The vulnerability of the function implementing the ACL mechanism in the Gigabit Ethernet Management component of the Cisco IOS XE operating system allows a attacker to compromise the integrity of the protected information.

The vulnerability of the function that implements the ACL mechanism in the Gigabit Ethernet Management component of the Cisco IOS XE operating system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected...

The vulnerability of the Microsoft Dynamics 365 customer relationship management system, related to inadequate access control, allows a malicious individual to increase their privileges.

The vulnerability of the Microsoft Dynamics 365 customer relationship management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to increase their privileges by sending a specially crafted request to the vulnerable server...

The vulnerability of the InnoDB component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to cause service interruptions using the MySQL protocol...

The vulnerability of the ImageIO component (libjpeg) in Oracle Java SE and Java SE Embedded software platforms allows a hacker to cause a system failure.

The vulnerability of the ImageIO component libjpeg in Oracle Java SE and Java SE Embedded software is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the PIA Core Technology component of the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the PIA Core Technology component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data usi...

Authentication Bypass by Spoofing in express-cart

A deficiency in the access control in module express-cart =1.1.5 allows unprivileged users to add new users to the application as administrators...

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK allows a malicious actor to gain unauthorized access to data or cause service failures.

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to data or cause service failures using the HTTP protocol...

The vulnerability of the Java Server Faces component of the Oracle GlassFish Server software platform allows attackers to modify sensitive information or cause service failures.

The vulnerability of the Java Server Faces component of the Oracle GlassFish Server software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to modify protected information or cause service failures...

The vulnerability of the ION memory distribution subsystem of the Android operating system allows a hacker to modify data on the device and gain root privileges.

The vulnerability of the ION memory distribution subsystem of the Android operating system is related to deficiencies in access control between applications and the operating system. Exploiting this vulnerability allows a remote attacker to modify data on the device and gain root privileges throu...

The vulnerability of the SchRpcSetSecurity function in the Advanced Local Procedure Call interface of the Windows operating system’s task scheduler allows a malicious actor to execute malicious code with SYSTEM privileges.

The vulnerability of the SchRpcSetSecurity function in the Advanced Local Procedure Call ALPC interface of the Windows operating system’s task scheduler is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute malicious code with SYSTEM privileges...

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system, which allows a malicious actor to gain unauthorized access to protected data

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

The vulnerability of the com.privat.vpn.helper component of the software for accessing VPN services, PrivateVPN, allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the com.privat.vpnhelper component, which implements the XPC service for accessing the PrivateVPN service, is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with root privileges...

The vulnerability of the implementation of the commit-scenarios mechanism in the JunOS operating system allows a perpetrator to gain access to the device with root privileges.

The vulnerability of the Junos operating system’s commit-scenario mechanism is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain access to a device with root privileges without using a password, after reloading the specially crafted commit-scenari...

The vulnerability of the Microsoft Outlook email client, related to deficiencies in access control, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Outlook email client is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted email message...

The vulnerability of the microprogrammed surveillance camera software ACTi models series B, D, E, and I, due to lack of access control mechanisms, allows intruders to gain access to the device or cause malfunctions during maintenance.

The vulnerability of the microprogrammed surveillance camera software ACTi models series B, D, E, and I is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to alter the device’s settings by directly accessing the...

The vulnerability of the Conarc iChannel system for managing customer relationships, due to lack of access control, allows a hacker to obtain confidential information, modify configurations, or cause service interruptions.

The vulnerability of the Conarc iChannel system for managing customer relationships is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to obtain confidential information, modify configurations, or cause service failures by using the request...

The vulnerability of the Android operating system’s kernel, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of the Android operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Vulnerability of EMC Unisphere for VMAX Virtual Appliance, EMC VMAX Embedded Management, EMC VASA Virtual Appliance, and EMC Solutions Enabler Virtual Appliance systems lies in their lack of access control mechanisms. This vulnerability allows attackers to bypass authentication procedures.

The vulnerabilities of EMC Unisphere for VMAX Virtual Appliance, EMC VMAX Embedded Management, EMC VASA Virtual Appliance, and EMC Solutions Enabler Virtual Appliance are related to deficiencies in access control. Exploiting these vulnerabilities could allow a malicious actor to bypass...

The vulnerability of the sys_amd64 IRET Handler component in the FreeBSD operating system allows a hacker to trigger a service failure or enhance their privileges.

The vulnerability of the sysamd64 IRET Handler component in the FreeBSD operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges or cause a kernel failure...

The vulnerability of the software tools for backup and data restoration in NetBackup Appliance and NetBackup allows a malicious individual to execute arbitrary commands in a privileged mode. This vulnerability is related to deficiencies in access control.

The vulnerability of software tools for backup and data restoration in NetBackup Appliance and NetBackup lies in the lack of access control mechanisms root/admin privileges. Exploiting this vulnerability allows a malicious actor to remotely copy any file and execute arbitrary commands with...