The vulnerability of the RAD component of the Solaris operating system, which allows a hacker to gain unauthorized access to protected data

The vulnerability of the RAD component of the Solaris operating system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using network protocols...

The vulnerability of the Kernel component of the Solaris operating system, which allows a hacker to trigger a service failure

The vulnerability of the Kernel component of the Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures through RPC calls...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Outside In Filters component of the software development kit (SDK) provided by Outside In Technology allows a perpetrator to gain unauthorized access to protected data or cause service failures.

The vulnerability of the Outside In Filters component within the software development kit SDK of Outside In Technology is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected data or cause service failures...

The vulnerability of the BI Publisher Security component of the BI Publisher reporting tool allows a malicious individual to gain unauthorized access to protected data.

The vulnerability of the BI Publisher Security component of the BI Publisher reporting tool is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

The vulnerability of the Outside In Filters component of the software development kit (SDK) provided by Outside In Technology allows a perpetrator to gain unauthorized access to protected data or cause service failures.

The vulnerability of the Outside In Filters component within the software development kit SDK of Outside In Technology is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected data or cause service failures...

PT-2018-1525

Name of the Vulnerable Software and Affected Versions Modicon M221 versions prior to V1.6.2.0 Description A Permissions, Privileges, and Access Control issue exists, allowing unauthorized users to decode passwords using a rainbow table. This could enable a remote attacker to exploit the...

The vulnerability of the Java DB component of the Java SE software platform allows a perpetrator to gain full control over the application.

The vulnerability of the Java DB component of the Java SE software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using network protocols...

PT-2018-7142 · Openstack · Openstack Orchestration (Heat) Service

Name of the Vulnerable Software and Affected Versions: OpenStack Orchestration heat service versions prior to 8.0.0 OpenStack Orchestration heat service version 6.1.0 OpenStack Orchestration heat service version 7.0.2 Description: An access-control flaw was found in the OpenStack Orchestration he...

mstdlib Access Privilege Gain Vulnerability

mstdlib is a C library for providing general-purpose functionality. A security vulnerability exists in mstdlib version 1.2.0, which arises from a program that fails to perform proper access control on a file. An attacker can exploit the vulnerability to create files and gain access to data...

CVE-2018-13791

The HTTP API in ABBYY FlexiCapture before 12 Release 1 Update 7 allows an attacker to conduct Access Control attacks via the /FlexiCapture12/Login/Server/SevaUserProfile FlexiCaptureTmsSts2 parameter...

CVE-2018-12999

Incorrect Access Control in AgentTrayIconServlet in Zoho ManageEngine Desktop Central 10.0.255 allows attackers to delete certain files on the web server without login by sending a specially crafted request to the server with a computerName=../ substring to the /agenttrayicon URI...

The vulnerability of the embedded web-server software module of the APC MGE SNMP/Web Card Transverse 66074 power supply failure management system allows a hacker to gain full control over the device.

The vulnerability of the embedded web-server-based microprogramming software module for managing uninterruptible power supplies, the APC MGE SNMP/Web Card Transverse 66074, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass...

The vulnerability of the com.ipvanish.osx.vpnhelper component of the IPVanish VPN software allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the com.ipvanish.osx.vpnhelper component of the IPVanish VPN software relates to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands with root privileges using a specially crafted XPC messag...

unboundid-ldapsdk: Incorrect Access Control vulnerability in process function in SimpleBindRequest class

UnboundID LDAP SDK version from commit 801111d8b5c732266a5dbd4b3bb0b6c7b94d7afb up to commit 8471904a02438c03965d21367890276bc25fa5a6, where the issue was reported and fixed contains an Incorrect Access Control vulnerability in process function in SimpleBindRequest class doesn't check for empty...

The vulnerability of the Qualcomm operating system Android, which allows a hacker to increase their privileges

The vulnerability of the Qualcomm operating system Android is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Qualcomm operating system Android, which allows a hacker to increase their privileges

The vulnerability of the Qualcomm operating system Android is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Qualcomm operating system Android, which allows a hacker to increase their privileges

The vulnerability of the Qualcomm operating system Android is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Tenda AC15 router’s microprogramming software allows a hacker to gain access to the device with root privileges.

The vulnerability of the Tenda AC15 router’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the device with root privileges by running the telnetd daemon using a special...

The vulnerability of the com.privat.vpn.helper component of the software for accessing VPN services, PrivateVPN, allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the com.privat.vpnhelper component, which implements the XPC service for accessing the PrivateVPN service, is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with root privileges...