Oracle Enterprise Manager Products Suite Enterprise Manager Ops Center Component Access Control Error Vulnerability

Oracle Enterprise Manager Products Suite is a set of Oracle's on-premise management platform. Enterprise Manager Ops Center is one of the enterprise data center monitoring and management components. An access control error vulnerability exists in the Oracle Enterprise Manager Products Suite...

Open-Xchange OX App Suite Access Control Error Vulnerability (CNVD-2019-15676)

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. An Access Control Error vulnerability exists in Open-Xchange GmbH OX App Suite versions 7.8.3 and earlier. The...

Open-Xchange OX App Suite Access Control Error Vulnerability (CNVD-2019-15677)

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. An Access Control Error vulnerability exists in Open-Xchange OX App Suite 7.8.3 and prior versions. The vulnerabilit...

Open-Xchange OX App Suite Access Control Error Vulnerability

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to manage email, tasks, files, etc. more intuitively. An Access Control Error vulnerability exists in Open-Xchange OX App Suite version 7.8.3. The vulnerability arises fr...

Access Control Error Vulnerability in Multiple Schneider Electric Products

Schneider Electric Modicon M100 is a programmable logic controller, Schneider Electric Modicon LMC078 is a motion controller, and Schneider Electric ATV IMC drive controller is a drive controller. Schneider Electric Modicon M100 is a programmable logic controller.Schneider Electric Modicon LMC078...

WordPress WPGraphQL Access Control Error Vulnerability

WPGraphQL is a free open source WordPress plugin that provides an extensible GraphQL architecture and API for any WordPress site. WordPress WPGraphQL suffers from an Access Control Error vulnerability that can be exploited by an attacker to post a comment on any post...

Schneider Electric NET55XX Encoder Access Control Error Vulnerability

The Schneider Electric NET55XX Encoder is a video encoder from Schneider Electric France. An access control error vulnerability exists in the Schneider Electric NET55XX Encoder using firmware versions prior to 2.1.9.7. When a remote attacker sends a malicious request to the encoder webUI,...

Citrix Systems Workspace App Access Control Error Vulnerability

Citrix Systems Workspace App formerly known as Receiver is an application from Citrix Systems, Inc. that provides secure access to applications, desktops, and data. An access control error vulnerability exists in versions of Citrix Systems Workspace App prior to 1904 and Receiver 4.9 cumulative...

Access Control Error Vulnerability in Multiple Intel Products

Intel Converged Security and Management Engine CSME, etc. are products of Intel Corporation, USA. Intel Converged Security and Management Engine is a security management engine. Intel Server Platform Services SPS is a server platform service program. Intel Converged Security and Management Engine...

GitLab CE and EE Incorrect Access Control Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An Access Control Error vulnerability exists in GitLab...

Xiaomi Yeelight Smart AI Speaker Access Control Error Vulnerability

Xiaomi Yeelight Smart AI Speaker is a smart speaker from Chinese company Xiaomi Technology Xiaomi. An access control error vulnerability exists in Xiaomi Yeelight Smart AI Speaker version 3.3.100074. The vulnerability stems from a network system or product not properly restricting access to...

Cisco Identity Services Engine Access Control Error Vulnerability (CNVD-2019-14702)

Cisco Identity Services Engine ISE is an identity-based environment awareness platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. The Cisco Identity Services...

Gemalto Ezio Server Access Control Error Vulnerability

Gemalto Ezio Server is an authentication server from Gemalto USA. An access control error vulnerability exists in Gemalto Ezio Server versions prior to 3.1.0, which can be exploited by an attacker to access unauthorized resources...

Seagate NAS OS Access Control Error Vulnerability

Seagate NAS OS is a NAS Network Attached Storage operating system from Seagate USA. An access control error vulnerability exists in /api/external/7.0/system.System.getinfos in the Seagate NAS OS 4.3.15.1 file. The vulnerability arises from the network system or product not properly restricting...

CVE-2019-1649

A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local attacker to write a modified firmware image to the component. This vulnerability affects multiple Cisco products that...

Cybozu Garoon Access Control Error Vulnerability (CNVD-2019-12695)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An access control error vulnerability exists in Cybozu Garoon versions 4.0.0 through 4.10.1. The vulnerability...

The vulnerability of the OpenJDK application development software suite in Java language lies in access control errors, which allow attackers to disclose protected information or circumvent restrictions within the isolated software environment.

The vulnerability of the OpenJDK application development software suite in Java language is related to errors in access control when code is executed from untrusted sources. Exploiting this vulnerability can allow a malicious actor to disclose information or circumvent restrictions within a...

The vulnerability of the Windows operating system’s LUAFV driver allows a hacker to execute arbitrary code.

The vulnerability of the LUAFV driver luafv.sys in the Windows operating system is related to access control errors. Exploiting this vulnerability allows a perpetrator to execute arbitrary code using a specially created application...

Oracle Java SE Access Control Error Vulnerability (CNVD-2019-26757)

Oracle Java SE is a U.S. Oracle Oracle company for the development and deployment of desktop, server and embedded devices and real-time environments in the Java application. An Access Control Error vulnerability exists in the 2D subcomponent of the component in Oracle Java SE versions 7u211 and...

Oracle Java SE and Java SE Embedded Access Control Error Vulnerability (CNVD-2019-26750)

Oracle Java SE and Oracle Java SE Embedded are both products of Oracle Corporation.Oracle Java SE is a Java platform for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments.Oracle Java SE Embedded is a Java platform that targets Java...