Privilege Bypass Vulnerability in Schneider Electric P3420 PLC Module

Schneider Electric Modicon M340 PLC is a programmable controller product of Schneider Electric France. A privilege bypass vulnerability exists in the Schneider Electric P3420 PLC module. An attacker can cause the PLC to start and stop by constructing PLC start-stop data messages using private...

Multiple Intel Products Privilege License and Access Control Issues Vulnerabilities

Intel Server Board and so on are the products of the American Intel Intel company.Intel Server Board is a server motherboard.Intel Server System is a server array card.Intel Compute Module is a computing module. A vulnerability exists in a number of Intel products with privilege license and acces...

NetKit Privilege Permission and Access Control Vulnerabilities

NetKit is a network environment simulation system. A security vulnerability exists in the rcp.c file of the rcp client in NetKit 0.17 and earlier versions. An attacker can exploit the vulnerability to bypass access with the help of . or an empty filename to bypass access restrictions...

Cybozu Garoon Access Privilege Bypass Vulnerability

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, etc. and supports free switching among three languages Chinese, Japanese, and English. An access privilege bypass vulnerability exists i...

Ladder CMS Privilege Limit Bypass Vulnerability (CNVD-2019-09102)

Tianti tianti is a free lightweight CMS system written in Java , currently provides a total solution from the back-end management to the front-end display . A privilege restriction bypass vulnerability exists in Tianti 2.3, which can be exploited by a remote authenticated user to bypass the...

Ladder CMS Privilege Limit Bypass Vulnerability

Tianti tianti is a free lightweight CMS system written in Java , currently provides a total solution from the back-end management to the front-end display . A privilege limit bypass vulnerability exists in the skin management feature in tianti 2.3. The vulnerability stems from the fact that...

DEBIAN-CVE-2018-18653

The Linux kernel, as used in Ubuntu 18.10 and when booted with UEFI Secure Boot enabled, allows privileged local users to bypass intended Secure Boot restrictions and execute untrusted code by loading arbitrary kernel modules. This occurs because a modified kernel/module.c, in conjunction with...

ZOHO ManageEngine OpManager Privilege Bypass Vulnerability

ZOHO ManageEngine OpManager is a set of network, server and virtualization monitoring software from ZOHO. A privilege bypass vulnerability exists in versions prior to ZOHO ManageEngine OpManager 12.3 Build 123196, which stems from the program's failure to authenticate /oputilsServlet requests, an...

postgresql: INSERT ... ON CONFLICT DO UPDATE fails to enforce SELECT privileges

INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits affect only tables where the attacker lacks full read access but has both INSERT and UPDATE...

Privilege Bypass Vulnerability in SeAssignPrimaryTokenPrivilege of Background Intelligent Transfer Service Service

The Background Intelligent Transfer Service service is an intelligent backup and transfer service for transferring data over a LAN using free network bandwidth. A privilege bypass vulnerability exists in SeAssignPrimaryTokenPrivilege of the Background Intelligent Transfer Service service under th...

Google Chrome extension installation privilege bypass vulnerability

Google Chrome is a web browser developed by Google, Inc. extension installation is one of the plug-in installation program. A security vulnerability exists in extension installation in Google Chrome versions prior to 68.0.3440.75. A remote attacker can exploit this vulnerability to bypass the...

CVE-2018-6683

Exploiting Incorrectly Configured Access Control Security Levels vulnerability in McAfee Data Loss Prevention DLP for Windows versions prior to 10.0.505 and 11.0.405 allows local users to bypass DLP policy via editing of local policy files when offline...

BaserCMS Access Privilege Bypass Vulnerability

baserCMS is an enterprise-level content management system CMS. A privilege bypass vulnerability exists in baserCMS versions 4.1.0.1 and earlier and 3.0.15 and earlier, which stems from the program failing to restrict access. A remote attacker can exploit this vulnerability to bypass access...

Mozilla Firefox WebExtensions Host Privilege Bypass Vulnerability

Mozilla Firefox browser Firefox is a free and open source browser for Windows, Linux and MacOSX platforms. Mozilla Firefox suffers from a WebExtensions host privilege bypass vulnerability. An attacker can exploit this vulnerability to bypass host privilege settings via request redirection and...

CVE-2018-10172

CVE-2018-10172 affects 7-Zip on Windows up to version 18.01. The issue stems from enabling the Large memory pages option, which uses LsaAddAccountRights to grant SeLockMemoryPrivilege to the user account. This privilege can be leveraged to bypass access restrictions within a sandboxed process. Re...

D-Link DIR-815 Privilege Bypass and Information Disclosure Vulnerability

D-Link DIR-815 REV.B is a wireless router product from AUO D-Link. A security vulnerability exists in the /htdocs/web/getcfg.php file in the D-Link DIR-815 REV. B with DIR-815REVBFIRMWAREPATCH2.07.B01 and prior firmware versions. An attacker can exploit the vulnerability to bypass privileges and...

CVE-2018-8885

screenresolution-mechanism in screen-resolution-extra 0.17.2 does not properly use the PolicyKit D-Bus API, which allows local users to bypass intended access restrictions by leveraging a race condition via a setuid or pkexec process that is mishandled in a PolicyKitService.checkpermission call...

DEBIAN-CVE-2017-14178

In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's access restrictions...

VulnCheck KEV: CVE-2017-11467

OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackers to execute arbitrary OS commands via a crafted request...

Mozilla Firefox Access Privilege Bypass Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in previous versions of Mozilla Firefox 58. An attacker can exploit this vulnerability by performing a symbolic link attack to bypass access privilege protection...