Open-Xchange OX App Suite Access Control Error Vulnerability (CNVD-2019-15677)

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. An Access Control Error vulnerability exists in Open-Xchange OX App Suite 7.8.3 and prior versions. The vulnerabilit...

Open-Xchange OX App Suite Access Control Error Vulnerability (CNVD-2019-15676)

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. An Access Control Error vulnerability exists in Open-Xchange GmbH OX App Suite versions 7.8.3 and earlier. The...

Open-Xchange OX App Suite Access Control Error Vulnerability

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. An Access Control Error vulnerability exists in Open-Xchange OX App Suite version 7.8.3. The vulnerability arises fr...

Access Control Error Vulnerability in Multiple Schneider Electric Products

Schneider Electric Modicon M100 is a programmable logic controller, Schneider Electric Modicon LMC078 is a motion controller, and Schneider Electric ATV IMC drive controller is a drive controller. Schneider Electric Modicon M100 is a programmable logic controller.Schneider Electric Modicon LMC078...

WordPress WPGraphQL Access Control Error Vulnerability

WPGraphQL is a free open source WordPress plugin that provides an extensible GraphQL architecture and API for any WordPress site. WordPress WPGraphQL suffers from an Access Control Error vulnerability that can be exploited by an attacker to post a comment on any post...

Citrix Systems Workspace App Access Control Error Vulnerability

Citrix Systems Workspace App formerly known as Receiver is an application from Citrix Systems, Inc. that provides secure access to applications, desktops, and data. An access control error vulnerability exists in versions of Citrix Systems Workspace App prior to 1904 and Receiver 4.9 cumulative...

Access Control Error Vulnerability in Multiple Intel Products

Intel Converged Security and Management Engine CSME, etc. are products of Intel Corporation, USA. Intel Converged Security and Management Engine is a security management engine. Intel Server Platform Services SPS is a server platform service program. Intel Converged Security and Management Engine...

Schneider Electric NET55XX Encoder Access Control Error Vulnerability

The Schneider Electric NET55XX Encoder is a video encoder from Schneider Electric France. An access control error vulnerability exists in the Schneider Electric NET55XX Encoder using firmware versions prior to 2.1.9.7. When a remote attacker sends a malicious request to the encoder webUI,...

GitLab CE and EE Incorrect Access Control Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An Access Control Error vulnerability exists in GitLab...

Xiaomi Yeelight Smart AI Speaker Access Control Error Vulnerability

Xiaomi Yeelight Smart AI Speaker is a smart speaker from Chinese company Xiaomi Technology Xiaomi. An access control error vulnerability exists in Xiaomi Yeelight Smart AI Speaker version 3.3.100074. The vulnerability stems from a network system or product not properly restricting access to...

Cisco Identity Services Engine Access Control Error Vulnerability (CNVD-2019-14702)

Cisco Identity Services Engine ISE is an identity-based environment awareness platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. The Cisco Identity Services...

Gemalto Ezio Server Access Control Error Vulnerability

Gemalto Ezio Server is an authentication server from Gemalto USA. An access control error vulnerability exists in Gemalto Ezio Server versions prior to 3.1.0, which can be exploited by an attacker to access unauthorized resources...

Seagate NAS OS Access Control Error Vulnerability

Seagate NAS OS is a NAS Network Attached Storage operating system from Seagate USA. An access control error vulnerability exists in /api/external/7.0/system.System.getinfos in the Seagate NAS OS 4.3.15.1 file. The vulnerability arises from the network system or product not properly restricting...

CVE-2019-1649

A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local attacker to write a modified firmware image to the component. This vulnerability affects multiple Cisco products that...

Cybozu Garoon Access Control Error Vulnerability (CNVD-2019-12695)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An access control error vulnerability exists in Cybozu Garoon versions 4.0.0 through 4.10.1. The vulnerability...

The vulnerability of the OpenJDK application development software suite in Java language lies in access control errors, which allow attackers to disclose protected information or circumvent restrictions within the isolated software environment.

The vulnerability of the OpenJDK application development software suite in Java language is related to errors in access control when code is executed from untrusted sources. Exploiting this vulnerability can allow a malicious actor to disclose information or circumvent restrictions within a...

The vulnerability of the Windows operating system’s LUAFV driver allows a hacker to execute arbitrary code.

The vulnerability of the LUAFV driver luafv.sys in the Windows operating system is related to access control errors. Exploiting this vulnerability allows a perpetrator to execute arbitrary code using a specially created application...

Oracle Java SE Access Control Error Vulnerability (CNVD-2019-26757)

Oracle Java SE is a U.S. Oracle Oracle company for the development and deployment of desktop, server and embedded devices and real-time environments in the Java application. An Access Control Error vulnerability exists in the 2D subcomponent of the component in Oracle Java SE versions 7u211 and...

Oracle Commerce Platform Component Access Control Error Vulnerability (CNVD-2019-40810)

Oracle Commerce is the United States Oracle Oracle company's set of e-business solutions. Commerce Platform is one of them to provide a multi-functional e-business platform components. An access control error vulnerability exists in the Oracle Commerce Platform component. An attacker could exploi...

Oracle E-Business Suite Common Applications Component Access Control Error Vulnerability

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle Corporation. The software provides customer relationship management, service management, financial management, etc. Common Applications also known as Oracle Common Application...