CVE-2020-24495

Insufficient access control in the firmware for the IntelR 700-series of Ethernet Controllers before version 7.3 may allow a privileged user to potentially enable denial of service via local access...

CVE-2020-24497

The CVE-2020-24497 entry concerns Intel(R) E810 and related Intel Ethernet Controllers. Affected firmware versions before 1.4.1.13 suffer insufficient access control in firmware that may allow a privileged user to cause a Denial of Service via local access. Documented impact is DoS, with local at...

CVE-2020-24497

Insufficient Access Control in the firmware for IntelR E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable denial of service via local access...

CVE-2020-24503

CVE-2020-24503 affects Intel Ethernet E810 Adapter drivers for Linux. The issue is insufficient access control, which could allow an authenticated local user to enable information disclosure via local access. The vulnerability is associated with Linux driver versions prior to 1.0.4. The MiracleLi...

CVE-2020-24503

Insufficient access control in some IntelR Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an authenticated user to potentially enable information disclosure via local access...

The vulnerability of the jviews-framework-all.jar component at the corporate level, which allows for the extraction, transformation, and loading of Jviews data, enables a hacker to execute arbitrary code.

The vulnerability of the jviews-framework-all.jar component of the corporate-level platform for extracting, transforming, and loading Jviews data is related to insufficient access control checks for projects. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

PT-2021-3148 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to insufficient access control in the WalletService of Microsoft Windows operating systems. It allows an attacker to elevate their privileges, potentially...

PT-2021-1743 · Oracle · Oracle Complex Maintenance

Name of the Vulnerable Software and Affected Versions: Oracle Complex Maintenance, Repair, and Overhaul versions 11.5.10, 12.1, 12.2 Description: The issue is related to insufficient access control in the Dialog Box component of Oracle Complex Maintenance, Repair, and Overhaul. It allows an...

PT-2021-1584 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to insufficient access control in Microsoft SharePoint Server, which can be exploited by a remote attacker to impact the confidentiality, integrity,...

PT-2021-1542 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Windows LUAFV driver, which can be exploited to elevate privileges. This allows an attacker to affect the system. There is no...

PT-2021-1846 · Microsoft · Walletservice +1

Name of the Vulnerable Software and Affected Versions: Windows WalletService affected versions not specified Description: The issue is related to insufficient access control in the WalletService of Windows operating systems. It allows an attacker to elevate their privileges, potentially affecting...

PT-2021-1565 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insufficient access control in the Windows Print Spooler service, allowing an attacker to elevate their privileges. This can impact the system,...

CVE-2020-27340

The online help portal of Mitel MiCollab before 9.2 could allow an attacker to redirect a user to an unauthorized website by executing malicious script due to insufficient access control...

Improper access control

The online help portal of Mitel MiCollab before 9.2 could allow an attacker to redirect a user to an unauthorized website by executing malicious script due to insufficient access control...

Mitel Networks MiCollab 输入验证错误漏洞

Mitel MiCollab is an enterprise collaboration software and tools platform solution. An insufficient access control vulnerability exists in the online help portal in Mitel MiCollab versions prior to 9.2. An attacker could exploit the vulnerability by executing a malicious script to redirect users ...

Mitel Networks MiCollab 访问控制错误漏洞

Mitel MiCollab is an enterprise collaboration software and tools platform solution. An information disclosure vulnerability exists in Mitel MiCollab versions prior to 9.2 for NuPoint Messenger. The vulnerability stems from insufficient access control. An attacker could exploit the vulnerability t...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2020-5996)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5996 advisory. - vt: Disable KDFONTOPCOPY Daniel Vetter Orabug: 32187738 CVE-2020-28974 - Fonts: Support FONTEXTRAWORDS macros for built-in fonts Peilin Ye Orabug...

CVE-2020-8692

Insufficient access control in the firmware of the IntelR Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-8694

CVE-2020-8694 affects the Linux kernel powercap/RAPL subsystem. The issue allows a local, unprivileged attacker to read CPU energy meters by default, enabling information disclosure between processes or from kernel to user space. Public documents describe the root cause as insufficient access con...

PT-2020-4813 · Microsoft · Azure Sphere

Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to insufficient access control in the Azure Sphere operating system. Exploitation of this issue may allow an attacker to elevate their privileges. Recommendations:...