PT-2017-19400

Name of the Vulnerable Software and Affected Versions network-manager-applet affected versions not specified Description The issue is related to incorrect permission checking by network-manager-applet when connecting to certain wireless networks. A local attacker could exploit this to access loca...

Unbreakable Enterprise kernel security update

kernel-uek 4.1.12-37.6.2 - KEYS: potential uninitialized variable Dan Carpenter Orabug: 24393865 CVE-2016-4470 - ovl: fix permission checking for setattr Miklos Szeredi Orabug: 24393742 CVE-2015-8660...

PT-2015-7816

Name of the Vulnerable Software and Affected Versions Token Insert Entity module versions 7.x-1.x before 7.x-1.1 for Drupal Description The issue allows remote authenticated users with certain permissions to bypass intended access restrictions and possibly obtain sensitive information by insertin...

PT-2015-6945

Name of the Vulnerable Software and Affected Versions Entityform Block module versions 7.x-1.x through 7.x-1.2 Description The issue allows remote attackers to obtain access to certain entityforms due to improper permission checking when a form is locked to a role. Recommendations For Entityform...

PT-2015-6951

Name of the Vulnerable Software and Affected Versions Drupal Navigate module affected versions not specified Description The issue concerns a permission checking flaw in the Navigate module for Drupal. This flaw allows remote authenticated users to modify custom widgets and create widget database...

MS15-001: Vulnerability in Windows Application Compatibility cache could allow elevation of privilege: January 13, 2015

None None...

PT-2015-4251

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.18 Description The issue allows remote authenticated users to obtain sensitive information about restricted issues due to improper permission checking when sending an email about related monitored issues...

Liferay Portal 6.1 - 6.0.x Privilege Escalation

No description provided by source. Liferay users can assign themselves to organizations, leading to possible privilege escalation Description: Liferay Portal is an enterprise portal written in Java Due to insufficient permission checking in the updateOrganizations method of UserService any user c...

PT-2014-5541

Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 5.0.16 ownCloud Server versions 6.0.x prior to 6.0.3 Description The issue allows remote authenticated users to read the names of files of other users by leveraging access to multiple accounts, due to improper...

PT-2014-5639

Name of the Vulnerable Software and Affected Versions ownCloud Server versions prior to 6.0.1 Description The issue allows remote authenticated users to access arbitrary preview pictures due to improper permission checking. Recommendations For ownCloud Server versions prior to 6.0.1, update to...

PT-2014-5546

Name of the Vulnerable Software and Affected Versions TinyMCE Color Picker plugin versions prior to 1.2 Description The issue concerns improper permission checking, which allows remote attackers to modify plugin settings. Recommendations For versions prior to 1.2, update to version 1.2 or later t...

PT-2014-3255

Name of the Vulnerable Software and Affected Versions Invitation module versions 7.x-2.x Description The issue allows remote attackers to obtain sensitive information due to improper permission checking. Recommendations For Invitation module versions 7.x-2.x, update the module to a version that...

Amazon Linux AMI : mysql51 (ALAS-2012-145)

A stack-based buffer overflow flaw was found in the user permission checking code in MySQL. An authenticated database user could use this flaw to crash the mysqld daemon or, potentially, execute arbitrary code with the privileges of the user running the mysqld daemon. CVE-2012-5611 C Tenable...

Joomla! -- XXS and DDoS vulnerabilities

The JSST and the Joomla! Security Center report: 20130405 - Core - XSS Vulnerability Inadequate filtering leads to XSS vulnerability in Voting plugin. 20130403 - Core - XSS Vulnerability Inadequate filtering allows possibility of XSS exploit in some circumstances. 20130402 - Core - Information...

[20130402] - Core - Information Disclosure

Inadequate permission checking allows unauthorised user to see permission settings in some circumstances...

[20130401] - Core - Privilege Escalation

Inadequate permission checking allows unauthorised user to delete private messages...

PT-2012-6038

Name of the Vulnerable Software and Affected Versions Email Field module versions 6.x-1.x before 6.x-1.3 for Drupal Description The issue allows remote attackers to email the stored address via unspecified vectors when the field contact field formatter is set to the full or teaser display mode an...

Scientific Linux Security Update : mysql on SL6.x i386/x86_64 (20121207)

A stack-based buffer overflow flaw was found in the user permission checking code in MySQL. An authenticated database user could use this flaw to crash the mysqld daemon or, potentially, execute arbitrary code with the privileges of the user running the mysqld daemon. CVE-2012-5611 After installi...

Important: mysql51

Issue Overview: A stack-based buffer overflow flaw was found in the user permission checking code in MySQL. An authenticated database user could use this flaw to crash the mysqld daemon or, potentially, execute arbitrary code with the privileges of the user running the mysqld daemon. CVE-2012-561...

PT-2012-5437

Name of the Vulnerable Software and Affected Versions The Monthly Archive by Node Type module version 6.x for Drupal Description The issue is related to improper permission checking by the module, allowing remote attackers to access restricted nodes. Recommendations For The Monthly Archive by Nod...