CWE-829 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-829/ Sun, 26 Feb 2023 06:51:25 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-829 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-829/ 32 32 CVE-2018-8351 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8351/ Sun, 26 Feb 2023 06:51:25 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8351/ An information disclosure vulnerability exists when affected Microsoft browsers improperly allow cross-frame interaction, aka “Microsoft Browser Information Disclosure Vulnerability.” This affects Internet Explorer 11, Microsoft Edge, Internet Explorer 10.

The post CVE-2018-8351 appeared first on CVE Vulnerability.

]]> An information disclosure vulnerability exists when affected Microsoft browsers improperly allow cross-frame interaction, aka “Microsoft Browser Information Disclosure Vulnerability.” This affects Internet Explorer 11, Microsoft Edge, Internet Explorer 10.

The post CVE-2018-8351 appeared first on CVE Vulnerability.

]]> CVE-2018-7422 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7422/ Sun, 26 Feb 2023 06:51:02 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7422/ A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the ajax_path parameter to editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php, aka absolute path traversal.

The post CVE-2018-7422 appeared first on CVE Vulnerability.

]]> A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the ajax_path parameter to editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php, aka absolute path traversal.

The post CVE-2018-7422 appeared first on CVE Vulnerability.

]]> CVE-2018-18387 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-18387/ Sun, 26 Feb 2023 06:47:46 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-18387/ playSMS through 1.4.2 allows Privilege Escalation through Daemon abuse.

The post CVE-2018-18387 appeared first on CVE Vulnerability.

]]> playSMS through 1.4.2 allows Privilege Escalation through Daemon abuse.

The post CVE-2018-18387 appeared first on CVE Vulnerability.

]]> CVE-2018-17246 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-17246/ Sun, 26 Feb 2023 06:47:22 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-17246/ Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host […]

The post CVE-2018-17246 appeared first on CVE Vulnerability.

]]> Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.

The post CVE-2018-17246 appeared first on CVE Vulnerability.

]]> CVE-2018-15486 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-15486/ Sun, 26 Feb 2023 06:46:40 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-15486/ An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Local File Inclusion and File modification is possible through the open HTTP interface by modifying the name parameter of the file endpoint, aka KONE-02.

The post CVE-2018-15486 appeared first on CVE Vulnerability.

]]> An issue was discovered on KONE Group Controller (KGC) devices before 4.6.5. Unauthenticated Local File Inclusion and File modification is possible through the open HTTP interface by modifying the name parameter of the file endpoint, aka KONE-02.

The post CVE-2018-15486 appeared first on CVE Vulnerability.

]]> CVE-2018-12120 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-12120/ Sun, 26 Feb 2023 06:45:32 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-12120/ Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by default: When the debugger is enabled with `node –debug` or `node debug`, it listens to port 5858 on all interfaces by default. This may allow remote computers to attach to the debug port and evaluate arbitrary JavaScript. The default interface […]

The post CVE-2018-12120 appeared first on CVE Vulnerability.

]]> Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by default: When the debugger is enabled with `node –debug` or `node debug`, it listens to port 5858 on all interfaces by default. This may allow remote computers to attach to the debug port and evaluate arbitrary JavaScript. The default interface is now localhost. It has always been possible to start the debugger on a specific interface, such as `node –debug=localhost`. The debugger was removed in Node.js 8 and replaced with the inspector, so no versions from 8 and later are vulnerable.

The post CVE-2018-12120 appeared first on CVE Vulnerability.

]]> CVE-2018-11040 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-11040/ Sun, 26 Feb 2023 06:45:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-11040/ Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView for browser requests. Both are not enabled by default in Spring Framework nor Spring Boot, however, when MappingJackson2JsonView is configured […]

The post CVE-2018-11040 appeared first on CVE Vulnerability.

]]> Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView for browser requests. Both are not enabled by default in Spring Framework nor Spring Boot, however, when MappingJackson2JsonView is configured in an application, JSONP support is automatically ready to use through the “jsonp” and “callback” JSONP parameters, enabling cross-domain requests.

The post CVE-2018-11040 appeared first on CVE Vulnerability.

]]> CVE-2018-1000502 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-1000502/ Sun, 26 Feb 2023 06:44:36 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-1000502/ MyBB Group MyBB contains a File Inclusion vulnerability in Admin panel (Tools and Maintenance -> Task Manager -> Add New Task) that can result in Allows Local File Inclusion on modern PHP versions and Remote File Inclusion on ancient PHP versions. This attack appear to be exploitable via Must have access to admin panel. This […]

The post CVE-2018-1000502 appeared first on CVE Vulnerability.

]]> MyBB Group MyBB contains a File Inclusion vulnerability in Admin panel (Tools and Maintenance -> Task Manager -> Add New Task) that can result in Allows Local File Inclusion on modern PHP versions and Remote File Inclusion on ancient PHP versions. This attack appear to be exploitable via Must have access to admin panel. This vulnerability appears to have been fixed in 1.8.15.

The post CVE-2018-1000502 appeared first on CVE Vulnerability.

]]> CVE-2020-5295 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-5295/ Sun, 26 Feb 2023 06:42:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-5295/ In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, an attacker can exploit this vulnerability to read local files of an October CMS server. The vulnerability is only exploitable by an authenticated backend user with the `cms.manage_assets` permission. Issue has been patched in Build 466 (v1.0.466).

The post CVE-2020-5295 appeared first on CVE Vulnerability.

]]> In OctoberCMS (october/october composer package) versions from 1.0.319 and before 1.0.466, an attacker can exploit this vulnerability to read local files of an October CMS server. The vulnerability is only exploitable by an authenticated backend user with the `cms.manage_assets` permission. Issue has been patched in Build 466 (v1.0.466).

The post CVE-2020-5295 appeared first on CVE Vulnerability.

]]> CVE-2020-4561 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-4561/ Sun, 26 Feb 2023 06:42:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-4561/ IBM Cognos Analytics 11.0 and 11.1 DQM API allows submitting of all control requests in unauthenticated sessions. This allows a remote attacker who can access a valid CA endpoint to read and write files to the Cognos Analytics system. IBM X-Force ID: 183903.

The post CVE-2020-4561 appeared first on CVE Vulnerability.

]]> IBM Cognos Analytics 11.0 and 11.1 DQM API allows submitting of all control requests in unauthenticated sessions. This allows a remote attacker who can access a valid CA endpoint to read and write files to the Cognos Analytics system. IBM X-Force ID: 183903.

The post CVE-2020-4561 appeared first on CVE Vulnerability.

]]>