The vulnerability of the US Federal Specific sub-component of the PeopleSoft Enterprise HCM Human Resources package from Oracle PeopleSoft Products allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the US Federal Specific sub-component of the PeopleSoft Enterprise HCM Human Resources package from Oracle PeopleSoft Products is related to inadequate access control mechanisms. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

PT-2019-3659 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.17 and prior Description: The issue is related to inadequate access control in the Server: Optimizer component of Oracle MySQL, allowing a high-privileged attacker with network access via multiple protocols to...

PT-2019-3654 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.17 and prior Description: The issue is related to inadequate access control in the Server: DDL component of the Oracle MySQL database management system. This can be exploited by a remote attacker to cause a denial of...

PT-2019-3578 · Oracle · Oracle Solaris +1

Name of the Vulnerable Software and Affected Versions: Oracle Solaris version 11 Description: The issue is related to a component called XScreenSaver in the Oracle Solaris operating system, which has inadequate access control. This can be exploited by an attacker to gain full control over the...

CVE-2019-7848

Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Inadequate access control vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user...

The vulnerability of the Microsoft Dynamics 365 customer relationship management system, related to inadequate access control, allows a malicious individual to increase their privileges.

The vulnerability of the Microsoft Dynamics 365 customer relationship management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to increase their privileges by sending a specially crafted request to the vulnerable server...

The vulnerability of the “Outside In” component in the software development kit (SDK) of “Outside In Technology” allows a perpetrator to gain unauthorized access to protected data or cause service failures.

The vulnerability of the “Outside In” component in the software development kit SDK related to Outside In Technology is associated with inadequate access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected data or cause service failures...

The vulnerability of the “Outside In” component in the software development kit (SDK) of “Outside In Technology” allows a perpetrator to gain unauthorized access to protected data or cause service failures.

The vulnerability of the “Outside In” component in the software development kit SDK related to Outside In Technology is associated with inadequate access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected data or cause service failures...

PT-2019-1256 · Oracle +9 · Mysql Server +8

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.6.42 and prior MySQL Server versions 5.7.24 and prior MySQL Server versions 8.0.13 and prior Description: The vulnerability in the MySQL Server component of Oracle MySQL is related to inadequate access control...

Improper access control

The AMD Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-1...

PT-2018-3315 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.5.58 and prior MySQL Server versions 5.6.38 and prior MySQL Server versions 5.7.20 and prior Description: The vulnerability in the MySQL Server component of Oracle MySQL, specifically in the Server:Optimizer...

PT-2018-3317 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.5.58 and prior Oracle MySQL versions 5.6.38 and prior Oracle MySQL versions 5.7.20 and prior Description: The issue is related to inadequate access control in the MySQL Server component, specifically in the Server:DDL...

ok.ru: ВИП подарки бесплатные без подключения ВИП услуги

Attacker could send VIP gifts for free due to insecure direct object reference. Недостаточная проверка прав при дарении подарка позволяла дарить VIP подарки бесплатно...

PT-2016-3058 · Mysql Server +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.5.53 and earlier MySQL Server versions 5.6.34 and earlier MySQL Server versions 5.7.16 and earlier Description: The issue is related to inadequate access control in the MySQL Server component, specifically in the Serve...

PT-2016-2996 · Siemens · Siemens Sicam Pas

Name of the Vulnerable Software and Affected Versions: Siemens SICAM PAS versions prior to V8.09 Description: The issue is related to inadequate access control, allowing a remote attacker to upload, download, or delete files in certain parts of the file system. This can be achieved by sending...

The vulnerability of the Linux operating system, which allows a hacker to overwrite arbitrary files

The vulnerability of the EXT4IOCMOVEEXT ioctl implementation in the Linux file system is related to deficiencies in access control. Exploiting this vulnerability allows a local attacker to re-write arbitrary files using a specially created request that relies on insufficient access rights checkin...

Netgear ProSAFE NMS300 fileUpload.do Arbitrary File Upload (CVE-2016-1524; CVE-2016-1525)

An arbitrary file upload vulnerability exists in Netgear ProSafe NMS300. The vulnerability is due to inadequate access control and input validation error when accepting user uploaded files to fileUpload.do control. A remote unauthenticated attacker could exploit this vulnerability by sending...

PT-2012-1245 · Microsoft · Windows Server +1

Name of the Vulnerable Software and Affected Versions: Reliability Analysis Metrics Calculation Engine RACEng affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Reliability Analysis Metrics Calculation Engine RACEng due to inadequat...

CVE-2006-6974

Headstart Solutions DeskPRO stores sensitive information under the web root with insufficient access control, which allows remote attackers to 1 list files in the includes/ directory; obtain the SQL username and password via a direct request for 2 config.php and 3 config.php.bak in includes/; rea...

DEBIAN-CVE-2006-5117

phpMyAdmin before 2.9.1-rc1 has a libraries directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via direct requests for certain files...