3217 matches found
The vulnerability of the Windows Error Reporting (WER) error reporting service in Windows operating systems allows a hacker to execute arbitrary code in kernel mode.
The vulnerability of the Windows Error Reporting WER error reporting service for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary code in kernel mode...
Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26526)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A component access control error vulnerability exists in the Server: Security: Audit subcomponent of the MySQL Server component in Oracle MySQL,...
PT-2019-2843 · Mysql Server +5 · Mysql Server +5
Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.16 and prior Description: The issue is related to inadequate access control in the InnoDB component of the MySQL Server. It can be exploited by a remote attacker to cause the system to hang or partially fail. A...
Gitlab CE/EE Incorrect Access Control Vulnerability
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is the GitLab Enterprise Edition and GitLab CE is the GitLab Community Edition. An incorre...
The vulnerability of the Windows Audio service on Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows Audio service on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges by using a specially created program...
DEBIAN-CVE-2019-12469
MediaWiki through 1.32.1 has Incorrect Access Control. Suppressed username or log in Special:EditTags are exposed. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6...
UBUNTU-CVE-2019-12472
An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.18.0 through 1.32.1. It is possible to bypass the limits on IP range blocks $wgBlockCIDRLimit by using the API. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6...
python-novajoin: novajoin API lacks access control
A flaw was discovered in the python-novajoin plugin for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens...
CVE-2019-12926
MailEnable Enterprise Premium 10.23 did not use appropriate access control checks in a number of areas. As a result, it was possible to perform a number of actions, when logged in as a user, that that user should not have had permission to perform. It was also possible to gain access to areas...
The vulnerability of the Akord-Win64 information protection tool, related to access control deficiencies, allows a intruder to bypass additional authentication procedures (personal identification) and enhance their privileges.
The vulnerability of the information protection tool against unauthorized access, Akord-Win64, is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass additional authentication procedures personal identifier. Upon successful authentication...
Django Security Bypass Vulnerability (CNVD-2019-21074)
Django is the Django Foundation's set of open source Web application framework based on the Python language . The framework includes object-oriented mapper , view system , template system and so on. A security vulnerability exists in Django that stems from the program's failure to properly handle...
CVE-2018-14885
Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote attacker to restore a database dump without knowing the super-admin password. An arbitrary password succeeds...
CVE-2018-14868
Incorrect access control in the Password Encryption module in Odoo Community 9.0 and Odoo Enterprise 9.0 allows authenticated users to change the password of other users without knowing their current password via a crafted RPC call...
IBM Tivoli Netcool Impact Privilege Permission and Access Control Vulnerability
IBM Tivoli Netcool Impact is a suite of network management software from IBM in the United States. The software has the ability to automate business-critical functions and provide a platform that provides unified access to real-time data, events and indicators. A privileged access and privilege...
The vulnerability of the command-line interface on NX-OS and FX-OS devices of Cisco’s networking operating systems allows attackers to disclose sensitive information.
The vulnerability of the command-line interfaces of NX-OS and FX-OS devices from Cisco involves incomplete verification of role-based access control RBAC. Exploiting this vulnerability allows a malicious actor to disclose sensitive information by executing diagnostic commands with specially craft...
The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to deficiencies in access control, allowing attackers to escalate their privileges.
The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
VulnCheck KEV: CVE-2019-7238
Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution...
Siemens SIMATIC Ident MV420 and Siemens SIMATIC Ident MV440 Privilege License and Access Control Issues Vulnerabilities
Siemens SIMATIC Ident MV420 and Siemens SIMATIC Ident MV440 are both code reading systems from Siemens, Germany. A privilege-granting and access-control issue vulnerability exists in Siemens SIMATIC Ident MV420 and Siemens SIMATIC Ident MV440, which can be exploited by an attacker to elevate...
The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.
The vulnerability of Windows operating system kernels is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...