An access control issue in MantisBT before 1.2.13

An access control issue in MantisBT before 1.2.13

Overview : An access control issue in MantisBT before 1.2.13 allows users with “Reporter” permissions to change any issue to

Common Vulnerabilities and Exposures

Access token validation errors affects all versions of Apache CXF prior to 3.3.4 and 3.2.11.

Overview : Apache CXF OpenId Connect token service does not properly validate the clientId Affected Product(s) : Apache CXF prior

Common Vulnerabilities and Exposures

Open Redirection in Drupal6 version 6.16

Overview : drupal6: SA-CORE-2010-002 – Drupal core – Multiple vulnerabilities Affected Product(s) : Drupal6 version 6.16 Vulnerability Details : CVE

Common Vulnerabilities and Exposures

SQL Injection flaw in SuiteCRM

Overview : SuiteCRM 7.10.x versions prior to 7.10.21 and 7.11.x versions prior to 7.11.9 allow SQL Injection. Affected Product(s) :

Common Vulnerabilities and Exposures

Linux vserver 2.6 before 2.6.17 suffers from privilege escalation in remount code.

Overview : linux vserver priviledge escalation in remount code Affected Product(s) : linux vserver 2.6 before 2.6.17 Vulnerability Details :

Common Vulnerabilities and Exposures

Issues discovered in Joomla 3.2.0 – 3.9.12

Overview : Multiple flaws was discovered in Joomla 3.2.0 – 3.9.12 Affected Product(s) : Joomla! CMS versions 3.2.0 – 3.9.12

Common Vulnerabilities and Exposures

RHQ Mongo DB Drift Server vulnerability

Overview : An insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25 when unpacking zipped files.

Common Vulnerabilities and Exposures

Multiple vulnerabilities in TYPO3 Core

Overview : Multiple flaws was discovered in TYPO3 Core Affected Product(s) : TYPO3 versions 4.1.13 and below, 4.2.12 and below,

Common Vulnerabilities and Exposures

Attacks found in Honeywell Cameras

Overview : Multiple flaws was discovered in Honeywell equIP and Performance Series IP Cameras Affected Product(s) : Security Notification SN

Common Vulnerabilities and Exposures

IDOR vulnerability exists in Magento

Overview : An insecure direct object reference (IDOR) vulnerability exists in Magento Affected Product(s) : Magento 2.3 prior to 2.3.1,

Common Vulnerabilities and Exposures

SugarCRM CE unserialize PHP code execution in multiple files

Overview : SugarCRM CE <= 6.3.1 contains scripts that use “unserialize()” with user controlled input which allows remote attackers to

Common Vulnerabilities and Exposures

PostgreSQL security flaws

Overview : Multiple flaws was discovered in postgresql Affected Product(s) : postgresql 9.4 – 11 postgresql 11.x before 11.5 Vulnerability

Common Vulnerabilities and Exposures

Missing Authentication for Critical Function in IP-AK2

Overview : In IP-AK2 Access Control Panel Version 1.04.07 and prior, the integrated web server of the affected devices could

Common Vulnerabilities and Exposures

Potential SQL injection in PostgreSQL Zend\Db adapter

Overview : Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter. Affected Product(s)

Common Vulnerabilities and Exposures

TP-Link M7350 multiple vulnerabilities

Overview : Multiple security vulnerabilities in TP-Link M7350 devices Affected Product(s) : TP-Link M7350 devices through 1.0.16 Build 181220 Rel.1116n

Common Vulnerabilities and Exposures

IBM Security vulnerabilities released

Overview : Multiple security vulnerabilities have been updated in IBM products Affected Product(s) : IBM Maximo Asset Management 7.6 IBM

Common Vulnerabilities and Exposures

Apache Traffic Server is vulnerable to HTTP/2 setting flood attacks

Overview : Apache Traffic Server is vulnerable to HTTP/2 setting flood attacks. Earlier versions of Apache Traffic Server didn’t limit

Common Vulnerabilities and Exposures

IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 is vulnerable to a buffer overflow

Overview : IBM DB2 High Performance Unload load for LUW 6.1 and 6.5 is vulnerable to a buffer overflow, caused

Common Vulnerabilities and Exposures

Authenticated SQL Injection in OpenEMR before 5.0.2.1

Overview : Authenticated SQL Injection in interface/forms/eye_mag/js/eye_base.php in OpenEMR through 5.0.2 allows a user to extract arbitrary data from the