3611 matches found
CVE-2019-16391
SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database. This is related to ecrire/inc/meta.php and ecrire/inc/securiseraction.php...
CVE-2019-11669
Modifiable read only check box In Micro Focus Service Manager, versions 9.60p1, 9.61, 9.62. This vulnerability could be exploited to allow unauthorized modification of data...
Design/Logic Flaw
Modifiable read only check box In Micro Focus Service Manager, versions 9.60p1, 9.61, 9.62. This vulnerability could be exploited to allow unauthorized modification of data...
CVE-2019-11669
Modifiable read only check box In Micro Focus Service Manager, versions 9.60p1, 9.61, 9.62. This vulnerability could be exploited to allow unauthorized modification of data...
CVE-2019-11669
The CVE affects Micro Focus Service Manager versions 9.60p1, 9.61, and 9.62, where a modifiable read-only checkbox enables unauthorized data modification. Root cause details are not explicitly provided beyond the UI control issue. Impact is described as potential unauthorized data modification. T...
WordPress nd-travel plugin unauthorized operation vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. nd-travel is a plugin used in it for selling travel products online. A security vulnerability exists in WordPress nd-travel plugin...
CVE-2019-15771
The nd-shortcodes plugin before 6.0 for WordPress has a nopriv AJAX action that allows modification of the siteurl setting...
CVE-2019-15772
The nd-donations plugin before 1.4 for WordPress has a nopriv AJAX action that allows modification of the siteurl setting...
CVE-2019-15774
The nd-booking plugin before 2.5 for WordPress has a nopriv AJAX action that allows modification of the siteurl setting...
CVE-2019-15775
The nd-learning plugin before 4.8 for WordPress has a nopriv AJAX action that allows modification of the siteurl setting...
CVE-2016-10860
cPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API SEC-66...
Design/Logic Flaw
cPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API SEC-66...
CVE-2016-10860
cPanel before 11.54.0.0 allows unauthorized zone modification via the WHM API SEC-66...
Unauthorized Modification
moodle is vulnerable to unauthorized modification. The vulnerability is possible because it does not observe separate groups mode before overriding assignment group, allowing teachers in an assignment group to modify group overrides...
PT-2019-7656
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 11.54.0.0 Description The issue allows unauthorized modification of zones through the WHM API. Recommendations For versions prior to 11.54.0.0, update to version 11.54.0.0 or later to resolve the issue...
SWIFT Alliance Web Platform Unauthorized File Modification Vulnerability
SWIFT Alliance Web Platform is SWIFT Belgium's suite of graphical user interface software for the SWIFT Alliance family of products. A security vulnerability exists in SWIFT Alliance Web Platform version 7.1.23. An attacker could exploit the vulnerability to tamper with log file names and error l...
Unauthorized Modification
Apache Sentry is vulnerable to unauthorized modification attacks. An unauthorized user could execute ALTER TABLE EXCHANGE PARTITIONS which may allow an attacker to access unauthorized partitioned data of a Sentry protected table and to remove data from a Sentry protected table...
CVE-2019-6329
HP Support Assistant 8.7.50 and earlier allows a user to gain system privilege and allows unauthorized modification of directories or files. Note: A different vulnerability than CVE-2019-6328...
