PT-2019-1873 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.6.43 and prior MySQL Server versions 5.7.25 and prior MySQL Server versions 8.0.15 and prior Description: A vulnerability in the MySQL Server component of Oracle MySQL allows a high-privileged attacker with network...

Rancher Labs Rancher Privilege Permission and Access Control Issues Vulnerability

Rancher Labs Rancher is the United States Rancher Labs, Inc. of a set of open source enterprise-class container management platform. A vulnerability exists in Rancher Labs Rancher versions 2.0.0 through 2.1.5 for privilege licensing and access control issues. The vulnerability stems from a lack o...

The vulnerability in the web interface of the microprogramming software for Cisco IP Phones series 8800 allows a perpetrator to cause a service failure.

The vulnerability of the web interface of Cisco IP phones—IP Phone 8800, IP Conference Phone 8832, IP Phone 8821, and IP Phone 8821-EX—is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Intel Graphics Driver driver, related to deficiencies in access control, allows a hacker to trigger a service failure.

The vulnerability of the User Mode Driver component of Intel Graphics Drivers is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Polkit library in Linux operating systems, allowing a hacker to execute arbitrary commands

The vulnerability of the Polkit library in Linux operating systems is related to access control deficiencies. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

CVE-2019-3845

A lack of access control was found in the message queues maintained by Satellite's QPID broker and used by katello-agent in versions before Satellite 6.2, Satellite 6.1 optional and Satellite Capsule 6.1. A malicious user authenticated to a host registered to Satellite or Capsule can use this fla...

PT-2019-1793 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the LUAFV driver of Windows operating systems, which can be exploited by an attacker to elevate privileges and execute arbitrary code...

Synology Android Moments Privilege Permission and Access Control Issues Vulnerability

Synology Android Moments is an Android-based application from Synology Inc. of Taiwan, China for viewing various documents stored in Synology Drive. A vulnerability exists in the privacy page of Synology Android Moments prior to version 1.2.3-199 due to privilege permission and access control...

The vulnerability of the SAP Fiori Client’s mobile execution environment, related to deficiencies in access control, allows a perpetrator to bypass the authentication system.

The vulnerability of the SAP Fiori Client mobile environment is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to bypass the system’s authentication process remotely...

The vulnerability of the SetWLanRadioSettings() function in the software interface of the D-Link DIR-823G router’s microprogramming system allows a hacker to gain access to protected information.

The vulnerability of the SetWLanRadioSettings function in the software interface of the D-Link DIR-823G router’s microprogramming system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected...

The vulnerability of the Platform Sample/Silicon Reference component in server hardware from Intel(R) Server Board, Intel(R) Server System, and Intel(R) Compute Module stems from deficiencies in access control. This allows attackers to execute arbitrary code.

The vulnerability of the Platform Sample/Silicon Reference component in server hardware from IntelR Server Board, IntelR Server System, and IntelR Compute Module is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2019-1742

A vulnerability in the web UI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access sensitive configuration information. The vulnerability is due to improper access control to files within the web UI. An attacker could exploit this vulnerability by sending a malicious...

The vulnerability of the 802.1X network operating system implemented in Cisco NX-OS devices allows a intruder to cause a service failure.

The vulnerability of the 802.1X network operating system implemented in Cisco NX-OS devices is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of Microsoft Edge browsers, related to vulnerabilities in access control, allows attackers to escalate their privileges.

The vulnerability of Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the command-line interface implementation of Cisco NX-OS network operating systems for Cisco Nexus 9000 routers allows a attacker to execute arbitrary commands.

The vulnerability of the command-line interface implementation in Cisco NX-OS network operating systems for Cisco Nexus 9000 series routers is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

CVE-2019-7238

Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control...

CVE-2019-6279

ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have an Incorrect Access Control vulnerability via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity URI, allowing an Attacker to change the Wireless Security Password...

CVE-2018-18862

BMC Remedy Mid-Tier 7.1.00 and 9.1.02.003 for BMC Remedy AR System has Incorrect Access Control in ITAM forms, as demonstrated by TLS%3APLR-Configuration+Details/Default+Admin+View/, AST%3AARServerConnection/Default+Admin+View/, and AR+System+Administration%3A+Server+Information/Default+Admin+Vie...

The installation program of the Intel Parallel Studio XE for Windows toolset is vulnerable, allowing attackers to exploit their privileges.

The vulnerability of the Intel Parallel Studio XE for Windows toolset installation program is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Microsoft Exchange Server, related to access control deficiencies, allows a perpetrator to gain access to protected information or modify file access rights.

The vulnerability of Microsoft Exchange Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain access to protected information or modify file access rights...