VirtualBox Full Control

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization tool is related to lack of access control mechanisms. Exploiting this vulnerability can allow an attacker to gain full control over the application...

Windows Admin Center Privilege Escalation

The vulnerability of the Windows Admin Center server management tool is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

Cisco IOS XE ACL Data Compromise

The vulnerability of the function that implements the ACL mechanism in the Gigabit Ethernet Management component of the Cisco IOS XE operating system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected...

Microsoft Dynamics 365 Privilege Escalation

The vulnerability of the Microsoft Dynamics 365 customer relationship management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to increase their privileges by sending a specially crafted request to the vulnerable server...

ImageIO libjpeg DoS

The vulnerability of the ImageIO component libjpeg in Oracle Java SE and Java SE Embedded software is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

MySQL InnoDB DoS

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to cause service interruptions using the MySQL protocol...

PIA Core Technology Unauthenticated Access

The vulnerability of the PIA Core Technology component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data usi...

Authentication Bypass by Spoofing in express-cart

A deficiency in the access control in module express-cart =1.1.5 allows unprivileged users to add new users to the application as administrators...

Outside In Filters Component Unauthorized Access

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to data or cause service failures using the HTTP protocol...

Oracle GlassFish Server Java Server Faces Information Disclosure

The vulnerability of the Java Server Faces component of the Oracle GlassFish Server software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to modify protected information or cause service failures...

ION memory distribution subsystem Android Root Privilege Modification

The vulnerability of the ION memory distribution subsystem of the Android operating system is related to deficiencies in access control between applications and the operating system. Exploiting this vulnerability allows a remote attacker to modify data on the device and gain root privileges throu...

Windows Task Scheduler SchRpcSetSecurity Code Execution

The vulnerability of the SchRpcSetSecurity function in the Advanced Local Procedure Call ALPC interface of the Windows operating system’s task scheduler is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute malicious code with SYSTEM privileges...

Oracle CRM Technical Foundation Preferences Unauthorized Access

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

PrivateVPN com.privat.vpn.helper Code Execution Root Privileges

The vulnerability of the com.privat.vpnhelper component, which implements the XPC service for accessing the PrivateVPN service, is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with root privileges...

JunOS commit-scenarios Root Privilege Access

The vulnerability of the Junos operating system’s commit-scenario mechanism is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain access to a device with root privileges without using a password, after reloading the specially crafted commit-scenari...

Microsoft Outlook Code Execution

The vulnerability of the Microsoft Outlook email client is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted email message...

ACTi Surveillance Camera Access Control

The vulnerability of the microprogrammed surveillance camera software ACTi models series B, D, E, and I is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to alter the device’s settings by directly accessing the...

Conarc iChannel Access Control Info Disclosure

The vulnerability of the Conarc iChannel system for managing customer relationships is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to obtain confidential information, modify configurations, or cause service failures by using the request...

Android kernel Privilege Escalation

The vulnerability of the Android operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

EMC Unisphere Access Control Bypass

The vulnerabilities of EMC Unisphere for VMAX Virtual Appliance, EMC VMAX Embedded Management, EMC VASA Virtual Appliance, and EMC Solutions Enabler Virtual Appliance are related to deficiencies in access control. Exploiting these vulnerabilities could allow a malicious actor to bypass...