PT-2016-2451

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 Description The issue is related to the Qualcomm performance component in Android, which has inadequate access control. This allows attackers to gain privileges via a crafted application. Recommendations Fo...

Netgear ProSAFE NMS300 fileUpload.do Arbitrary File Upload (CVE-2016-1524; CVE-2016-1525)

An arbitrary file upload vulnerability exists in Netgear ProSafe NMS300. The vulnerability is due to inadequate access control and input validation error when accepting user uploaded files to fileUpload.do control. A remote unauthenticated attacker could exploit this vulnerability by sending...

PT-2016-1871

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.3 Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-05-01 Description The issue is related to improper validation of entry data structures in the...

PT-2016-1841

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-05-01 Description The issue is related to the Qualcomm TrustZone component in Android, which has inadequate access control. This allows attackers to gain privileges via a crafted application. The estimated number...

PT-2016-1723

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-04-01 Description The issue is related to a Texas Instruments haptic kernel driver in Android, which has inadequate access control. This allows attackers to gain privileges via a crafted application that leverage...

PT-2016-2224

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.3 Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-04-01 Description The issue is related to a function in the Telephony component of the Android...

PT-2016-2226

Name of the Vulnerable Software and Affected Versions Android versions 5.1.x through 5.1.1 Android versions 6.x before 2016-04-01 Description The issue is related to the Setup Wizard component in the Android operating system, which has inadequate access control. This allows a local attacker to...

PT-2016-1538

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.4 Description The issue is related to the Reminders component in Apple OS X, which has inadequate access control. This allows attackers to bypass the intended user-confirmation requirement. By exploiting this...

PT-2016-1601

Name of the Vulnerable Software and Affected Versions Samba versions 3.x through 4.1.22 Samba versions 4.2.x through 4.2.8 Samba versions 4.3.x through 4.3.5 Samba versions 4.4.x through 4.4.0rc3 Description The issue is related to the implementation of SMB1 in the smbd component of the Samba fil...

PT-2016-1513

Name of the Vulnerable Software and Affected Versions Ruby on Rails versions 3.1.x through 3.2.x before 3.2.22.1 Ruby on Rails versions 4.0.x through 4.1.x before 4.1.14.1 Ruby on Rails versions 4.2.x before 4.2.5.1 Ruby on Rails versions 5.x before 5.0.0.beta1.1 Description The issue is related ...

PT-2016-1011

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY49F Android versions prior to 6.0 2016-01-01 Description The issue is related to the MediaTek misc-sd driver in Android, which has inadequate access control. This allows attackers to gain privileges via a...

PT-2015-2718

Name of the Vulnerable Software and Affected Versions IBM Sterling Integrator versions 5.1 before 5010004 8 Sterling B2B Integrator versions 5.2 before 5020500 9 Description The issue is related to inadequate access control in certain functions of the IBM Sterling B2B Integrator, allowing remote...

PT-2015-2433

Name of the Vulnerable Software and Affected Versions Adobe Reader and Acrobat versions 10.x through 10.1.15 Adobe Reader and Acrobat versions 11.x through 11.0.12 Acrobat and Acrobat Reader DC Classic versions prior to 2015.006.30094 Acrobat and Acrobat Reader DC Continuous versions prior to...

PT-2015-2735

Name of the Vulnerable Software and Affected Versions NVIDIA GPU graphics driver versions prior to 346.87 NVIDIA GPU graphics driver versions prior to 352.41 for Linux NVIDIA GPU graphics driver versions prior to 352.46 for GRID vGPU and vSGA Description The issue is related to inadequate access...

PT-2015-1649

Name of the Vulnerable Software and Affected Versions WebSphere Application Server versions 8.0.0 through 8.0.0.10 WebSphere Application Server versions 8.5 through 8.5.5.5 Description The issue is related to inadequate access control in the administrative console of the WebSphere Application...

PT-2015-1624

Name of the Vulnerable Software and Affected Versions Adobe Flash Player affected versions not specified Adobe AIR affected versions not specified ALT Linux affected versions not specified Description The issue is related to inadequate access control in the software platforms. Exploitation of the...

PT-2012-1245 · Microsoft · Windows Server +1

Name of the Vulnerable Software and Affected Versions: Reliability Analysis Metrics Calculation Engine RACEng affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Reliability Analysis Metrics Calculation Engine RACEng due to inadequat...

CVE-2006-6974

Headstart Solutions DeskPRO stores sensitive information under the web root with insufficient access control, which allows remote attackers to 1 list files in the includes/ directory; obtain the SQL username and password via a direct request for 2 config.php and 3 config.php.bak in includes/; rea...

DEBIAN-CVE-2006-5117

phpMyAdmin before 2.9.1-rc1 has a libraries directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via direct requests for certain files...

CVE-2004-2428

Abczone.it WWWguestbook 1.1 stores db/dbase.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the plaintext username and password...