The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Wi-Fi component of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to enhance their privileges through a specially created application...

Medium: samba

Issue Overview: A missing access control flaw was found in Samba. A remote, authenticated attacker could use this flaw to view the current snapshot on a Samba share, despite not having DIRECTORYLIST access rights. An access flaw was found in the way Samba verified symbolic links when creating new...

RHEL 7 : Storage Server (RHSA-2016:0016)

Updated samba packages that fix multiple security issues are now available for Red Hat Gluster Storage 3.1 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

The vulnerability of the Firefox browser allows attackers to obtain confidential information, increase their privileges, or perform XSS attacks.

The vulnerability of Firefox browsers is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to enhance their privileges, carry out XSS attacks, or potentially obtain confidential information through a specially crafted website...

foreman: reports show/destroy not restricted by host authorization

A flaw was discovered where Satellite failed to properly enforce permissions on the show and delete actions for reports. An authenticated user with show or delete report permissions could use this flaw to view or delete any reports held in Foreman...

The vulnerability of the HP-UX operating system, which allows a hacker to increase their privileges

The vulnerability of the pppoec component in the HP-UX operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow an attacker, operating locally, to enhance their privileges...

The vulnerability of NVIDIA GPU graphics processor software allows attackers to enhance their privileges.

The vulnerability of the nvSCPAPISvr.exe file, a component of the Stereoscopic 3D Driver Service software for NVIDIA GPUs, is related to access control deficiencies. Exploiting this vulnerability allows an attacker, operating locally, to enhance their privileges by using command lines and the...

The vulnerability of the Ubuntu operating system, which allows a hacker to bypass the screen lock mechanism

The vulnerability of the driver/subprocs.c file of the XScreenSaver component in the Ubuntu operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious individual to bypass screen lockouts by reconnecting the monitors...

The vulnerability of the IBM Sterling B2B Integrator, a software tool for automating business processes, allows a perpetrator to read or upload files.

The vulnerability of the IBM Sterling B2B Integrator software for automating business processes is related to deficiencies in restricting access to certain functions. Exploiting this vulnerability could allow a malicious actor to read or upload files by using the password-changing mechanism...

The vulnerability of the InfoSphere Information Server software platform allows a perpetrator to circumvent existing access restrictions and gain access to protected information.

The vulnerability of the InfoSphere Information Server software lies in its lack of access control mechanisms for certain functions. Exploiting this vulnerability could allow a malicious actor to bypass existing access restrictions and gain access to protected information...

The vulnerability of the server operating system OS X Server, which allows a hacker to circumvent existing access restrictions

The vulnerability of the Web server operating system OS X Server is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions remotely...

The vulnerabilities of PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, allow attackers to circumvent JavaScript restrictions.

The vulnerability of the ANAuthenticateResource method in PDF editing programs from Adobe Acrobat and Adobe Acrobat Document Cloud, as well as in PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, is related to deficiencies in access control for certain functions. Exploiting...

The vulnerabilities of PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, allow attackers to circumvent JavaScript restrictions.

The vulnerability of the ANTrustPropagateAll method in PDF editing programs from Adobe Acrobat and Adobe Acrobat Document Cloud, as well as in PDF viewing programs from Adobe Reader and Adobe Reader Document Cloud, is related to deficiencies in access control for certain functions. Exploiting thi...

The vulnerabilities of PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, allow attackers to circumvent JavaScript restrictions.

The vulnerability of the CBSharedReviewIfOfflineDialog method in PDF editing programs from Adobe Acrobat and Adobe Acrobat Document Cloud, as well as in PDF viewing programs from Adobe Reader and Adobe Reader Document Cloud, is related to deficiencies in access control for certain functions...

The vulnerabilities of PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, allow attackers to circumvent JavaScript restrictions.

The vulnerability of the ANSendForSharedReview method in PDF editing programs from Adobe Acrobat and Adobe Acrobat Document Cloud, as well as in PDF viewing programs from Adobe Reader and Adobe Reader Document Cloud, is related to deficiencies in access control for certain functions. Exploiting...

The vulnerabilities of PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, allow attackers to circumvent JavaScript restrictions.

The vulnerability of the ANSendForBrowserReview method in PDF editing programs from Adobe Acrobat and Adobe Acrobat Document Cloud, as well as in PDF viewing programs from Adobe Reader and Adobe Reader Document Cloud, is related to deficiencies in access control for certain functions. Exploiting...

The vulnerability of Google Chrome browser allows a violator to circumvent existing access restrictions.

The vulnerability of the Google V8 browser component in Google Chrome is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions remotely...

The vulnerability of the Microsoft SharePoint Server corporate application allows a hacker to read arbitrary files.

The vulnerability of the InfoPath Forms Services component of the Microsoft SharePoint Server corporate application suite is related to deficiencies in access control mechanisms. Exploiting this vulnerability could allow an attacker, operating remotely, to read arbitrary files using a specially...

The vulnerabilities of PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, as well as PDF viewing programs like Adobe Reader and Adobe Reader Document Cloud, allow attackers to circumvent JavaScript restrictions.

The vulnerability of the DoIdentityDialog method in PDF editing programs from Adobe Acrobat and Adobe Acrobat Document Cloud, as well as in PDF viewing programs from Adobe Reader and Adobe Reader Document Cloud, is related to deficiencies in access control for certain functions. Exploiting this...

OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688)

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883...