3847 matches found
CVE-2016-3635: Improper Access Control
SAP Netweaver 7.4 allows remote authenticated users to bypass an intended Unified Connectivity UCON access control list and execute arbitrary Remote Function Modules RFM by leveraging a connection created from earlier execution of an anonymous RFM included in a Communication Assembly, aka SAP...
flash-plugin: multiple code execution issues fixed in APSB16-29
Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-4271 and...
The vulnerability of the Android operating system, which allows a hacker to circumvent existing access restrictions
The vulnerability of the Shell component in the Android operating system lies in the improper handling of the MANAGEUSERS and CREATEUSERS access control functions. Exploiting this vulnerability allows a malicious actor to circumvent existing access restrictions through a specially created...
The vulnerability of Firefox and Firefox ESR browsers allows a hacker to bypass existing access restrictions policies or read arbitrary files.
The vulnerability of Firefox and Firefox ESR browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions policies or read arbitrary files by placing a specially crafted HTML document and links to it ...
PT-2016-2400
Name of the Vulnerable Software and Affected Versions Adobe Reader and Acrobat versions prior to 11.0.17 Acrobat and Acrobat Reader DC Classic versions prior to 15.006.30198 Acrobat and Acrobat Reader DC Continuous versions prior to 15.017.20050 Description The issue is related to insufficient...
The vulnerability of the Firefox browser, which allows a remote attacker to execute arbitrary JavaScript code
The vulnerability of Firefox lies in the improper restriction of resource: URL. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code with privileges of a Chrome browser, thereby circumventing access control policies. This can be achieved, for example, by usi...
Vulnerability of the 1C-Bitrix web project management system: Website management that allows malicious actors to bypass access restrictions
Vulnerability of the 1C-Bitrix web project management system: Website management related to errors in the integrity control mechanism of the control scripts. Exploiting this vulnerability allows a malicious actor to manipulate the integrity check mechanism and modify files within the system witho...
PT-2016-2295
Name of the Vulnerable Software and Affected Versions IBM Business Process Manager versions 8.5.6 through 8.5.6.2 IBM Business Process Manager versions 8.5.7 before 8.5.7.CF201606 Description The issue is related to inadequate access control in the system, allowing remote authenticated users to...
UBUNTU-CVE-2016-5837
WordPress before 4.5.3 allows remote attackers to bypass intended access restrictions and remove a category attribute from a post via unspecified vectors...
sNews CMS 1.7.1 CSRF / Cross Site Scripting / Code Execution
Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SNEWS-RCE-CSRF-XSS.txt + ISR: APPARITIONSEC Vendor: ============ snewscms.com Product: ================ sNews CMS v1.7.1 Vulnerability Type: =================================== Persistent...
The vulnerability of Google Chrome browser allows a violator to circumvent existing access restrictions policies.
The vulnerability of the Blink component in Google Chrome’s browser is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions by manipulating the FrameLoader.cpp and LocalFrame.cpp files...
The vulnerability of Google Chrome browser allows a violator to circumvent existing access restrictions policies.
The vulnerability of the extensions/renderer/resources/binding.js component in Google Chrome’s browser-based bindings extensions is related to the improper use of prototypes. Exploiting this vulnerability could allow a malicious actor to bypass existing access control policies...
DEBIAN-CVE-2015-5715
The mweditPost function in wp-includes/class-wp-xmlrpc-server.php in the XMLRPC subsystem in WordPress before 4.3.1 allows remote authenticated users to bypass intended access restrictions, and arrange for a private post to be published and sticky, via unspecified vectors...
PT-2016-1866
Name of the Vulnerable Software and Affected Versions Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-05-01 Description The issue is related to insufficient access control in the Wi-Fi component of the Android operating system, specifical...
PT-2016-1938
Name of the Vulnerable Software and Affected Versions Adobe Reader versions affected versions not specified Adobe Acrobat versions affected versions not specified Description The issue is related to insufficient access control in Adobe Reader and Adobe Acrobat, allowing a remote attacker to bypas...
PT-2016-1734
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 50.0.2661.75 Description The issue is related to the download implementation in Google Chrome, which has weaknesses in access control. This can be exploited by a remote attacker to bypass existing directory name...
The vulnerability of the Business Process Manager system and the WebSphere Process Server server, which allows attackers to bypass existing access restrictions and create arbitrary pages.
The vulnerability of the Business Space component of the WebSphere Process Server business process server and the Business Process Manager automation system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions...
PT-2016-4393
Name of the Vulnerable Software and Affected Versions Apache Ranger versions 0.5.x before 0.5.2 Description The issue allows remote authenticated users to bypass intended parent resource-level access restrictions. This is due to the mishandling of a resource-level exclude policy. Recommendations...
PT-2016-1653 · Adobe +3 · Flash Player +3
Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions prior to 18.0.0.343 Adobe Flash Player versions 19.x through 21.x before 21.0.0.213 on Windows and OS X Adobe Flash Player versions prior to 11.2.202.616 on Linux Description: The issue is related to insufficient...
