PT-2019-1255 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.13 and prior Description: The issue is related to errors in access control within the Server component of Oracle MySQL. It allows a remote attacker to gain unauthorized access to protected data using network protocol...

Cisco Policy Suite Access Control Error Vulnerability

Cisco Policy Suite CPS is the United States Cisco Cisco company's set of next-generation policy management solutions. The program provides user-based business rules, applications and real-time management of network resources and other functions. policy and Charging Rules Function PCRF is one of t...

Apache Thrift Node.js static web server access control error vulnerability

Apache Thrift is the United States Apache Apache Software Foundation for cross-platform development of a framework . Node.js static web server is one of the static web server . An access control error vulnerability exists in the Apache Thrift Node.js static web server versions 0.9.2 through 0.11....

MicroWorld Technologies eScan eScan Agent Application Access Control Error Vulnerability

MicroWorld Technologies eScan is a suite of antivirus software from MicroWorld, USA. It protects against spyware, malware, spam, etc. eScan Agent Application MWAGENT.EXE is one of the agent-side applications. An Access Control Error vulnerability exists in eScan Agent Application MWAGENT.EXE...

TOSHIBA Home Gateway HEM-GW26A and TOSHIBA Home Gateway HEM-GW16A Access Control Error Vulnerabilities

TOSHIBA Home Gateway HEM-GW26A and TOSHIBA Home Gateway HEM-GW16A are both home gateway products from Toshiba Japan. An access control error vulnerability exists in TOSHIBA Home Gateway HEM-GW26A version 1.2.9 and earlier and TOSHIBA Home Gateway version 1.2.9 and earlier, which can be exploited ...

IBM InfoSphere Information Server Access Control Error Vulnerability

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. An access control error vulnerability exists in IBM InfoSphere Information Server, which can be exploited b...

Rockwell Automation Allen-Bradley PowerMonitor 1000 Access Control Error Vulnerability

Rockwell Automation Allen-Bradley PowerMonitor 1000 is a power monitoring device from Rockwell Automation. An access control error vulnerability exists in the Web pages of the Rockwell Automation Allen-Bradley PowerMonitor 1000, which can be exploited by an attacker to add a new user with...

Google Android DIAG Access Control Error Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which DIAG is a diagnostic component. An access control error vulnerability exists in DIAG in Android. No detailed vulnerability details are provided at this time...

Access Control Error Vulnerability in Multiple Qualcomm Snapdragon Products (CNVD-2018-24840)

The Qualcomm MDM9206 and others are products of Qualcomm Incorporated of the U.S. The Qualcomm MDM9206 is a central processing unit CPU.The SDX24 is a modem. An access control error vulnerability exists in the kernel of multiple Qualcomm Snapdragon products, which could be exploited by an attacke...

Buffalo TS5600D1206 Access Control Error Vulnerability

The Buffalo TS5600D1206 is a network storage device from the Buffalo Group of Japan. An access control error vulnerability exists in the nasapi in the Buffalo TS5600D1206 version 3.61-0.10, which can be exploited by an attacker to bypass authentication by sending a modified HTTP Host packet heade...

Buffalo TS5600D1206 Access Control Error Vulnerability (CNVD-2019-00678)

The Buffalo TS5600D1206 is a network storage device from the Buffalo Group of Japan. An access control error vulnerability exists in the nasapi in the Buffalo TS5600D1206 version 3.61-0.10, which can be exploited by an attacker to call a dangerous internal function with the 'method' parameter...

Buffalo TS5600D1206 Access Control Error Vulnerability (CNVD-2019-00673)

The Buffalo TS5600D1206 is a network storage device from the Buffalo Group of Japan. An access control error vulnerability exists in the getportalinfo method in the Buffalo TS5600D1206 version 3.61-0.10, which can be exploited by an attacker to determine sensitive device information by sending a...

The vulnerability of the REST API interface of the FortiOS operating system allows a perpetrator with the “read-only” privilege to disclose administrator passwords with the “read-write” privilege.

The vulnerability of the REST API interface of the FortiOS operating system is caused by access control errors. Exploiting this vulnerability allows a malicious actor, who operates remotely and has privileges for “only reading”, to obtain information about administrator passwords with privileges...

Atlassian JIRA Access Control Error Vulnerability

JIRA is a tool developed by the Australian company Atlassian for defect tracking, issue tracking and project management. An Access Control Error vulnerability exists in Atlassian JIRA, which can be exploited by a remote attacker who has gained administrator session access to access certain...

Intel QuickAssist Technology for Linux Access Control Error Vulnerability

Intel QuickAssist Technology for Linux is a Linux-based data management technology from Intel Corporation that enhances the security and compression of dynamic and static data in cloud, network, big data and storage applications. An Access Control Error vulnerability exists in the driver stack in...

The vulnerability of the TCP-server in the SIMATIC WinCC SCADA system allows a intruder to increase their privileges.

The vulnerability of the TCP-server in the SIMATIC WinCC SCADA system is related to access control errors. Exploiting this vulnerability can allow an attacker, operating remotely, to enhance their privileges by using the TCP-port 5678...

Cisco Email Security Appliance AsyncOS Software Access Control Error Vulnerability

Cisco Email Security Appliance ESA is a set of email security appliances from Cisco USA. The appliance provides spam protection, email encryption, data loss prevention, etc. AsyncOS Software is a set of operating systems used in it. An access control error vulnerability exists in the anti-spam...

Oracle MySQL Client Component Access Control Error Vulnerability

Oracle MySQL is an open source relational database management system from Oracle, MySQL Client is a client component. An access control error vulnerability exists in the Oracle MySQL Client component. An attacker could exploit this vulnerability to unauthorized update, insert, or delete data,...

Oracle PeopleSoft Products PeopleSoft HRMS Component Access Control Error Vulnerability

Oracle PeopleSoft Products is a set of enterprise human capital management solutions from Oracle, which provides human capital management, financial management, supplier relationship management, etc. PeopleSoft HRMS is one of the HRMS components. An access control error vulnerability exists in th...

Oracle Financial Services Applications FLEXCUBE Enterprise Limits and Collateral Management component access control error vulnerability (CNVD-2019-39924)

Oracle Financial Services Applications is Oracle's suite of financial services software that combines core banking, online banking and property management. FLEXCUBE Enterprise Limits and Collateral Management is a component of FLEXCUBE that is used to manage real-time online exposure of products...