The vulnerability of the Android operating system allows a perpetrator to cause the device to freeze and restart.

The vulnerability of the Mediaserver application’s libavc service in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause the device to freeze and restart by using a specially created file...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm GPS operating system in Android is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

QEMU Privilege Permission and Access Control Vulnerabilities

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A privilege license and access control vulnerability exists in QEMU. An attacker can exploit this vulnerability to obtain elevated privileges...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the HTC OEM fastboot Android operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the Sensor Hub special process, using a local malware applicati...

The vulnerability of Safari browser and iOS operating system allows attackers to bypass security policy mechanisms.

The vulnerability of the WebKit component in the Safari browser and the iOS operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to bypass security policy mechanisms using uncertain vectors...

The vulnerability of the Cisco Firepower Extensible Operating System and the Cisco Unified Computing System Central device management system allows a perpetrator to execute arbitrary commands.

The vulnerability of the debugging functionality of the Cisco Firepower Extensible Operating System and the Cisco Unified Computing System Central device management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating locally,...

The vulnerability of Safari browser and iOS operating system allows attackers to bypass HTTP authentication procedures or trigger a denial-of-service attack.

The vulnerability of the Safari browser and the iOS operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to bypass HTTP authentication procedures or trigger a service denial using a specially crafted web page...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Qualcomm Android operating system’s video driver is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code within the kernel context, using a local...

The vulnerability of the iOS operating system and the Safari browser allows attackers to compromise the confidentiality of information.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality of information through a specially crafted website...

CS-Cart Japanese Edition fails to restrict access permissions

Overview CS-Cart is a system for creating online shopping websites. CS-Cart Japanese Edition fails to restrict access permissions CWE-425. Hirota Kazuki of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the dynamic loading library of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...

CVE-2016-2404

Huawei switches S5700, S6700, S7700, S9700 with software V200R001C00SPC300, V200R002C00SPC100, V200R003C00SPC300, V200R005C00SPC500, V200R006C00; S12700 with software V200R005C00SPC500, V200R006C00; ACU2 with software V200R005C00SPC500, V200R006C00 have a permission control vulnerability. If a...

The vulnerability of Microsoft Edge browser allows a hacker to bypass existing access restrictions policies.

The vulnerability of Microsoft Edge is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions in other browser windows...

The vulnerability of WebSphere Application Server for application servers allows attackers to increase their privileges.

The vulnerability of OIDC components and TAI server components of WebSphere Application Server is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system is related to lack of access control. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of Windows operating system’s kernel mode drivers is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating locally, to enhance their privileges through a specially created application...

The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure

The vulnerability of the Windows operating system is related to the lack of access control. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially crafted Office document...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of Windows operating system’s kernel mode drivers is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating locally, to enhance their privileges through a specially created application...

Huawei Document Security Management Information Disclosure Vulnerability

Huawei Document Security Management DSM is a set of document rights management software from Huawei, China. The software is characterized by high stability, reliability and scalability. A security vulnerability exists in the privilege control function in Huawei DSM versions prior to...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Audioserver application for Android operating systems is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the local system within the context of a privileged process. This issue is considered...