Cisco Webex Meetings Access Control Error Vulnerability (CNVD-2020-45576)

Cisco Webex Meetings is a set of video conferencing solutions from Cisco USA. An access control error vulnerability exists in the meeting scheduling template feature in Cisco?Webex Meetings versions prior to 40.7.0. An attacker could exploit this vulnerability by sending a specially crafted reque...

The vulnerability of the Message Display component of the Oracle Email Center software allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the Message Display component of the Oracle Email Center messaging software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to modify, add, or delete data using the HTTP protocol...

The vulnerability of the Others component in the Oracle iSupport web application allows a attacker to gain read, modify, add, or delete access to data.

The vulnerability of the Others component in the Oracle iSupport web application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain read, modify, add, or delete access to data using the HTTP protocol...

The vulnerability of the DBI Setup component of the Oracle E-Business Intelligence application allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the DBI Setup component of the Oracle E-Business Intelligence application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify, add, or delete data using the HTTP protocol...

The vulnerability of the CacheStore component of the Oracle Coherence software platform, which allows a hacker to trigger a service failure.

The vulnerability of the CacheStore component of the Oracle Coherence software platform relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the installation file of the Kaspersky VPN Secure Connection antivirus software allows a hacker to delete any files in the system.

The vulnerability of the installation file of the Kaspersky VPN Secure Connection antivirus tool is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to delete any files from the system...

The vulnerability of the executable file McTray.exe of the Microsoft Windows anti-virus software McAfee VirusScan Enterprise allows a perpetrator to gain increased privileges.

The vulnerability of the McTray.exe executable of the Microsoft Windows antivirus software, McAfee VirusScan Enterprise, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability in the virtualization system of VMware Horizon Client, VMware Remote Console, and VMware Fusion allows a malicious individual to elevate their privileges to the root level.

The vulnerability of the virtualization system for VMware Horizon Client, VMware Remote Console, and VMware Fusion relates to deficiencies in access control. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level...

The vulnerability of VMware Fusion and VMware Workstation, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of VMware Fusion and VMware Workstation lies in their lack of access control mechanisms. Exploiting this vulnerability can allow attackers to enhance their privileges...

VulnCheck KEV: CVE-2022-32993

TOTOLINK A7000R V4.1cu.4134 was discovered to contain an access control issue via /cgi-bin/ExportSettings.sh...

The vulnerability of the Eclipse Mosquitto messaging broker, related to deficiencies in access control, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Eclipse Mosquitto messaging broker is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the GVFS desktop environment subsystem in GNOME, related to deficiencies in access control, allows an intruder to gain unauthorized access to protected information.

The vulnerability of the GVFS desktop environment for GNOME is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information by running a specially created malware program...

CVE-2020-13994

An issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A privileged user can achieve code execution on the server via a ticket because of improper access control of uploaded resources. This might be exploitable in conjunction with CVE-2020-13992 by an unauthenticated attacker...

CVE-2020-15079

In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, there is improper access control in Carrier page, Module Manager and Module Positions. The problem is fixed in version 1.7.6.6...

openshift-service-mesh/istio-rhel8-operator: control plane can deploy gateway image to any namespace

An incorrect access control flaw was found in the operator, openshift-service-mesh/istio-rhel8-operator. This flaw allows an attacker with a basic level of access to the cluster to deploy a custom gateway/pod to any namespace, potentially gaining access to privileged service account tokens. The...

PT-2020-3498 · Red Hat · Openshift-Service-Mesh/Istio-Rhel8-Operator

Name of the Vulnerable Software and Affected Versions: openshift-service-mesh/istio-rhel8-operator versions through 1.1.3 Description: The issue is related to an incorrect access control flaw in the operator, allowing an attacker with basic access to the cluster to deploy a custom gateway or pod ...

CVE-2020-14306

An incorrect access control flaw was found in the operator, openshift-service-mesh/istio-rhel8-operator. This flaw allows an attacker with a basic level of access to the cluster to deploy a custom gateway/pod to any namespace, potentially gaining access to privileged service account tokens. The...

Siemens LOGO!8 BM Access Control Error Vulnerability (CNVD-2020-43685)

The Siemens LOGO!8 BM is a programmable logic controller from Siemens, Germany. An access control error vulnerability exists in Siemens LOGO!8 BM all versions, which stems from a lack of identity authentication in the program. An attacker with access to port 135/tcp could exploit this vulnerabili...

Vulnerability of the Server component: The stored procedures of the MySQL Server database management system, which allow attackers to cause service interruptions.

The vulnerability of the MySQL Server component, specifically stored procedures, is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL protocol...

The vulnerability of the InnoDB component of the MySQL Database Server management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the MySQL Database Management System is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL Protocol...