The vulnerability of the eProcurement sub-component of the PeopleSoft Enterprise SCM eProcurement package from the Oracle PeopleSoft products allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the eProcurement sub-component of the PeopleSoft Enterprise SCM eProcurement package from the Oracle PeopleSoft products is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected...

Vulnerability of the Server component: The C API of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: C API component of the Oracle MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to trigger a service failure.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the sub-component “Engineering Change Order” of the Oracle Installed Base component in the Oracle E-Business Suite system allows a malicious actor to gain access to modify, add, or delete data.

The vulnerability of the Engineering Change Order component of the Oracle Installed Base component in the Oracle E-Business Suite system for enterprise automation activities is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to...

The vulnerability of the Windows CloudStore storage service on Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows CloudStore storage service on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

The vulnerability of the OpenJDK project for the Java programming language stems from lack of access control, allowing attackers to gain access to confidential data.

The vulnerability of the OpenJDK project for the Java programming language is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to confidential data...

Vulnerability of the Server component: The Replication function of the Oracle MySQL Server database management system, which allows attackers to gain unauthorized access to the device.

The vulnerability of the Oracle MySQL Server database management system’s replication component is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device using the MySQL protocol...

The vulnerability of the hardware abstraction driver of the software tool for determining processor characteristics allows attackers to exploit their privileges, disclose sensitive information, or cause service failures.

The vulnerability of the software-based hardware abstraction driver for the Intel Processor Identification Utility is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges, disclose sensitive information, or cause service failures...

The vulnerability of the setsystemparams procedure of the Ghostscript file conversion program allows a attacker to execute arbitrary commands or gain access to the file system.

The vulnerability of the setsystemparams procedure in the Ghostscript program for converting PostScript format files is related to deficiencies in access control. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary commands or gain access to the file system ...

The vulnerability of the Smart Tunnel component of the microprogramming software for Cisco Adaptive Security Appliances allows a attacker to elevate their privileges to the root level.

The vulnerability of the Smart Tunnel component of the microprogramming software for Cisco Adaptive Security Appliances is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...

The vulnerability of the SyncController.dll library on the Windows operating system allows a hacker to elevate their privileges and execute arbitrary code.

The vulnerability of the SyncController.dll library on the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code through a specially created application...

PT-2019-3052 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation of privilege in SyncController.dll, allowing an attacker to run arbitrary code with elevated privileges. To exploit this, an attacker would need to run ...

The vulnerability of the Data Store component of the Oracle Berkeley DB database management system allows a hacker to gain full control over the system.

The vulnerability of the Data Store component of the Oracle Berkeley DB database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the system...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a attacker to cause the system to freeze or partially fail to operate.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause the system to become unresponsive or partially fail to operate...

Open edX platform security feature issue vulnerability

The Open edX platform is an open source course management system CMS. The system can be used for MOOCs Massive Open Online Courses as well as smaller courses and training modules. A security feature issue vulnerability exists in the installation process in versions of Open edX prior to 2017-01-10...

The vulnerability of the Java VM component of the Oracle Database Server management system allows a hacker to gain access to modify, add, or delete data, or to cause service failures.

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain access to modify, add, or delete data, or cause service interruptions...

The vulnerability of the REST API implementation of the Cisco Application Policy Infrastructure Controller, which allows a hacker to elevate their privileges to the root level.

The vulnerability of the REST API implementation of the Cisco Application Policy Infrastructure Controller relates to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor to elevate their privileges to root level by downloading maliciou...

The vulnerability of the installation mechanism for the software set for developing Intel Data Center Manager SDK allows unauthorized access, enabling attackers to enhance their privileges.

The vulnerability of the installation mechanism for the software development tools for Intel Data Center Manager SDK is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...

The vulnerability of the Open Cloud Integrity Technology, a tool for creating cloud services, stems from deficiencies in access control within the certification database. This allows attackers to disclose protected information.

The vulnerability of the Open Cloud Integrity Technology, which is used to create cloud services, is related to deficiencies in access control within the certification database. Exploiting this vulnerability could allow attackers to disclose protected information...