McAfee Data Loss Prevention Endpoint Access Control Error Vulnerability

McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from McAfee. The solution prevents theft and accidental disclosure of confidential data and provides security policies for file handling and transmission, shared endpoint data flow control and data...

The vulnerability of the User Interface sub-component of the Oracle Advanced Outbound Telephony component in the Oracle E-Business Suite allows a perpetrator to access, modify, add, or delete data.

The vulnerability of the User Interface sub-component of the Oracle Advanced Outbound Telephony component in the Oracle E-Business Suite automation system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to...

The vulnerability of the Setup and Admin components of Oracle Knowledge Management, a business automation system from Oracle E-Business Suite, allows an attacker to access, modify, add, or delete data.

The vulnerability of the Setup and Admin components of Oracle Knowledge Management, a system for automating business activities within the Oracle E-Business Suite, is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to...

The vulnerability of the Message Display component of the Oracle Email Center messaging software in the Oracle E-Business Suite system, which is used for automating business operations. This vulnerability allows a malicious individual to gain access to modify, add, or delete data.

The vulnerability of the Message Display component of the Oracle Email Center messaging software in the Oracle E-Business Suite system, a business automation system, is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to...

CVE-2019-3622

Files or Directories Accessible to External Parties in McAfee Data Loss Prevention DLPe for Windows 11.x prior to 11.3.0 allows authenticated user to redirect DLPe log files to arbitrary locations via incorrect access control applied to the DLPe log folder allowing privileged users to create...

The vulnerability of the Windows Error Reporting (WER) error reporting service in Windows operating systems allows a hacker to execute arbitrary code in kernel mode.

The vulnerability of the Windows Error Reporting WER error reporting service for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary code in kernel mode...

Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26526)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A component access control error vulnerability exists in the Server: Security: Audit subcomponent of the MySQL Server component in Oracle MySQL,...

PT-2019-2843 · Mysql Server +5 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.16 and prior Description: The issue is related to inadequate access control in the InnoDB component of the MySQL Server. It can be exploited by a remote attacker to cause the system to hang or partially fail. A...

Gitlab CE/EE Incorrect Access Control Vulnerability

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is the GitLab Enterprise Edition and GitLab CE is the GitLab Community Edition. An incorre...

The vulnerability of the Windows Audio service on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Audio service on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges by using a specially created program...

DEBIAN-CVE-2019-12469

MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed username or log in Special:EditTags are exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6...

UBUNTU-CVE-2019-12472

An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.18.0 through 1.32.1. It is possible to bypass the limits on IP range blocks $wgBlockCIDRLimit by using the API. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6...

python-novajoin: novajoin API lacks access control

A flaw was discovered in the python-novajoin plugin for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens...

CVE-2019-12926

MailEnable Enterprise Premium 10.23 did not use appropriate access control checks in a number of areas. As a result, it was possible to perform a number of actions, when logged in as a user, that that user should not have had permission to perform. It was also possible to gain access to areas...

The vulnerability of the Akord-Win64 information protection tool, related to access control deficiencies, allows a intruder to bypass additional authentication procedures (personal identification) and enhance their privileges.

The vulnerability of the information protection tool against unauthorized access, Akord-Win64, is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass additional authentication procedures personal identifier. Upon successful authentication...

Django Security Bypass Vulnerability (CNVD-2019-21074)

Django is the Django Foundation's set of open source Web application framework based on the Python language . The framework includes object-oriented mapper , view system , template system and so on. A security vulnerability exists in Django that stems from the program's failure to properly handle...

CVE-2018-14868

Incorrect access control in the Password Encryption module in Odoo Community 9.0 and Odoo Enterprise 9.0 allows authenticated users to change the password of other users without knowing their current password via a crafted RPC call...

CVE-2018-14885

Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote attacker to restore a database dump without knowing the super-admin password. An arbitrary password succeeds...

IBM Tivoli Netcool Impact Privilege Permission and Access Control Vulnerability

IBM Tivoli Netcool Impact is a suite of network management software from IBM in the United States. The software has the ability to automate business-critical functions and provide a platform that provides unified access to real-time data, events and indicators. A privileged access and privilege...

The vulnerability of the command-line interface on NX-OS and FX-OS devices of Cisco’s networking operating systems allows attackers to disclose sensitive information.

The vulnerability of the command-line interfaces of NX-OS and FX-OS devices from Cisco involves incomplete verification of role-based access control RBAC. Exploiting this vulnerability allows a malicious actor to disclose sensitive information by executing diagnostic commands with specially craft...