CVE-2020-19888

DBHcms v1.2.0 has an unauthorized operation vulnerability because there's no access control at line 175 of dbhcms\page.php for empty cache operation. This vulnerability can be exploited to empty a table...

Oracle Virtualization VM VirtualBox Unauthorized Operation Vulnerability

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Atlassian Fisheye and Crucible Unauthorized Operation Vulnerability

Atlassian Fisheye and Crucible are both products of the Australian company Atlassian, Atlassian Fisheye is a suite of in-depth viewers of source code and Crucible is a suite of code review tools. A security vulnerability exists in the /json/profile/removeStarAjax.do resource in Atlassian Fisheye...

Nablarch Unauthorized Operation Vulnerability

Nablarch is a Java application framework based on the middleware model . A security vulnerability exists in Nablarch versions 5, 5u1 and 5u13. An attacker can exploit the vulnerability to obtain information about stored data, register or modify invalid values...

ATI Systems Emergency Mass Notification Systems False Alert Vulnerability (CNVD-2018-07875)

ATI Systems designs, builds and installs mass notification systems for the community, campus, industrial and military markets.Emergency Mass Notification Systems is an emergency mass notification system. An unauthorized operation vulnerability exists in ATI Systems Emergency Mass Notification...

Adobe Flash Player Unauthorized Operation Vulnerability

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A security vulnerability exists in Adobe Flash Player. A remote attacker could exploit this vulnerability to perfo...

Zulip Server invitation system unauthorized operation vulnerability

Zulip Server is a set of open source group chat application written in Python based on the Django framework. invitation system is one of the invitation system . A security vulnerability exists in the invitation system in Zulip Server versions prior to 1.7.1. An attacker can exploit this...

Oracle Siebel CRM Siebel UI Framework Component Unauthorized Operation Vulnerability (CNVD-2017-32189)

Oracle Siebel CRM is the United States Oracle Oracle company's set of customer relationship management solutions , which includes sales management , marketing management , customer service systems , call centers and other modules.Siebel UI Framework is one of the framework components based on the...

Google Android Qualcomm Component Unauthorized Operation Vulnerability (CNVD-2017-12946)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. A security vulnerability exists in the Qualcomm component of Android. An attacker could exploit the...

Google Android Unauthorized Operation Vulnerability (CNVD-2017-11477)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. There is a security vulnerability in Android. An attacker can exploit the vulnerability to perform unauthorized operations...

BINOM3 Electric Power Quality Meter Unauthorized Operation Vulnerability

BINOM3 Electric Power Quality Meter is an electrical power quality monitor for SCADA systems from the Russian company BINOM3. An unauthorized operation vulnerability exists in BINOM3 Electric Power Quality Meter, which could be exploited by an attacker to perform unauthorized operations on the...

Veritas Infoscale Operations Manager Unauthorized Operation Vulnerability

Veritas Infoscale Operations Manager is a suite of software from Veritas that is used to manage the entire InfoScale deployment. An unauthorized operation vulnerability exists in Veritas Infoscale Operations Manager, which could be exploited by an attacker to perform an unauthorized operation...