Improper access control

The ViewUpgrades resource in Jira before version 7.13.4, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers who have obtained access to administrator's session to access the ViewUpgrades administrative resource without needing to...

CVE-2019-12046

LemonLDAP::NG -2.0.3 has Incorrect Access Control...

CVE-2019-0086

Insufficient access control vulnerability in Dynamic Application Loader software for IntelR CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and IntelR TXE 3.1.65, 4.0.15 may allow an unprivileged user to potentially enable escalation of privilege via local access...

EulerOS Virtualization for ARM 64 3.0.1.0 : python-paramiko (EulerOS-SA-2019-1404)

According to the versions of the python-paramiko package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - The python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and...

Rockwell Automation Micrologix 1400 <= 21.2 User Fault Routine Exploit

Binary data 720222.prm...

The vulnerability of the sub-component “Attachments/File Upload” in Oracle Applications Framework of the Oracle E-Business Suite allows a perpetrator to access, modify, add, or delete data.

The vulnerability of the Attachments/File Upload sub-component in Oracle Applications Framework, a system for automating business processes in Oracle E-Business Suite, is related to lack of access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or...

The vulnerability of Oracle Java SE’s 2D software platform allows a hacker to gain full control over the application.

The vulnerability of the Oracle Java SE 2D software platform is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker operating remotely to gain full control over the application...

Oracle Health Sciences Applications Health Sciences Data Management Workbench Access Control Error Vulnerability

Oracle Health Sciences Applications is a suite of Oracle's clinical development solutions for the healthcare industry, of which Health Sciences Data Management Workbench is a component that provides end-to-end clinical data management capabilities. An access control error vulnerability exists in...

Oracle Java SE and Java SE Embedded Access Control Error Vulnerability (CNVD-2019-26758)

Oracle Java SE and Oracle Java SE Embedded are both products of Oracle Corporation.Oracle Java SE is a Java platform for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments.Oracle Java SE Embedded is a Java platform that targets Java...

CVE-2018-20028

Contao 3.x before 3.5.37, 4.4.x before 4.4.31 and 4.6.x before 4.6.11 has Incorrect Access Control...

Oracle Marketing Component Access Control Error Vulnerability (CNVD-2019-29195)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. marketing is one of the Internet-based marketing...

Oracle Retail Applications Retail Convenience Store Back Office Access Control Error Vulnerability

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. The product includes inventory management, sales management and customer management , etc. Retail Convenience Store Back Office is one of the retail back office components. A securi...

Oracle BI Publisher Access Control Error Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's Oracle business innovation platform for enterprise and cloud environments. The platform provides middleware, software collection and other functions. BI Publisher formerly known as XML Publisher is one of the reporting...

CVE-2019-6554

Advantech WebAccess/SCADA, Versions 8.3.5 and prior. An improper access control vulnerability may allow an attacker to cause a denial-of-service condition...

Advantech WebAccess/SCADA Incorrect Access Control Vulnerability

Advantech WebAccess/SCADA is a set of SCADA software from Advantech based on browser architecture. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. An incorrect access control vulnerability exists in...

The vulnerability of the Capability Licensing Service, related to lack of access control, allows a violator to increase their privileges.

The vulnerability of the Capability Licensing Service is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to increase their privileges...

OPENSUSE-SU-2019:0163-1 Security update for python-slixmpp

This update for python-slixmpp fixes the following issue: Security issue fixed: - CVE-2019-1000021: Fixed incorrect Access Control vulnerability in XEP-0223 plugin bsc1124322...

Intel Graphics Driver for Windows User Mode Driver Access Control Vulnerability

Intel Graphics Driver for Windows is an Intel graphics card driver for the Windows platform.User Mode Driver is one of the user mode drivers. A security vulnerability exists in the User Mode Driver of the Intel Graphics Driver for Windows platform, which arises from the program's failure to enfor...

The vulnerability of the McAfee Agent for Linux client component, which allows a hacker to execute arbitrary commands.

The vulnerability of the McAfee Agent for Linux client component is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

FreeBSD : slixmpp -- improper access control (526d9642-3ae7-11e9-a669-8c164582fbac)

NVD reports : slixmpp version before commit 7cd73b594e8122dddf847953fcfc85ab4d316416 contains an incorrect Access Control vulnerability in XEP-0223 plugin Persistent Storage of Private Data via PubSub options profile, used for the configuration of default access model that can result in all of th...