The vulnerability of the Saperion Web Client web application lies in its lack of access control mechanisms, which allows attackers to execute arbitrary code.

The vulnerability of the Saperion Web Client web application is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with elevated privileges remotely...

The vulnerability of microprogramming software in media devices. Valve’s Steam Link allows a intruder to gain access to the device.

The vulnerability of Valve’s Steam Link media controller software relates to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to gain access to the device with root privileges, using the IPv6 TCP port 22...

Gemalto SafeNet Authentication Service TokenValidator Proxy Agent Elevation of Privilege Vulnerability

Gemalto SafeNet Authentication Service TokenValidator Proxy Agent is a proxy program from Gemalto USA. The program implements proxy authentication requests from other proxies to the SAS. A security vulnerability exists in the Gemalto SafeNet Authentication Service TokenValidator Proxy Agent that...

foreman: models with a 'belongs_to' association to an Organization do not verify association belongs to that Organization

It was found that foreman in Satellite 6 did not properly enforce access controls on certain resources. An attacker with access to the API and knowledge of the resource name can access resources in other organizations...

The vulnerability of the DashboardFileReceiveServlet in the network management system by Brocade Network Advisor allows a attacker to upload a malicious file into the file system, where it can be executed.

The vulnerability of the DashboardFileReceiveServlet in the IP and SAN network management system exists due to an incorrect path name limitation in the access control mechanism. Exploiting this vulnerability allows a malicious actor to download a malicious file into the file system, where it can ...

The vulnerability of Broadcom’s Wi-Fi driver for Android operating systems allows attackers to increase their privileges.

The vulnerability of Broadcom’s Wi-Fi driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the HP SiteScope computing resource monitoring system, related to inadequate access control, allows a perpetrator to disclose confidential data.

The vulnerability of the HP SiteScope computing resource monitoring system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating remotely with only read-only access, to view all SiteScope interfaces and “monitors,” thereby exposing...

The vulnerability of the initial loader of devices running the HTC Android operating system allows a hacker to increase their privileges.

The vulnerability of the initial loader on HTC Android devices is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system is related to lack of access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the graphical component of the Windows operating system, Win32k, allows a hacker to execute code in kernel mode and gain increased privileges.

The vulnerability of the graphical component of the Windows operating system, Win32k, is related to deficiencies in access control. Exploiting this vulnerability allows a local attacker to execute code at the kernel level and increase their privileges through a specially created application...

The vulnerability of the software for working with the Mainframe Enablers ResourcePak Base file server, related to deficiencies in access control, allows a perpetrator to increase their privileges and obtain information necessary for compromising the target system.

The vulnerability of the software for working with Mainframe Enablers ResourcePak Base is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and obtain information necessary for compromising the target system...

The vulnerability of software tools for backup and data restoration in NetBackup Appliance and NetBackup, related to lack of access control, allows attackers to perform file writing in a privileged mode.

The vulnerability of software tools for backup and data restoration in NetBackup Appliance and NetBackup is related to lack of access control. Exploiting this vulnerability allows a malicious actor to perform file writing in a privileged mode, using the “bprd” process...

The vulnerability of IBM DB2 database management systems, including IBM DB2 Connect (and IBM DB2 Connect servers), is related to deficiencies in access control. This allows attackers to obtain elevated privileges.

The vulnerabilities of IBM DB2 database management systems, including IBM DB2 Connect and the IBM DB2 Connect server, are related to deficiencies in access control. Exploiting these vulnerabilities can allow an attacker, operating locally, to gain elevated privileges and re-record DB2-formatted...

The vulnerability of the libjhead library of the Android Media Framework service allows a hacker to execute arbitrary code.

The vulnerability of the libjhead library in the Android operating system’s Media Framework is related to lack of access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of component mm.c (arch/x86/mm.c) in the Xen hypervisor and the XenServer server virtualization platform allows a perpetrator to increase their privileges.

The vulnerability of component mm.c arch/x86/mm.c in the Xen hypervisor and the XenServer server virtualization platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating locally, to enhance their privileges by using functions related t...

The vulnerability of the Surveillance Station network storage component on QNAP TS212P allows a intruder to gain unauthorized access to the device and execute arbitrary commands.

The vulnerability of the Surveillance Station network storage component of QNAP TS212P is related to deficiencies in access control for device functions. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to the device and execute arbitrary commands...

The vulnerability of the I2C operating system in Android CAF-releases allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the I2C interface in the Android CAF-fixes operating system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Android operating system from the CAF repository exists due to deficiencies in access control to the file system. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Linux operating system Android from the CAF repository is related to deficiencies in access control to the file system. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the audio driver of the mobile application MSM for the Android operating system allows a hacker to trigger a stack overflow.

The vulnerability of the Android mobile application’s audio driver relates to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to select certain values in the user’s environment, which may lead to stack overflow...

Vulnerability in the MPEG-2 decoder of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability in the MPEG-2 decoder of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...