CVE-2020-35497 21 Dec 2020
A flaw was found in ovirt-engine 4.4.3 and earlier allowing an authenticated user to read other users' personal information, including name, email and... Read more ➔
CVE-2020-25629 (v3: 8.8) 8 Dec 2020
A vulnerability was found in Moodle where users with "Log in as" capability in a course context (typically, course managers) may gain access to some s... Read more ➔
CVE-2020-7545 1 Dec 2020
A CWE-284:Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notificati... Read more ➔
CVE-2020-7547 1 Dec 2020
A CWE-284: Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notificat... Read more ➔
CVE-2020-7561 19 Nov 2020
A CWE-284: Improper Access Control vulnerability exists in Easergy T300 (with firmware 2.7 and older) that could cause a wide range of problems, inclu... Read more ➔
CVE-2020-7573 19 Nov 2020
A CWE-284 Improper Access Control vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause a remote attacker bei... Read more ➔
CVE-2020-24441 12 Nov 2020
Adobe Acrobat Reader for Android version 20.6.2 (and earlier) does not properly restrict access to directories created by the application. This could... Read more ➔
CVE-2020-24433 5 Nov 2020
Adobe Acrobat Reader DC versions 2020.012.20048 (and earlier), 2020.001.30005 (and earlier) and 2017.011.30175 (and earlier) are affected by a local p... Read more ➔
CVE-2020-8028 17 Sep 2020
A Improper Access Control vulnerability in the configuration of salt of SUSE Linux Enterprise Module for SUSE Manager Server 4.1, SUSE Manager Proxy 4... Read more ➔
CVE-2020-10930 28 Jul 2020
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 ro... Read more ➔
CVE-2020-4062 22 Jun 2020
In Conjur OSS Helm Chart before 2.0.0, a recently identified critical vulnerability resulted in the installation of the Conjur Postgres database with... Read more ➔
CVE-2019-16114 (v3: 9.8) 9 Sep 2019
In ATutor 2.2.4, an unauthenticated attacker can change the application settings and force it to use his crafted database, which allows him to gain ac... Read more ➔
CVE-2019-15895 (v3: 7.5) 9 Sep 2019
search-exclude.php in the "Search Exclude" plugin before 1.2.4 for WordPress allows unauthenticated options changes. Read more ➔
CVE-2019-9854 (v3: 7.8) 6 Sep 2019
LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-... Read more ➔
CVE-2019-13656 (v3: 9.8) 6 Sep 2019
An access vulnerability in CA Common Services DIA of CA Technologies Client Automation 14 and Workload Automation AE 11.3.5, 11.3.6 allows a remote at... Read more ➔
CVE-2019-11380 (v3: 7.5) 5 Sep 2019
The master-password feature in the ES File Explorer File Manager application 4.2.0.1.3 for Android can be bypassed via a com.estrongs.android.pop.ftp.... Read more ➔
CVE-2019-13188 (v3: 9.8) 5 Sep 2019
In Knowage through 6.1.1, an unauthenticated user can bypass access controls and access the entire application. Read more ➔
CVE-2019-15718 (v3: 5.5) 4 Sep 2019
In systemd 240, bus_open_system_watch_bind_with_description in shared/bus-util.c (as used by systemd-resolved to connect to the system D-Bus instance)... Read more ➔
CVE-2019-15043 (v3: 7.5) 3 Sep 2019
In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack aga... Read more ➔
CVE-2018-15513 (v3: 5.3) 30 Aug 2019
Log viewer in totemomail 6.0.0 build 570 allows access to sessionIDs of high privileged users by leveraging access to a read-only auditor role. Read more ➔
CVE-2018-21007 (v3: 9.8) 29 Aug 2019
The woo-confirmation-email plugin before 3.2.0 for WordPress has no blocking of direct access to supportive xl folders inside uploads. Read more ➔
CVE-2019-11061 (v3: 8.1) 29 Aug 2019
A broken access control vulnerability in HG100 firmware versions up to 4.00.06 allows an attacker in the same local area network to control IoT device... Read more ➔
CVE-2019-11063 (v3: 8.8) 29 Aug 2019
A broken access control vulnerability in SmartHome app (Android versions up to 3.0.42_190515, ios versions up to 2.0.22) allows an attacker in the sam... Read more ➔
CVE-2019-13405 (v3: 9.8) 29 Aug 2019
A broken access control vulnerability found in Advan VD-1 firmware version 230 leads to insecure ADB service. An attacker can send a POST request to c... Read more ➔
CVE-2019-13406 (v3: 7.5) 29 Aug 2019
A broken access control vulnerability found in Advan VD-1 firmware versions up to 230. An attacker can send a POST request to cgibin/ApkUpload.cgi to... Read more ➔