Oracle Java SE and Java SE Embedded Access Control Error Vulnerability (CNVD-2019-26758)

Oracle Java SE and Oracle Java SE Embedded are both products of Oracle Corporation.Oracle Java SE is a Java platform for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments.Oracle Java SE Embedded is a Java platform that targets Java...

CVE-2018-20028

Contao 3.x before 3.5.37, 4.4.x before 4.4.31 and 4.6.x before 4.6.11 has Incorrect Access Control...

Oracle Marketing Component Access Control Error Vulnerability (CNVD-2019-29195)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. marketing is one of the Internet-based marketing...

Oracle Retail Applications Retail Convenience Store Back Office Access Control Error Vulnerability

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. The product includes inventory management, sales management and customer management , etc. Retail Convenience Store Back Office is one of the retail back office components. A securi...

Oracle BI Publisher Access Control Error Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's Oracle business innovation platform for enterprise and cloud environments. The platform provides middleware, software collection and other functions. BI Publisher formerly known as XML Publisher is one of the reporting...

CVE-2019-6554

Advantech WebAccess/SCADA, Versions 8.3.5 and prior. An improper access control vulnerability may allow an attacker to cause a denial-of-service condition...

Advantech WebAccess/SCADA Incorrect Access Control Vulnerability

Advantech WebAccess/SCADA is a set of SCADA software from Advantech based on browser architecture. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. An incorrect access control vulnerability exists in...

The vulnerability of the Capability Licensing Service, related to lack of access control, allows a violator to increase their privileges.

The vulnerability of the Capability Licensing Service is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to increase their privileges...

OPENSUSE-SU-2019:0163-1 Security update for python-slixmpp

This update for python-slixmpp fixes the following issue: Security issue fixed: - CVE-2019-1000021: Fixed incorrect Access Control vulnerability in XEP-0223 plugin bsc1124322...

Intel Graphics Driver for Windows User Mode Driver Access Control Vulnerability

Intel Graphics Driver for Windows is an Intel graphics card driver for the Windows platform.User Mode Driver is one of the user mode drivers. A security vulnerability exists in the User Mode Driver of the Intel Graphics Driver for Windows platform, which arises from the program's failure to enfor...

The vulnerability of the McAfee Agent for Linux client component, which allows a hacker to execute arbitrary commands.

The vulnerability of the McAfee Agent for Linux client component is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

FreeBSD : slixmpp -- improper access control (526d9642-3ae7-11e9-a669-8c164582fbac)

NVD reports : slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of th...

OPENSUSE-SU-2019:0169-1 Security update for python-slixmpp

This update for python-slixmpp fixes the following issue: Security issue fixed: - CVE-2019-1000021: Fixed incorrect Access Control vulnerability in XEP-0223 plugin bsc1124322 This update was imported from the openSUSE:Leap:15.0:Update update project...

Security update for python-slixmpp (low)

openSUSE Security Update: Security update for python-slixmpp Announcement ID: openSUSE-SU-2019:0169-1 Rating: low References: 1124322 Cross-References: CVE-2019-1000021 Affected Products: openSUSE Backports SLE-15 An update that fixes one vulnerability is now available. Description: This update f...

CVE-2019-1000011

API Platform version from 2.2.0 to 2.3.5 contains an Incorrect Access Control vulnerability in GraphQL delete mutations that can result in a user authorized to delete a resource can delete any resource. This attack appears to be exploitable via the user must be authorized. This vulnerability...

Improper access control

Gitea version 1.6.2 and earlier contains a Incorrect Access Control vulnerability in Delete/Edit file functionallity that can result in the attacker deleting files outside the repository he/she has access to. This attack appears to be exploitable via the attacker must get write access to "any"...

CVE-2019-1000021

slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of the contacts of...

Cisco SD-WAN Solution Privilege Permission and Access Control Vulnerability (CNVD-2020-14721)

Cisco vBond Orchestrator Software and other products are from Cisco. cisco vBond Orchestrator Software is a set of security network extension management software. vEdge 100 Series Routers is a 100 series router product. SD-WAN Solution is a set of network extension solution running in it. A...

The vulnerability of the “Outside In” component in Oracle’s software development kit (SDK) allows a hacker to trigger a service failure.

The vulnerability of the Outside component in Oracle’s software development kit SDK is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to cause a service failure using the HTTP protocol...

charactercounttool.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-719443 Description| Value ---|--- Affected Website:| charactercounttool.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3...