The vulnerability of the Oracle Solaris operating system’s kernel, which allows a hacker to trigger a service failure

The vulnerability of the Oracle Solaris operating system’s kernel is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the FortiOS operating system, related to deficiencies in access control, allows attackers to obtain secret keys embedded in the system or certificates uploaded by users.

The vulnerability of the FortiOS operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to obtain secret keys that are built into the system or certificates uploaded by users. This can occur either through resetting the encryption keys’...

CVE-2019-14765

Incorrect Access Control in AfficheExplorateurParam in DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to use administrative controllers...

SIEMENS SINAMICS PERFECT HARMONY GH180 Access Control Vulnerability

The SINAMICS Perfect Harmony GH180 Medium Voltage Drives series is designed to control medium voltage drives or inverters in a variety of different applications. An access control vulnerability exists in the SIEMENS SINAMICS PERFECT HARMONY GH180. An attacker could exploit this vulnerability to...

Cisco Vision Dynamic Signage Director Access Control Error Vulnerability

Cisco Vision Dynamic Signage Director is an end-to-end dynamic signage and IPTV solution from Cisco USA. An Access Control Error vulnerability exists in the REST API endpoint in Cisco Vision Dynamic Signage Director Release prior to 6.2 SP2, which stems from a lack of authentication for some API...

GitLab CE and EE Incorrect Access Control Vulnerability (CNVD-2020-03843)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab CE and EE 8.13...

GitLab CE and EE Incorrect Access Control Vulnerability (CNVD-2020-03844)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab CE and EE 11.4...

The vulnerability of the dropboxupdate update service for Windows users allows a hacker to escalate their privileges.

The vulnerability of the dropboxupdate update service for Windows users of the Dropbox storage service is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to elevate their privileges to root status using a specially created hard link...

Unspecified Vulnerability in Pronestor Planner

Pronestor Planner is a conference room booking management system from the Danish company Pronestor. An unspecified vulnerability exists in Pronestor Planner that stems from the program not properly handling access control for the PronestorHealthMonitor.exe file. An attacker could exploit this...

Samsung XCover4 Access Control Error Vulnerability (CNVD-2020-14771)

Samsung XCover4 is a smartphone from Samsung South Korea. An access control error vulnerability exists in the Samsung XCover4. The vulnerability stems from the network system or product not properly restricting access to resources from unauthorized roles. An attacker could exploit the vulnerabili...

The vulnerability of the PostgreSQL database management system, related to improper access control, allows a perpetrator to gain access to confidential data.

The vulnerability of the PostgreSQL database management system is related to a security policy flaw, where values of columns with SELECT privileges can be read. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to confidential data...

GOG Galaxy elevation of privilege vulnerability (CNVD-2020-02829)

GOG Galaxy is a game client program. The program is used to install, launch and update games. An elevation of privilege vulnerability exists in the GalaxyClientService installed by GOG Galaxy, which stems from faulty access control. An attacker can exploit this vulnerability by sending...

Xiaomi Mi A2 Lite Access Control Error Vulnerability

Xiaomi Mi A2 Lite is a smartphone from Chinese company Xiaomi Technology Xiaomi. A vulnerability in the Xiaomi Mi A2 Lite build fingerprint: xiaomi/jasmine/jasminesprout:9/PKQ1.180904.001/V10.0.2.0.PDIMIFJ:user/release-keys in the com.qualcomm An access control error vulnerability exists in the...

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the Core RDBMS component of the database management system, Oracle Database Server, is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete data using the Oracle Net protoc...

TYPO3 Input Validation Error Vulnerability (CNVD-2019-41229)

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A security vulnerability exists in TYPO3 versions prior to 4.4.9 and 4.5.x prior to 4.5.4, which stems from the program's failure to use proper access control for ExtDirect calls. An attack...

hw: Intel SGX information leak

A flaw was found in the implementation of SGX around the access control of protected memory. This flaw allows a local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code to interpret the contents of the SGX protected memory...

hw: Intel SGX information leak

A flaw was found in the implementation of SGX around the access control of protected memory. This flaw allows a local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code to interpret the contents of the SGX protected memory...

hw: Intel SGX information leak

A flaw was found in the implementation of SGX around the access control of protected memory. This flaw allows a local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code to interpret the contents of the SGX protected memory...

hw: Intel SGX information leak

A flaw was found in the implementation of SGX around the access control of protected memory. This flaw allows a local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code to interpret the contents of the SGX protected memory...

hw: Intel SGX information leak

A flaw was found in the implementation of SGX around the access control of protected memory. This flaw allows a local attacker of a system with SGX enabled and an affected intel GPU with the ability to execute code to interpret the contents of the SGX protected memory...