The vulnerability of the CLI analyzer in the Cisco IOS XE operating system allows a hacker to execute arbitrary commands.

The vulnerability of the Cisco IOS XE operating system’s CLI analyzer is related to deficiencies in access control. Exploiting this vulnerability allows a person with privileges at the EXEC mode level to gain access to the device’s Linux shell and execute arbitrary commands with root privileges...

The vulnerability of the CLI analyzer in the Cisco IOS XE operating system allows a hacker to execute arbitrary commands.

The vulnerability of the Cisco IOS XE operating system’s CLI analyzer is related to deficiencies in access control. Exploiting this vulnerability allows a person with privileges at the EXEC mode level to gain access to the device’s Linux shell and execute arbitrary commands with root privileges...

The vulnerability in the web interface of the Cisco IOS XE operating system, which allows a hacker to increase their privileges.

The vulnerability of the Cisco IOS operating system’s web interface is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by using the VTY interface...

PT-2018-1313

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insufficient access control in the Win32k component of Windows operating systems, which can be exploited to elevate privileges using a specially crafted application...

The vulnerability of the DLL-file loading mechanism of the cryptographic protection tool ViPNet Client, which allows a hacker to execute arbitrary code with administrator privileges.

The vulnerability of the DLL file loading mechanism of the ViPNet Client encryption protection tool is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary code with administrator privileges using a specially crafted DLL file placed in t...

The vulnerability of the Saperion Web Client web application lies in its lack of access control mechanisms, which allows attackers to execute arbitrary code.

The vulnerability of the Saperion Web Client web application is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with elevated privileges remotely...

The vulnerability of microprogramming software in media devices. Valve’s Steam Link allows a intruder to gain access to the device.

The vulnerability of Valve’s Steam Link media controller software relates to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to gain access to the device with root privileges, using the IPv6 TCP port 22...

Gemalto SafeNet Authentication Service TokenValidator Proxy Agent Elevation of Privilege Vulnerability

Gemalto SafeNet Authentication Service TokenValidator Proxy Agent is a proxy program from Gemalto USA. The program implements proxy authentication requests from other proxies to the SAS. A security vulnerability exists in the Gemalto SafeNet Authentication Service TokenValidator Proxy Agent that...

foreman: models with a 'belongs_to' association to an Organization do not verify association belongs to that Organization

It was found that foreman in Satellite 6 did not properly enforce access controls on certain resources. An attacker with access to the API and knowledge of the resource name can access resources in other organizations...

The vulnerability of the DashboardFileReceiveServlet in the network management system by Brocade Network Advisor allows a attacker to upload a malicious file into the file system, where it can be executed.

The vulnerability of the DashboardFileReceiveServlet in the IP and SAN network management system exists due to an incorrect path name limitation in the access control mechanism. Exploiting this vulnerability allows a malicious actor to download a malicious file into the file system, where it can ...

The vulnerability of the initial loader of devices running the HTC Android operating system allows a hacker to increase their privileges.

The vulnerability of the initial loader on HTC Android devices is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of Broadcom’s Wi-Fi driver for Android operating systems allows attackers to increase their privileges.

The vulnerability of Broadcom’s Wi-Fi driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the HP SiteScope computing resource monitoring system, related to inadequate access control, allows a perpetrator to disclose confidential data.

The vulnerability of the HP SiteScope computing resource monitoring system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating remotely with only read-only access, to view all SiteScope interfaces and “monitors,” thereby exposing...

The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the libmpeg2 library in the Media Framework of the Android operating system is related to lack of access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the graphical component of the Windows operating system, Win32k, allows a hacker to execute code in kernel mode and gain increased privileges.

The vulnerability of the graphical component of the Windows operating system, Win32k, is related to deficiencies in access control. Exploiting this vulnerability allows a local attacker to execute code at the kernel level and increase their privileges through a specially created application...

The vulnerability of software tools for backup and data restoration in NetBackup Appliance and NetBackup, related to lack of access control, allows attackers to perform file writing in a privileged mode.

The vulnerability of software tools for backup and data restoration in NetBackup Appliance and NetBackup is related to lack of access control. Exploiting this vulnerability allows a malicious actor to perform file writing in a privileged mode, using the “bprd” process...

The vulnerability of the software for working with the Mainframe Enablers ResourcePak Base file server, related to deficiencies in access control, allows a perpetrator to increase their privileges and obtain information necessary for compromising the target system.

The vulnerability of the software for working with Mainframe Enablers ResourcePak Base is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and obtain information necessary for compromising the target system...

The vulnerability of IBM DB2 database management systems, including IBM DB2 Connect (and IBM DB2 Connect servers), is related to deficiencies in access control. This allows attackers to obtain elevated privileges.

The vulnerabilities of IBM DB2 database management systems, including IBM DB2 Connect and the IBM DB2 Connect server, are related to deficiencies in access control. Exploiting these vulnerabilities can allow an attacker, operating locally, to gain elevated privileges and re-record DB2-formatted...

The vulnerability of the libjhead library of the Android Media Framework service allows a hacker to execute arbitrary code.

The vulnerability of the libjhead library in the Android operating system’s Media Framework is related to lack of access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of component mm.c (arch/x86/mm.c) in the Xen hypervisor and the XenServer server virtualization platform allows a perpetrator to increase their privileges.

The vulnerability of component mm.c arch/x86/mm.c in the Xen hypervisor and the XenServer server virtualization platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating locally, to enhance their privileges by using functions related t...