CWE-285 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-285/ Sun, 26 Feb 2023 06:48:48 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-285 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-285/ 32 32 CVE-2018-20945 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-20945/ Sun, 26 Feb 2023 06:48:48 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-20945/ bin/csvprocess in cPanel before 68.0.27 allows insecure file operations (SEC-354).

The post CVE-2018-20945 appeared first on CVE Vulnerability.

]]> bin/csvprocess in cPanel before 68.0.27 allows insecure file operations (SEC-354).

The post CVE-2018-20945 appeared first on CVE Vulnerability.

]]> CVE-2018-20927 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-20927/ Sun, 26 Feb 2023 06:48:48 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-20927/ cPanel before 70.0.23 allows jailshell escape because of incorrect crontab parsing (SEC-382).

The post CVE-2018-20927 appeared first on CVE Vulnerability.

]]> cPanel before 70.0.23 allows jailshell escape because of incorrect crontab parsing (SEC-382).

The post CVE-2018-20927 appeared first on CVE Vulnerability.

]]> CVE-2018-20826 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-20826/ Sun, 26 Feb 2023 06:48:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-20826/ The inline-create rest resource in Jira before version 7.12.3 allows authenticated remote attackers to set the reporter in issues via a missing authorisation check.

The post CVE-2018-20826 appeared first on CVE Vulnerability.

]]> The inline-create rest resource in Jira before version 7.12.3 allows authenticated remote attackers to set the reporter in issues via a missing authorisation check.

The post CVE-2018-20826 appeared first on CVE Vulnerability.

]]> CVE-2018-19581 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19581/ Sun, 26 Feb 2023 06:48:13 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19581/ GitLab EE, versions 8.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure object reference vulnerability that allows a Guest user to set the weight of an issue they create.

The post CVE-2018-19581 appeared first on CVE Vulnerability.

]]> GitLab EE, versions 8.3 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, is vulnerable to an insecure object reference vulnerability that allows a Guest user to set the weight of an issue they create.

The post CVE-2018-19581 appeared first on CVE Vulnerability.

]]> CVE-2018-19578 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19578/ Sun, 26 Feb 2023 06:48:13 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19578/ GitLab EE, version 11.5 before 11.5.1, is vulnerable to an insecure object reference issue that permits a user with Reporter privileges to view the Jaeger Tracing Operations page.

The post CVE-2018-19578 appeared first on CVE Vulnerability.

]]> GitLab EE, version 11.5 before 11.5.1, is vulnerable to an insecure object reference issue that permits a user with Reporter privileges to view the Jaeger Tracing Operations page.

The post CVE-2018-19578 appeared first on CVE Vulnerability.

]]> CVE-2018-19569 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19569/ Sun, 26 Feb 2023 06:48:13 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19569/ GitLab CE/EE, versions 8.8 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an authorization vulnerability that allows access to the web-UI as a user using a Personal Access Token of any scope.

The post CVE-2018-19569 appeared first on CVE Vulnerability.

]]> GitLab CE/EE, versions 8.8 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an authorization vulnerability that allows access to the web-UI as a user using a Personal Access Token of any scope.

The post CVE-2018-19569 appeared first on CVE Vulnerability.

]]> CVE-2018-17210 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-17210/ Sun, 26 Feb 2023 06:47:22 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-17210/ An issue was discovered in PrinterOn Central Print Services (CPS) through 4.1.4. The core components that create and launch a print job do not perform complete verification of the session cookie that is supplied to them. As a result, an attacker with guest/pseudo-guest level permissions can bypass the session checks (that would otherwise logout a […]

The post CVE-2018-17210 appeared first on CVE Vulnerability.

]]> An issue was discovered in PrinterOn Central Print Services (CPS) through 4.1.4. The core components that create and launch a print job do not perform complete verification of the session cookie that is supplied to them. As a result, an attacker with guest/pseudo-guest level permissions can bypass the session checks (that would otherwise logout a low-privileged user) by calling the core print job components directly via crafted HTTP GET and POST requests.

The post CVE-2018-17210 appeared first on CVE Vulnerability.

]]> CVE-2018-16073 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-16073/ Sun, 26 Feb 2023 06:46:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-16073/ Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass site isolation via a crafted HTML page.

The post CVE-2018-16073 appeared first on CVE Vulnerability.

]]> Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass site isolation via a crafted HTML page.

The post CVE-2018-16073 appeared first on CVE Vulnerability.

]]> CVE-2018-16074 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-16074/ Sun, 26 Feb 2023 06:46:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-16074/ Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass site isolation via a crafted HTML page.

The post CVE-2018-16074 appeared first on CVE Vulnerability.

]]> Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass site isolation via a crafted HTML page.

The post CVE-2018-16074 appeared first on CVE Vulnerability.

]]> CVE-2018-16077 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-16077/ Sun, 26 Feb 2023 06:46:54 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-16077/ Object lifecycle issue in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass content security policy via a crafted HTML page.

The post CVE-2018-16077 appeared first on CVE Vulnerability.

]]> Object lifecycle issue in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass content security policy via a crafted HTML page.

The post CVE-2018-16077 appeared first on CVE Vulnerability.

]]>