964 matches found
PT-2020-6344 · Schneider Electric · Struxureware Powerscada Expert +5
Name of the Vulnerable Software and Affected Versions: EcoStruxure and SmartStruxure Power Monitoring and SCADA Software affected versions not specified Power Monitoring Expert affected versions not specified EcoStruxure Energy Expert affected versions not specified Power Manager affected version...
polkabikes.pl Improper Access Control vulnerability OBB-1381357
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
TYPO3 Information Disclosure Vulnerability (CNVD-2021-26153)
TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. An information disclosure vulnerability exists in TYPO3 versions prior to 4.3.1 and 5.x versions prior to 5.1.1, which stems from an access control error that can be exploited by an attacke...
TYPO3 typo3_forum extension incorrect access control vulnerability
TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. typo3forum extension is one of the forum extensions. A security vulnerability exists in TYPO3 typo3forum extension versions prior to 1.2.1, which stems from the program not performing acces...
federalcapital.org Improper Access Control vulnerability
Open Bug Bounty ID: OBB-1122311 Security Researcher geeknik Helped patch 8930 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting federalcapital.org website...
PT-2020-1889 · Linux +5 · Bluez +5
Name of the Vulnerable Software and Affected Versions: BlueZ versions prior to 5.54 Description: The issue is related to improper access control in the BlueZ subsystem, which may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access...
CVE-2017-18467
cPanel before 62.0.17 allows access to restricted resources because of a URL filtering error SEC-229...
CVE-2019-12469
MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed username or log in Special:EditTags are exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6...
CVE-2019-12995
Istio before 1.2.2 mishandles certain access tokens, leading to "Epoch 0 terminated with an error" in Envoy. This is related to a jwtauthenticator.cc segmentation fault...
Improper access control
OPNsense 18.7.x before 18.7.7 has Incorrect Access Control...
CVE-2019-11834
cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal...
MGASA-2019-0130 Updated ghostscript packages fix security vulnerability
It was found that the superexec operator was available in the internal dictionary. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER. CVE-2019-3835 It was found that the forceput operator...
PT-2019-6312
Name of the Vulnerable Software and Affected Versions Fortinet FortiOS versions 5.4.0 through 5.6.7 Fortinet FortiOS version 6.0.0 through 6.0.2 Fortinet FortiADC versions 5.4.0 through 6.1.0 Description An improper access control issue exists in Fortinet FortiOS and FortiADC. The issue allows an...
worldbulletin.net Improper Access Control vulnerability
Open Bug Bounty ID: OBB-712303 Description| Value ---|--- Affected Website:| worldbulletin.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:|...
golfmagasinet.dk Improper Access Control vulnerability
Open Bug Bounty ID: OBB-635187 Description| Value ---|--- Affected Website:| golfmagasinet.dk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...
CVE-2017-16185
uekw1511server is a static file server. uekw1511server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...
MGASA-2018-0198 Updated libvncserver packages fix security vulnerability
An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly unspecified other impact e.g., an integer overflow via specially crafted VNC packets...
cdn.bianguo.com.cn Improper Access Control vulnerability
Open Bug Bounty ID: OBB-593812 Description| Value ---|--- Affected Website:| cdn.bianguo.com.cn Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...
