The vulnerability of the Android operating system allows a hacker to delete saved SMS messages.

The vulnerability of the Bluetooth component in the Android operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor to delete stored SMS messages using a specially crafted application...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Android operating system’s runtime subsystem is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially crafted application...

The vulnerability of the NX-OS network operating system allows a hacker to bypass existing access restrictions and delete any arbitrary VDC files.

The vulnerability of the Python-based network operating system NX-OS relates to deficiencies in access control for certain functions. Exploiting this vulnerability could allow an attacker, operating locally, to circumvent existing access restrictions and delete arbitrary VDC files...

Pulse Connect Secure Secure Meeting Component Access Control Vulnerability

Pulse Connect Secure is an SSL-based VPN for businesses. Access control exists for the Pulse Connect Secure Secure Meeting component, allowing an attacker to exploit a vulnerability to join a meeting unauthorized...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the win32k.sys component in the Windows operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow an attacker, operating locally, to enhance their privileges through a specially crafted application...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the ATML component in the Windows operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow an attacker, operating locally, to enhance their privileges through a specially crafted application...

The vulnerability of the Internet Explorer browser, which allows a violator to delete arbitrary files

The vulnerability of the Internet Explorer browser is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to delete any files remotely...

Cisco Prime Collaboration Assurance Information Disclosure Vulnerability (CNVD-2015-06129)

Cisco Prime Collaboration Assurance is an enterprise collaboration network management solution. The solution supports simplified management of unified communications and video collaboration networks through a unified management console, as well as rapid deployment of communications sites. Cisco...

The vulnerability of Xen hypervisors allows a perpetrator to gain privileges necessary to disable blocking devices.

The vulnerability of the QEMU hypervisor component in Xen is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow an attacker, operating locally, to gain privileges necessary to disable block devices...

The vulnerability of the iOS operating system allows a hacker to bypass the sandbox mechanism and read arbitrary settings.

The vulnerability of the CFPreferences component in the iOS operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to bypass sandbox mechanisms and read arbitrary settings using a specially crafted application...

httpd: ap_some_auth_required() does not properly indicate authenticated request in 2.4

It was discovered that in httpd 2.4, the internal API function apsomeauthrequired could incorrectly indicate that a request was authenticated even when no authentication was used. An httpd module using this API function could consequently allow access that should have been denied...

PicketLink: PicketLink IDP ignores role based authorization

A flaw was found in the PicketLink Identity Provider Configuration IDP where, under specific conditions, the IDP ignores role-based authorization. This could lead to an authenticated user being able to access application resources that are not permitted for a given role...

PicketLink: PicketLink IDP ignores role based authorization

A flaw was found in the PicketLink Identity Provider Configuration IDP where, under specific conditions, the IDP ignores role-based authorization. This could lead to an authenticated user being able to access application resources that are not permitted for a given role...

OpenShift3: Exec operations should be forbidden to privileged pods such as builder pods

An improper permission check issue was discovered in the server admission control component in OpenShift. A user with build permissions could use this flaw to execute arbitrary shell commands on a build pod with the privileges of the root user...

foreman: API not scoping resources to taxonomies

A flaw was found in the way foreman authorized user actions on resources via the API when an organization was not explicitly set. A remote attacker could use this flaw to obtain additional information about resources they were not authorized to access...

The vulnerability of the Adobe AIR software platform allows a perpetrator to increase the execution priority of a process from low to medium.

The vulnerability of the Adobe AIR software platform is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to increase the execution priority of processes from low to medium...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the win32k.sys driver in the Windows operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a local attacker to enhance their privileges through a specially crafted application...

Oracle Data Quality TSS12.DscXB.XB ActiveX Control Memory Misreference Vulnerability

Oracle Data Quality is a suite of software that provides a comprehensive data quality management environment. A memory misreference vulnerability in the onloadstatechange method of the TSS12.DscXB.XB ActiveX control in Oracle Data Quality allows remote attackers to construct a malicious WEB page...

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.3.3 update

Updated packages that provide Red Hat JBoss Enterprise Application Platform 6.3.3 and fix multiple security issues, several bugs, and add various enhancements are now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Moderate security impact...

Apple MAC OS X Yosemite Access Control Vulnerability

Apple MAC OS X Yosemite is the latest operating system developed by Apple. An access control vulnerability exists in Apple MAC OS X Yosemite Keychain, which allows remote attackers to exploit the vulnerability to obtain sensitive information...