PT-2018-1038 · Mysql Server +4 · Mysql Server +4

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.6.38 and prior MySQL Server versions 5.7.20 and prior Description: The issue is related to inadequate access control in the InnoDB component of the MySQL database management system. Exploitation of this issue can allow...

UBUNTU-CVE-2018-5702

Transmission through 2.92 relies on X-Transmission-Session-Id which is not a forbidden header for Fetch for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in conjunction with a DNS...

CVE-2017-1493

IBM UrbanCode Deploy UCD 6.1 and 6.2 could allow an authenticated user to edit objects that they should not have access to due to improper access controls. IBM X-Force ID: 128691...

Genexis Automatic Provisioning System Access Control Vulnerability

The Genexis Automatic Provisioning System GAPS is a system for automatic configuration of routers and networks from the Dutch company GENEXIS. An access control vulnerability exists in GAPS 7.2 and earlier versions. An attacker can exploit this vulnerability to obtain configured setup information...

The vulnerability of the UnpackCore function in the Android operating system’s kernel from the CAF repository allows a hacker to execute arbitrary code within the context of a privileged process.

The vulnerability of the UnpackCore function in the Android operating system’s kernel from the CAF repository is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially...

The vulnerability of the libavc library of the Media Framework operating system Android allows a hacker to execute arbitrary code within the context of a privileged process.

The vulnerability of the libavc library in the Media Framework component of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially crafted...

The vulnerability in the JavaScript V8 engine of Google Chrome’s browser allows a hacker to execute arbitrary code.

The vulnerability in the JavaScript V8 engine of Google Chrome’s Google Chrome browser is related to deficiencies in access control during the processing of the Array.prototype.indexOf method. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a “sandbox”...

Techno - Portfolio Management Panel Access Control Vulnerability

Techno - Portfolio Management Panel is a set of portfolio management panel scripts. An access control vulnerability exists in Techno - Portfolio Management Panel on 2017-11-16 and prior versions, which stems from the program failing to detect if a panel/portfolio.php?action=delete request is...

The vulnerability of the OxygenOS operating system on OnePlus 3 and 3T devices, which allows a hacker to gain increased privileges

The vulnerability of the OxygenOS operating system in OnePlus 3 and 3T devices is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to gain root privileges and block notifications regarding the replacement of the system partition by using the...

OpenJDK: insufficient access control checks in AsynchronousChannelGroupImpl (8172465, Libraries)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protoco...

The vulnerability of the user interface (UI) of the Apache Storm distributed processing platform allows a hacker to execute arbitrary code.

The vulnerability of the user interface UI of the Apache Storm distributed processing platform’s software platform is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to remotely connect to the UI and execute arbitrary code...

Multiple vulnerabilities in the Intel Management Engine subsystem of the Microprogramming Software for the Platform Controller Hub family, which allow attackers to enhance their privileges

The multiple vulnerabilities of the Intel Management Engine sub-system within the microprogramming software of the Platform Controller Hub PCH family, which serve as south bridges, are caused by buffer overflows. These vulnerabilities are related to deficiencies in access control. Exploiting thes...

TeamPass items.series.php Access Control Vulnerability

TeamPass is a dedicated password manager for Apache, MySQL and PHP. An access control vulnerability exists in versions prior to TeamPass 2.1.27.9 that stems from the program failing to properly enforce item access control. An attacker can exploit the vulnerability by tampering with requests to...

The vulnerability of the class verifier in the IBM J9 VM allows a hacker to disable the security controller and increase their privileges.

The vulnerability of the class verifier in the IBM J9 VM is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to disable the security controller and gain increased privileges...

The vulnerability of the initial loader of Huawei’s Android operating system allows a hacker to increase their privileges.

The vulnerability of the initial loader of Huawei’s Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server allows a perpetrator to gain access with root privileges.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to deficiencies in access control. Exploiting this vulnerability could allow a perpetrator with privileges as the local owner of a DB2 instance to gain access with ro...

Vulnerability in the UI framework of the Android operating system, which allows attackers to enhance their privileges and affect the confidentiality, integrity, and accessibility of data.

The vulnerability in the Android operating system’s UI framework is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and compromise the confidentiality, integrity, and accessibility of data...

The vulnerabilities of console ports on line-of-duty cards of CISCO ASR 1000 and Cisco cBR-8 series routers allow attackers to gain access to the operating system and influence the confidentiality, integrity, and availability of data.

The vulnerability of console ports on Cisco ASR 1000 and Cisco cBR-8 line cards is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating locally, to gain access to the operating system and compromise the confidentiality, integrity, and...

HP ArcSight Enterprise Security Manager and Enterprise Security Manager Express Access Control Error Vulnerability

HP ArcSight ESM Enterprise Security Manager and ESM Express are both enterprise security management software with event correlation and security analysis capabilities from Hewlett Packard Enterprise HPE. The software collects, correlates and reports on enterprise-wide security events in real time...

The vulnerability of software tools for backup and data restoration in NetBackup Appliance and NetBackup, related to lack of access control, allows attackers to perform file writing in a privileged mode.

The vulnerability of software tools for backup and data restoration in NetBackup Appliance and NetBackup is related to lack of access control. Exploiting this vulnerability allows a malicious actor to perform file writing in a privileged mode, using the “bprd” process...