Intel Ethernet 700 Series Controllers Insufficient Access Control Vulnerability (CNVD-2019-41458)

Intel Ethernet 700 Series Controllers are network adapter products from Intel. An insufficient access control vulnerability exists in Intel Ethernet 700 Series Controllers firmware prior to version 7.0. An attacker could exploit this vulnerability to achieve elevation of privilege, cause a denial...

CVE-2019-0150

Insufficient access control in firmware IntelR Ethernet 700 Series Controllers versions before 7.0 may allow a privileged user to potentially enable a denial of service via local access...

DEBIAN-CVE-2019-0154

Insufficient access control in subsystem for Intel R processor graphics in 6th, 7th, 8th and 9th Generation IntelR CoreTM Processor Families; IntelR PentiumR Processor J, N, Silver and Gold Series; IntelR CeleronR Processor J, N, G3900 and G4900 Series; IntelR AtomR Processor A and E3900 Series;...

CVE-2019-0142

Insufficient access control in ilp60x64.sys driver for IntelR Ethernet 700 Series Controllers before version 1.33.0.0 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2019-0184

Insufficient access control in protected memory subsystem for IntelR TXT for 6th, 7th, 8th and 9th Generation IntelR CoreTM Processor Families; IntelR XeonR Processor E3-1500 v5 and v6 Families; IntelR XeonR E-2100 and E-2200 Processor Families with IntelR Processor Graphics and IntelR TXT may...

CVE-2019-0150

Intel Ethernet 700 Series Controllers firmware before version 7.0 suffer from Insufficient Access Control (CVE-2019-0150), potentially allowing a privileged user to cause denial of service via local access. Public sources in the connected documents identify the affected components as the firmware...

CVE-2019-11174

Insufficient access control in IntelR Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure via network access...

Intel Warns of Critical Info-Disclosure Bug in Security Engine

A critical security bug in the Intel Converged Security and Manageability Engine CSME could allow escalation of privilege, denial of service or information disclosure. The details are included in a bug advisory that in total covers 77 vulnerabilities, 67 of which were found by internal Intel staf...

2019.2 IPU – Intel® Graphics Driver for Windows* and Linux Advisory

Summary: Potential security vulnerabilities in Intel® Graphics Driver for Windows and Linux may allow denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2019-11112 Description: Memory corruption in Kernel Mode Driv...

The vulnerability of the Outside In Filters component within the software development kit (SDK) of Outside In Technology allows a malicious individual to gain unauthorized access to read, modify, add, or delete data, or to cause a service failure.

The vulnerability of the Outside component in the software development toolset SDK related to Outside in Technology is linked to insufficient access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to read, modify, add, or delete data...

CVE-2019-15260

A vulnerability in Cisco Aironet Access Points APs Software could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device with elevated privileges. The vulnerability is due to insufficient access control for certain URLs on an affected device. An attacker could...

Improper access control

A vulnerability in Cisco Aironet Access Points APs Software could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device with elevated privileges. The vulnerability is due to insufficient access control for certain URLs on an affected device. An attacker could...

CVE-2019-15260 Cisco Aironet Access Points Unauthorized Access Vulnerability

A vulnerability in Cisco Aironet Access Points APs Software could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device with elevated privileges. The vulnerability is due to insufficient access control for certain URLs on an affected device. An attacker could...

Cisco Aironet Access Points Unauthorized Access Vulnerability

A vulnerability in Cisco Aironet Access Points APs Software could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted device with elevated privileges. The vulnerability is due to insufficient access control for certain URLs on an affected device. An attacker could...

PT-2019-3753 · Oracle · Adf +2

Name of the Vulnerable Software and Affected Versions: Oracle JDeveloper and ADF versions 11.1.1.9.0 through 12.2.1.3.0 Description: The issue is related to insufficient access control in the OAM component of Oracle JDeveloper and ADF, allowing a remote attacker to gain unauthorized access to...

PT-2019-3703 · Mysql Server +6 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.27 and prior MySQL Server versions 8.0.17 and prior Description: The issue is related to insufficient access control in the MySQL Server product, allowing a low-privileged attacker with network access via multiple...

PT-2019-3516

Name of the Vulnerable Software and Affected Versions Microsoft Windows Update Client affected versions not specified Description The issue is related to an elevation of privilege, where the Microsoft Windows Update Client does not properly handle privileges. This can be exploited by an attacker...

PT-2019-13356 · Telestar +3 · Telestar Bobs Rock Radio +11

Name of the Vulnerable Software and Affected Versions: TELESTAR Bobs Rock Radio version affected versions not specified Dabman D10 version affected versions not specified Dabman i30 Stereo version affected versions not specified Imperial i110 version affected versions not specified Imperial i150...

PT-2019-3100 · Centos · Centos Web Panel

Name of the Vulnerable Software and Affected Versions: CentOS Web Panel version 0.9.8.851 Description: The issue is related to an insecure object reference, which allows an attacker to delete databases, such as oauthv2, from the server via an attacker account. This is due to insufficient access...

CVE-2019-11163

Insufficient access control in a hardware abstraction driver for IntelR Processor Identification Utility for Windows before version 6.1.0731 may allow an authenticated user to potentially enable escalation of privilege, denial of service or information disclosure via local access...