Improper access control

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view restricted sensitive information...

PT-2020-2288

Name of the Vulnerable Software and Affected Versions Microsoft YourPhoneCompanion application for Android affected versions not specified Description The issue is related to an authentication bypass in the way the application processes notifications generated by work profiles. This could allow a...

PT-2020-2441

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings Server affected versions not specified Description The issue is related to insufficient access control in the multimedia content viewing function of the software. This could allow a remote attacker to gain unauthorized...

Unauthorized Access Vulnerability in Website Building System of Qinhuangdao Shangjing Technology Co. Ltd (CNVD-2020-24435)

Qinhuangdao Shangjing Technology Co., Ltd. is a high-tech enterprise. Qinhuangdao Shangjing Technology Co., Ltd. building system has an unauthorized access vulnerability, which can be exploited by an attacker to view and change the administrator's password access...

CVE-2019-20559

An issue was discovered on Samsung mobile devices with P9.0 software. Gallery allows viewing of photos on the lock screen. The Samsung ID is SVE-2019-15055 October 2019...

Design/Logic Flaw

An issue was discovered on Samsung mobile devices with P9.0 software. Gallery allows viewing of photos on the lock screen. The Samsung ID is SVE-2019-15055 October 2019...

CVE-2019-20559

An issue was discovered on Samsung mobile devices with P9.0 software. Gallery allows viewing of photos on the lock screen. The Samsung ID is SVE-2019-15055 October 2019...

PT-2020-10535

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with P9.0 software Description An issue was discovered that allows viewing of photos on the lock screen of Samsung mobile devices. Recommendations For Samsung mobile devices with P9.0 software, consider disabling the loc...

Alfresco 5.2.4 Cross Site Scripting

Exploit Title: Alfresco 5.2.4 - Persistent Cross-Site Scripting Date: 2020-03-02 Exploit Author: Romain LOISEL & Alexandre ZANNI https://pwn.by/noraj - Pentesters from Orange Cyberdefense France Vendor Homepage: https://www.alfresco.com/ Software Link: https://www.alfresco.com/ecm-software Versio...

Alfresco 5.2.4 - Persistent Cross-Site Scripting

Alfresco 5.2.4 - Persistent Cross-Site Scripting Exploit Title: Alfresco 5.2.4 - Persistent Cross-Site Scripting Date: 2020-03-02 Exploit Author: Romain LOISEL & Alexandre ZANNI https://pwn.by/noraj - Pentesters from Orange Cyberdefense France Vendor Homepage: https://www.alfresco.com/ Software...

Microsoft Windows Modules Installer Servic Information Disclosure Vulnerability

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An information disclosure vulnerability exists in the Microsoft Windows Modules Installer Service. An attacker could exploit this vulnerability to view any file on the file system with...

CloudBees Jenkins Dynamic Extended Choice Parameter plugin memory corruption vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . A memory corruption vulnerability exists in CloudBees Jenkins Dynamic Extended Choice Parameter Plugin, which can be exploited by an attacker to read the privileg...

Authentication flaw

ilbo App ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.01 allows an attacker on the same network segment to bypass authentication and to view the images which were recorded by the other ilbo user's device via unspecified vectors...

CVE-2020-5532

Summary: CVE-2020-5532 affects ilbo App for Android <1.1.8 and iOS

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, which stems from insufficient data encryption, allows attackers to bypass existing security measures in the context of current users.

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud are related to insufficient data encryption. Exploiting these vulnerabilities can allow attackers to bypass existing security measures when acting remotely...

Important: 389-ds-base

Issue Overview: A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations, this could allow an authenticated attacker to view private attributes, such as password hashes. CVE-2019-14824 Affected Packages:...

CVE-2019-4651

IBM Jazz Reporting Service JRS 6.0.6.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 170962...

CVE-2019-15576

An information disclosure vulnerability exists in GitLab CE/EE v12.3.2, v12.2.6, and v12.1.12 that allowed an attacker to view private system notes from a GraphQL endpoint...

Unspecified Vulnerability in Atlassian Jira Service Desk Server and Atlassian Jira Service Desk Data Center Customer Context Filter

Atlassian Jira Service Desk Server and Atlassian Jira Service Desk Data Center are both products of Atlassian Australia.Atlassian Jira Service Desk Server is a suite of Atlassian Jira Service Desk Server is the server version of an IT service desk and request tracking system. The system is used t...

CVE-2019-14824

A flaw was found in the 'deref' plugin of 389-ds-base where it could use the 'search' permission to display attribute values. In some configurations, this could allow an authenticated attacker to view private attributes, such as password hashes...