CVE-2019-11895

A potential improper access control vulnerability exists in the JSON-RPC interface of the Bosch Smart Home Controller SHC before 9.8.905 that may result in a successful denial of service of the SHC and connected sensors and actuators. In order to exploit the vulnerability, the adversary needs to...

CVE-2019-6958

A recently discovered security vulnerability affects all Bosch Video Management System BVMS versions 9.0 and below, DIVAR IP 2000, 3000, 5000 and 7000, Configuration Manager, Building Integration System BIS with Video Engine, Access Professional Edition APE, Access Easy Controller AEC, Bosch Vide...

CVE-2019-3895

An access-control flaw was found in the Octavia service when the cloud platform was deployed using Red Hat OpenStack Platform Director. An attacker could cause new amphorae to run based on any arbitrary image. This meant that a remote attacker could upload a new amphorae image and, if requested t...

The vulnerability of the PostgreSQL database management system, related to deficiencies in access control, allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the PostgreSQL database management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code remotely...

Modicon Quantum Privilege and Access Control Vulnerabilities

The Modicon Quantum is a process control programmable controller PLC. A privilege and access control vulnerability exists in all versions of Modicon Quantum firmware. An attacker could use this vulnerability to cause a denial of service or make unauthorized changes to the PLC configuration when...

Denial Of Service (DoS)

PostgreSQL is vulnerable to denial of serviceDoS attacks. A remote authenticated user could exploit an access control flaw in the loput function to change the data in a large object and cause denial of service conditions which leads application to a crash...

The vulnerability of the network operating system NX-OS for Cisco Nexus 9000 series routers, related to deficiencies in access control, allows a hacker to execute arbitrary operating system commands on behalf of the root user.

The vulnerability of the Cisco Nexus 9000 series network operating system routers is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary operating system commands on behalf of the root user by accessing the CLI of the vulnerable device...

The vulnerability of the ABAP Server component of the SAP NetWeaver software integration platform allows attackers to enhance their privileges.

The vulnerability of the ABAP Server component of the SAP NetWeaver software integration platform is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...

python-novajoin: novajoin API lacks access control

A flaw was discovered in the python-novajoin plugin for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens...

The vulnerability of the Attachments sub-component of the Oracle iSupplier Portal component in the Oracle E-Business Suite system, which allows a malicious individual to access data for modification, addition, or deletion.

The vulnerability of the Attachments sub-component of the Oracle iSupplier Portal component in the Oracle E-Business Suite enterprise automation system is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to modify,...

The vulnerability of the WLS Core Components of Oracle WebLogic Server application servers allows attackers to modify, add, or delete data.

The vulnerability of Oracle WebLogic Server’s application server’s WLS core components is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to gain access to modify, add, or delete data using the HTTP protocol...

The vulnerability of the SQR sub-component of the PeopleSoft Enterprise PeopleTools component of the Oracle PeopleSoft Products suite for business applications allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SQR sub-component of the PeopleSoft Enterprise PeopleTools business application suite from Oracle PeopleSoft Products is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or...

The vulnerability of the Outside In Filters sub-component of Oracle’s software development kit (SDK) allows a malicious actor to gain unauthorized access to protected information or cause partial service disruption.

The vulnerability of the Outside In Filters sub-component of the Oracle Outside In Technology SDK is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information or cause a partial servic...

The vulnerability of the BI Publisher Security sub-component, a reporting tool developed by BI Publisher (formerly XML Publisher), allows an attacker to modify, add, or delete data.

The vulnerability of the BI Publisher Security sub-component, a reporting tool from BI Publisher formerly XML Publisher, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data using the...

CVE-2019-10711

Incorrect access control in the RTSP stream and web portal on all IP cameras based on Hisilicon Hi3510 firmware until Webware version V1.0.1 allows attackers to view an RTSP stream by connecting to the stream with hidden credentials guest or user that are neither displayed nor configurable in the...

Vulnerability of the Server component: The Oracle MySQL Server database management system’s DDL functions allow attackers to cause service interruptions.

Vulnerability of the Server component: The DDL system for managing databases, Oracle MySQL Server, has vulnerabilities related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of Oracle Java SE’s 2D software platform allows a hacker to gain full control over the application.

The vulnerability of the Oracle Java SE 2D software platform is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker operating remotely to gain full control over the application...

The vulnerability of the EJB Container component of Oracle WebLogic Server allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the EJB Container component of Oracle WebLogic Server is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the T3 protocol...

Vulnerability of the Server: Optimizer component of the Oracle MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the Oracle MySQL database management system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite system allows a malicious actor to gain access to modify, add, or delete data.

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite is related to lack of access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP protocol...