Django Security Bypass Vulnerability (CNVD-2019-21074)

Django is the Django Foundation's set of open source Web application framework based on the Python language . The framework includes object-oriented mapper , view system , template system and so on. A security vulnerability exists in Django that stems from the program's failure to properly handle...

CVE-2018-14885

Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote attacker to restore a database dump without knowing the super-admin password. An arbitrary password succeeds...

CVE-2018-14868

Incorrect access control in the Password Encryption module in Odoo Community 9.0 and Odoo Enterprise 9.0 allows authenticated users to change the password of other users without knowing their current password via a crafted RPC call...

IBM Tivoli Netcool Impact Privilege Permission and Access Control Vulnerability

IBM Tivoli Netcool Impact is a suite of network management software from IBM in the United States. The software has the ability to automate business-critical functions and provide a platform that provides unified access to real-time data, events and indicators. A privileged access and privilege...

The vulnerability of the command-line interface on NX-OS and FX-OS devices of Cisco’s networking operating systems allows attackers to disclose sensitive information.

The vulnerability of the command-line interfaces of NX-OS and FX-OS devices from Cisco involves incomplete verification of role-based access control RBAC. Exploiting this vulnerability allows a malicious actor to disclose sensitive information by executing diagnostic commands with specially craft...

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to deficiencies in access control, allowing attackers to escalate their privileges.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Siemens SIMATIC Ident MV420 and Siemens SIMATIC Ident MV440 Privilege License and Access Control Issues Vulnerabilities

Siemens SIMATIC Ident MV420 and Siemens SIMATIC Ident MV440 are both code reading systems from Siemens, Germany. A privilege-granting and access-control issue vulnerability exists in Siemens SIMATIC Ident MV420 and Siemens SIMATIC Ident MV440, which can be exploited by an attacker to elevate...

VulnCheck KEV: CVE-2019-7238

Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution...

The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.

The vulnerability of Windows operating system kernels is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...

CVE-2019-9548

Citrix Application Delivery Management ADM 12.1.x before 12.1.50.33 has Incorrect Access Control...

Design/Logic Flaw

An access-control flaw was found in the Octavia service when the cloud platform was deployed using Red Hat OpenStack Platform Director. An attacker could cause new amphorae to run based on any arbitrary image. This meant that a remote attacker could upload a new amphorae image and, if requested t...

PYSEC-2019-194

An access-control flaw was found in the Octavia service when the cloud platform was deployed using Red Hat OpenStack Platform Director. An attacker could cause new amphorae to run based on any arbitrary image. This meant that a remote attacker could upload a new amphorae image and, if requested t...

PYSEC-2019-194

An access-control flaw was found in the Octavia service when the cloud platform was deployed using Red Hat OpenStack Platform Director. An attacker could cause new amphorae to run based on any arbitrary image. This meant that a remote attacker could upload a new amphorae image and, if requested t...

The vulnerability of the Interaction Center Intelligence component of the Oracle E-Business Suite automation system allows a perpetrator to access confidential information.

The vulnerability of the Interaction Center Intelligence component of the Oracle E-Business Suite automation system for enterprises is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to confidential...

The vulnerability of the Oracle One-to-One Fulfillment sub-component, the Print Server component of the Oracle E-Business Suite, allows a perpetrator to access confidential information.

The vulnerability of the Oracle One-to-One Fulfillment sub-component, the Print Server, within the Oracle E-Business Suite system for enterprise automation activities is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to...

The vulnerability of the Windows Error Reporting error reporting service allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Error Reporting WER error reporting service in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to execute arbitrary code in kernel mode...

CVE-2019-11895

A potential improper access control vulnerability exists in the JSON-RPC interface of the Bosch Smart Home Controller SHC before 9.8.905 that may result in a successful denial of service of the SHC and connected sensors and actuators. In order to exploit the vulnerability, the adversary needs to...

CVE-2019-6958

A recently discovered security vulnerability affects all Bosch Video Management System BVMS versions 9.0 and below, DIVAR IP 2000, 3000, 5000 and 7000, Configuration Manager, Building Integration System BIS with Video Engine, Access Professional Edition APE, Access Easy Controller AEC, Bosch Vide...

CVE-2019-3895

An access-control flaw was found in the Octavia service when the cloud platform was deployed using Red Hat OpenStack Platform Director. An attacker could cause new amphorae to run based on any arbitrary image. This meant that a remote attacker could upload a new amphorae image and, if requested t...

The vulnerability of the PostgreSQL database management system, related to deficiencies in access control, allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the PostgreSQL database management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code remotely...