3311 matches found
CentOS Web Panel Permissions License and Access Control Issues Vulnerability
CentOS Web Panel CWP is a free web hosting control panel. A privilege permission and access control issue vulnerability exists in CentOS Web Panel version 0.9.8.851, which can be exploited by an attacker to delete arbitrary databases...
CVE-2017-18543
The invite-anyone plugin before 1.3.16 for WordPress has incorrect access control for email-based invitations...
CVE-2019-13030
eQ-3 Homematic CCU3 AddOn 'Mediola NEO Server for Homematic CCU3' prior to 2.4.5 allows uncontrolled admin access to start or stop the Node.js process, resulting in the ability to obtain mediola configuration details. This is related to improper access control for addons configuration pages and a...
The vulnerability of the Trace File Analyzer (TFA) Collector utility, a clustering application for Oracle Clusterware, allows a malicious individual to gain unauthorized access to protected data or cause partial service failure.
The vulnerability of the Trace File Analyzer TFA Collector utility, a tool for clustering Oracle Clusterware, is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected data or cause partial service failure through...
The vulnerability of the Advanced Console controller’s sub-component of Oracle Identity Manager, a software platform of Oracle Fusion Middleware, allows an intruder to gain unauthorized access to protected data.
The vulnerability of the Advanced Console controller’s sub-component in Oracle Identity Manager, a software platform of Oracle Fusion Middleware, is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...
The vulnerability of the Outside In Filters component within the Oracle Outside In Technology software suite for developing software applications. This component is part of the Oracle Fusion Middleware software platform. It allows unauthorized access to protected data or causes partial service interruption for attackers.
The vulnerability of the Outside In Filters component within the Oracle Outside In Technology software suite, which is part of the Oracle Fusion Middleware software platform, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized...
The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to cause partial service failure.
The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause a partial service outage...
CVE-2019-10138
A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1, for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens...
PYSEC-2019-192
A flaw was discovered in the python-novajoin plugin, all versions up to, excluding 1.1.1, for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens...
McAfee Data Loss Prevention Endpoint Access Control Error Vulnerability
McAfee Data Loss Prevention Endpoint DLPe is an integrated endpoint data protection solution from McAfee. The solution prevents theft and accidental disclosure of confidential data and provides security policies for file handling and transmission, shared endpoint data flow control and data...
The vulnerability of the User Interface sub-component of the Oracle Advanced Outbound Telephony component in the Oracle E-Business Suite allows a perpetrator to access, modify, add, or delete data.
The vulnerability of the User Interface sub-component of the Oracle Advanced Outbound Telephony component in the Oracle E-Business Suite automation system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to...
The vulnerability of the Setup and Admin components of Oracle Knowledge Management, a business automation system from Oracle E-Business Suite, allows an attacker to access, modify, add, or delete data.
The vulnerability of the Setup and Admin components of Oracle Knowledge Management, a system for automating business activities within the Oracle E-Business Suite, is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to...
The vulnerability of the Message Display component of the Oracle Email Center messaging software in the Oracle E-Business Suite system, which is used for automating business operations. This vulnerability allows a malicious individual to gain access to modify, add, or delete data.
The vulnerability of the Message Display component of the Oracle Email Center messaging software in the Oracle E-Business Suite system, a business automation system, is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to...
CVE-2019-3622
Files or Directories Accessible to External Parties in McAfee Data Loss Prevention DLPe for Windows 11.x prior to 11.3.0 allows authenticated user to redirect DLPe log files to arbitrary locations via incorrect access control applied to the DLPe log folder allowing privileged users to create...
The vulnerability of the Windows Error Reporting (WER) error reporting service in Windows operating systems allows a hacker to execute arbitrary code in kernel mode.
The vulnerability of the Windows Error Reporting WER error reporting service for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary code in kernel mode...
Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26526)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A component access control error vulnerability exists in the Server: Security: Audit subcomponent of the MySQL Server component in Oracle MySQL,...
PT-2019-2843 · Mysql Server +5 · Mysql Server +5
Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.16 and prior Description: The issue is related to inadequate access control in the InnoDB component of the MySQL Server. It can be exploited by a remote attacker to cause the system to hang or partially fail. A...
Gitlab CE/EE Incorrect Access Control Vulnerability
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is the GitLab Enterprise Edition and GitLab CE is the GitLab Community Edition. An incorre...
The vulnerability of the Windows Audio service on Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Windows Audio service on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges by using a specially created program...