PT-2020-7197

Name of the Vulnerable Software and Affected Versions ISPConfig version 3.0.4.3 Description The issue allows the "Add new Webdav user" feature to modify permissions and ownership of files on the entire server from the client interface, potentially leading to unauthorized access and modifications...

PT-2019-14601

Name of the Vulnerable Software and Affected Versions YIT Plugin Framework versions prior to 3.3.9 Description The issue allows authenticated options changes, potentially leading to unauthorized modifications. Recommendations For versions prior to 3.3.9, update to version 3.3.9 or later to resolv...

PT-2019-17027 · Ibm · Ibm Security Guardium Big Data Intelligence

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium Big Data Intelligence SonarG version 4.0 Description: The issue specifies permissions for a security-critical resource, which could lead to the exposure of sensitive information or the modification of that resource by...

PT-2019-12357

Name of the Vulnerable Software and Affected Versions Softing uaGate SI version 1.60.01 Description A security issue was found in the software where a system default path for executables is writable by users, potentially allowing unauthorized modifications. Recommendations For version 1.60.01,...

PT-2019-14379

Name of the Vulnerable Software and Affected Versions woo-address-book plugin versions prior to 1.6.0 Description The issue concerns the woo-address-book plugin for WordPress, where save calls lack nonce verification checks, potentially allowing unauthorized modifications. Recommendations For...

PT-2019-7695

Name of the Vulnerable Software and Affected Versions Total-security plugin versions prior to 3.4.1 Description The issue allows for settings changes, potentially leading to unauthorized modifications. Recommendations For versions prior to 3.4.1, update to version 3.4.1 or later to resolve the...

CVE-2019-6815

In Modicon Quantum all firmware versions, CWE-264: Permissions, Privileges, and Access Control vulnerabilities could cause a denial of service or unauthorized modifications of the PLC configuration when using Ethernet/IP protocol...

CVE-2019-6815

In Modicon Quantum all firmware versions, CWE-264: Permissions, Privileges, and Access Control vulnerabilities could cause a denial of service or unauthorized modifications of the PLC configuration when using Ethernet/IP protocol...

CVE-2019-6815: Undefined Security Weakness

In Modicon Quantum all firmware versions, CWE-264: Permissions, Privileges, and Access Control vulnerabilities could cause a denial of service or unauthorized modifications of the PLC configuration when using Ethernet/IP protocol...

PT-2019-2340

Name of the Vulnerable Software and Affected Versions Modicon Quantum all firmware versions Description The issue is related to errors in access control mechanisms, which could allow a remote attacker to cause a denial of service or make unauthorized modifications to the PLC configuration when...

Authorization Bypass

mysql is vulnerable to authorization bypass. The vulnerability exists as remotely authenticated users can cause unauthorized modifications through DML...

PT-2018-18695

Name of the Vulnerable Software and Affected Versions BlackBerry UEM versions prior to 12.9.1 Description A cross-site request forgery issue in the Management Console could allow an attacker to make unauthorized modifications to the UEM settings, acting as a Management Console administrator...

PT-2018-15023

Name of the Vulnerable Software and Affected Versions ShowDoc version 2.4.2 Description The issue allows for a CSRF attack, which can be used to add members to a team. The affected endpoint is "server/index.php?s=/api/teamMember/save". This can potentially lead to unauthorized modifications to te...

PT-2018-14658

Name of the Vulnerable Software and Affected Versions School Event Management System version 1.0 Description The issue allows for CSRF via the "user/controller.php?action=edit" endpoint, potentially enabling unauthorized modifications. Recommendations For School Event Management System version 1....

Authentication flaw

A vulnerability in the identity management service of Cisco Digital Network Architecture DNA Center could allow an unauthenticated, remote attacker to bypass authentication and take complete control of identity management functions. The vulnerability is due to insufficient security restrictions f...

PT-2018-1858

Name of the Vulnerable Software and Affected Versions Cisco Digital Network Architecture DNA Center affected versions not specified Description The issue is related to insufficient security restrictions for critical management functions in the identity management service. This could allow a remot...

New Relic: [NR Insights] Data app permissions setting does not fully prevent other users from modifying/changing changing data related to your data app

In NR Insights, there is the ability to set a permissions for the data app itself. It's located here: F326634 Now, in this section, if a user creates a new data app and sets the permissions to "visible to others within my account" it essentially provides read-only access to the data app and its...

Debian DLA-1428-1 : 389-ds-base security update

CVE-2015-1854 A flaw was found while doing authorization of modrdn operations. An unauthenticated attacker able to issue an ldapmodrdn call to the directory server could perform unauthorized modifications of entries in the directory server. CVE-2017-15134 Improper handling of a search filter in...

[SECURITY] [DLA 1428-1] 389-ds-base security update

Package : 389-ds-base Version : 1.3.3.5-4+deb8u1 CVE ID : CVE-2015-1854 CVE-2017-15134 CVE-2018-1054 CVE-2018-1089 CVE-2018-10850 CVE-2015-1854 A flaw was found while doing authorization of modrdn operations. An unauthenticated attacker able to issue an ldapmodrdn call to the directory server cou...

CVE-2018-7689

Lack of permission checks in the InitializeDevelPackage function in openSUSE Open Build Service before 2.9.3 allowed authenticated users to modify packages where they do not have write permissions...