PT-2018-2394 · Oracle +5 · Mysql Server +4

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 5.6.41 and prior Oracle MySQL versions 5.7.23 and prior Oracle MySQL versions 8.0.12 and prior Description: The issue is related to insufficient access control in the InnoDB component of Oracle MySQL, allowing a...

CVE-2018-6503 MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability

A potential Access Control vulnerability has been identified in ArcSight Management Center ArcMC in all versions prior to 2.81. This vulnerability could be exploited to allow for vulnerable Access Controls...

CVE-2018-6504 MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability

A potential Cross-Site Request Forgery CSRF vulnerability has been identified in ArcSight Management Center ArcMC in all versions prior to 2.81. This vulnerability could be exploited to allow for Cross-Site Request Forgery CSRF...

CVE-2018-6502 MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability

A potential Reflected Cross-Site Scripting XSS Security vulnerability has been identified in ArcSight Management Center ArcMC in all versions prior to 2.81. This vulnerability could be exploited to allow for Reflected Cross-site Scripting XSS...

CVE-2018-6500 MFSBGN03824 rev.1 - ArcSight Management Center, Insufficient Access Control, Reflected Cross Site Scripting, Access Control vulnerability, Cross-Site Request Forgery (CSRF), Unauthenticated File Download, Directory Traversal Vulnerability

A potential Directory Traversal Security vulnerability has been identified in ArcSight Management Center ArcMC in all versions prior to 2.81. This vulnerability could be remotely exploited to allow Directory Traversal...

The vulnerability of the Accessibility Framework component of the Mac OS X operating system allows a perpetrator to execute arbitrary code with system privileges or disclose protected information.

The vulnerability of the Accessibility Framework component in the Mac OS X operating system is related to insufficient access control. Exploiting this vulnerability allows an attacker to execute arbitrary code with system privileges or disclose sensitive information through a specially created...

The vulnerability of the Firmware component of the Mac OS X operating system, which allows a hacker to modify the EFI flash memory regions

The vulnerability of the Firmware component of the Mac OS X operating system is related to insufficient access control. Exploiting this vulnerability could allow an attacker to modify the EFI flash memory areas using a specially crafted privileged application...

The vulnerability of the DNSAPI component for Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the DNSAPI component DNSAPI.dll in Windows operating systems is related to insufficient access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the Local System Account by sending specially crafted DNS responses from ...

PT-2018-3896 · Oracle +1 · Mysql Server

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.11 and prior Description: The issue is related to insufficient access control in the MySQL Server component, specifically in the Server: Optimizer subcomponent. It allows an attacker with network access via multiple...

PT-2018-3902 · Oracle +1 · Mysql Server

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.11 and prior Description: The issue is related to insufficient access control in the MySQL Server component, specifically in the Shell: Core / Client subcomponent. This allows an attacker with low privileges and logo...

Security Bulletin: Multiple potential vulnerabilites in IBM OpenPages GRC Platform

Summary The following security vulnerabilities have been identified in versions of IBM OpenPagesGRC Platform. See Vulnerability Details section for more information. Vulnerability Details Customers who have IBM OpenPages GRC platform are potentially impacted by the following vulnerabilities: CVEI...

The vulnerability of the Qualcomm Trusted Execution Environment component in the Android operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Qualcomm Trusted Execution Environment in the Android operating system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the Qualcomm operating system Android, which allows a hacker to enhance their privileges and execute arbitrary code.

The vulnerability of the Qualcomm operating system Android is related to insufficient access control. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

The vulnerability of the Qualcomm Sound Codec component in the Android operating system allows a hacker to enhance their privileges and execute arbitrary code.

The vulnerability of the Qualcomm Sound Codec component in the Android operating system is related to insufficient access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code using a specially crafted application...

The vulnerability of the Qualcomm Access Control component in the Android operating system allows a violator to execute arbitrary code.

The vulnerability of the Qualcomm Access Control component in the Android operating system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Qualcomm Access Control Policy component in the Android operating system allows a violator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Qualcomm Access Control Policy component in the Android operating system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Qualcomm Access Control component in the Android operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Qualcomm Access Control component in the Android operating system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Qualcomm Secure Display component in the Android operating system allows a hacker to trigger buffer overflows.

The vulnerability of the Qualcomm Secure Display component in the Android operating system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to trigger buffer overflows...

PT-2018-1329

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insufficient access control in the Win32k component of Windows operating systems. It allows an attacker to potentially elevate their privileges using a specially craft...

PT-2018-3056 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.5.59 and prior Oracle MySQL Server versions 5.6.39 and prior Oracle MySQL Server versions 5.7.21 and prior Description: The issue is related to insufficient access control in the Server: Locking component of...