN-CVE-2010-5108

Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions...

CVE-2010-5108

Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions...

Unspecified Vulnerability in Oracle Banking Digital Experience

Oracle Banking Digital Experience delivers enterprise-grade, open, modern and scalable digital banking solutions that enable banks to rapidly roll out digital capabilities without changing their existing core banking platforms. A security vulnerability exists in the Loan Calculator component in...

CVE-2019-15749

CVE-2019-15749 affects SITOS six Build v6.2.1. The flaw allows a user to change their password and recovery email address without confirming the change with the old password, enabling an attacker who has access to the victim’s account (e.g., via XSS or an unattended workstation) to modify credent...

PT-2019-3383 · Cisco · Cisco Firepower Management Center (Fmc)

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: The issue is related to multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center FMC Software. These...

PT-2019-3380 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: The issue is related to improper input validation in the web-based management interface, allowing an authenticated, remote attacker to execute arbitra...