CVE-2016-7801

Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to bypass access restrictions to delete other users' To-Dos via unspecified vectors...

The vulnerability of Qualcomm Secure Execution Environment’s microprogramming software allows a perpetrator to circumvent existing access control policies.

The vulnerability of Qualcomm Secure Execution Environment for Android, found in the CAF repository, is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to circumvent existing access control policies through improper page alignment...

CVE-2014-3527

When using the CAS Proxy ticket authentication from Spring Security 3.1 to 3.2.4 a malicious CAS Service could trick another CAS Service into authenticating a proxy ticket that was not associated. This is due to the fact that the proxy ticket authentication uses the information from the...

CVE-2014-3527: Improper Authentication

When using the CAS Proxy ticket authentication from Spring Security 3.1 to 3.2.4 a malicious CAS Service could trick another CAS Service into authenticating a proxy ticket that was not associated. This is due to the fact that the proxy ticket authentication uses the information from the...

PT-2017-5875

Name of the Vulnerable Software and Affected Versions: Spring Security versions 3.1 through 3.2.4 Description: A malicious CAS Service could trick another CAS Service into authenticating a proxy ticket that was not associated, due to the proxy ticket authentication using information from the...

CVE-2017-5174

An Authentication Bypass issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An authentication bypass vulnerability has been identified. The existing file system architecture could allow attackers to bypass the access control that may allow remote code execution...

CVE-2016-10238: Undefined Security Weakness

In QSEE in all Android releases from CAF using the Linux kernel access control may potentially be bypassed due to a page alignment issue...

PT-2017-2117

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment affected versions not specified Android all releases from CAF using the Linux kernel Description The issue is caused by an integer overflow, leading to a buffer overflow in memory. This could allow a remot...

PT-2017-2118

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to a page alignment problem in the Qualcomm Secure Execution Environment QSEE for Android, which may allow an attacker to bypass access control. This could potentially...

ALPINE-CVE-2016-10369

unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service preventing terminal launch, or possibly have other impact bypassing terminal access control...

DEBIAN-CVE-2016-10369

unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service preventing terminal launch, or possibly have other impact bypassing terminal access control...

CVE-2016-10369

unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service preventing terminal launch, or possibly have other impact bypassing terminal access control...

PT-2017-7885

Name of the Vulnerable Software and Affected Versions lxterminal versions prior to 0.3.1 Description The issue arises from unixsocket.c in lxterminal insecurely using /tmp for a socket file. This allows a local user to cause a denial of service by preventing the terminal from launching. It may al...

CVE-2017-2116

Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to delete "customapp" templates via unspecified vectors...

CVE-2017-2143

CS-Cart Japanese Edition v4.3.10-jp-1 and earlier, CS-Cart Multivendor Japanese Edition v4.3.10-jp-1 and earlier allows remote attackers to bypass access restriction to create a request to return a customer purchased item via rma.post.php...

PT-2017-15207

Name of the Vulnerable Software and Affected Versions CS-Cart Japanese Edition versions 4.3.10-jp-1 and earlier CS-Cart Multivendor Japanese Edition versions 4.3.10-jp-1 and earlier Description The issue allows remote attackers to bypass access restrictions and create a request to return a...

Design/Logic Flaw

Certain Technicolor devices have an SNMP access-control bypass, possibly involving an ISP customization in some cases. The Technicolor formerly Cisco DPC3928SL with firmware D3928SL-P15-13-A386-c3420r55105-160127a could be reached by any SNMP community string from the Internet; also, you can writ...

CVE-2017-5135

CVE-2017-5135 describes an SNMP access-control bypass on certain Technicolor (former Cisco) devices, notably the DPC3928SL. The vulnerability allows authentication with any SNMP community string, potentially granting full remote read/write access via MIB write capabilities (Stringbleed). Concrete...

PT-2017-16332

Name of the Vulnerable Software and Affected Versions Technicolor DPC3928SL version D3928SL-P15-13-A386-c3420r55105-160127a Description The issue involves an SNMP access-control bypass, which may be related to an ISP customization in some cases. This allows any SNMP community string to access the...

CVE-2017-5135: Undefined Security Weakness

Certain Technicolor devices have an SNMP access-control bypass, possibly involving an ISP customization in some cases. The Technicolor formerly Cisco DPC3928SL with firmware D3928SL-P15-13-A386-c3420r55105-160127a could be reached by any SNMP community string from the Internet; also, you can writ...