The vulnerability of the Microsoft SharePoint Enterprise Server software, related to deficiencies in access control, allows a perpetrator to increase their privileges.

The vulnerability of the Microsoft SharePoint Enterprise Server software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially crafted request...

CVE-2018-1000624

Battelle V2I Hub 2.5.1 is vulnerable to a denial of service, caused by the failure to restrict access to a sensitive functionality. By visiting http://V2IHUB/UI/powerdown.php, a remote attacker could exploit this vulnerability to shut down the system...

Vulnerability of the Server component: The Parser component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server:Parser component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using the MySQL protocol...

PT-2018-2572 · Mcafee · Mcafee Agent For Linux

Name of the Vulnerable Software and Affected Versions: McAfee Agent for Linux versions 5.0.0 through 5.0.6 McAfee Agent for Linux version 5.5.0 McAfee Agent for Linux version 5.5.1 Description: The issue is related to insufficient access control in the client component, which can be exploited to...

DRUPAL-CONTRIB-2018-078

This module enables Drupal to synchronize entities with Salesforce records. The module includes a page that does not sufficiently protect access rights, resulting in potential information disclosure. This vulnerability is mitigated by the fact that only Drupal entity title and IDs, and Salesforce...

Drobo 5N2 Improper Access Control Vulnerability (CNVD-2019-05934)

The Drobo 5N2 NAS is a networked storage appliance NAS from Drobo, USA. The device features data sharing, data backup, remote access and disaster recovery. An access control error vulnerability exists in the /mysql/api/logfile.php endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115. An attacker c...

Drobo 5N2 Improper Access Control Vulnerability (CNVD-2019-05917)

The Drobo 5N2 NAS is a networked storage appliance NAS from Drobo, USA. The device features data sharing, data backup, remote access and disaster recovery. An access control error vulnerability exists in the /drobopix/api/drobo.php endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115. An attacker...

Sales & Company Management System Privilege Permission and Access Control Vulnerability

Sales & Company Management System SCMS is a sales and company management system. The system includes features such as customer management, product management and tax management. A privilege permission and access control vulnerability exists in SCMS 2018-06-06 and prior versions, which can be...

TOTOLINK A3002RU Access Control Error Vulnerability

The TOTOLINK A3002RU is an AC1200 wireless dual-band Gigabit router. An access control error vulnerability exists in formPasswordSetup in TOTOLINK A3002RU version 1.0.8, which can be exploited by an attacker to change the password of an administrator user via an unauthenticated POST request...

CVE-2018-13319

Incorrect access control in getportalinfo in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to determine sensitive device information via an unauthenticated POST request...

CVE-2018-19411

PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user with a read-write account including administrator via an HTTP request because /api/addusers doesn't check, or doesn't properly check, user rights...

Nextcloud Server Access Control Error Vulnerability

Nextcloud is an open source self-hosted file synchronization and sharing communication application platform from Nextcloud Germany.Nextcloud Server is one of the server version. An Access Control Error vulnerability exists in Nextcloud Server versions prior to 14.0.0, 13.0.6, and 12.0.11, which c...

Huawei Watch Privilege Control Vulnerability

Huawei Watch 2 is Huawei's second generation smart sports watch. A privilege control vulnerability exists in Huawei Watch 2. Due to misconfiguration of privileges for specific operations, an attacker who has been informed that the watch is bound to a Huawei account can bypass privilege checking b...

The vulnerability of the FortiOS operating system, caused by access control errors, allows a hacker to execute arbitrary code.

Vulnerability of the FortiOS operating system caused by access control errors. Exploiting this vulnerability allows a attacker to execute arbitrary code by placing it on a USB drive connected to the FortiGate, through the allowed fnsysctl program...

Microsoft Edge’s vulnerability, related to access control deficiencies, allows attackers to elevate their privileges and escape from the isolated software environment.

The vulnerability of Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and escape from the isolated software environment of AppContainer...

GHSA-H5F5-RJ4R-42F6 Incorrect access control in Neo4j Enterprise Database Server via LDAP authentication

Due to incorrect access control in Neo4j Enterprise Database Server 3.4.x before 3.4.9, the setting of LDAP for authentication with STARTTLS, and System Account for authorization, allows an attacker to log into the server by sending any valid username with an arbitrary password...

Teltonika RUT9XX Arbitrary Command Execution Vulnerability

Teltonika RUT9XX routers also known as LuCI is a router product from the Lithuanian company Teltonika. An arbitrary command execution vulnerability exists in Teltonika RUT9XX with firmware version lower than 00.04.233, which is caused by the program's failure to perform proper access control and...

PYSEC-2018-69

Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity...

CVE-2018-0425

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is...

Cisco RV110W, RV130W, RV215W Information Disclosure Vulnerabilities

The RV110W is a Wireless-N VPN firewall router.The RV130W is a Wireless-N multifunction VPN router.The RV215W is a Wireless-N VPN router. An information disclosure vulnerability exists in the Web-based management interface of the Cisco RV110W, RV130W, and RV215W routers. The vulnerability stems...