DEBIAN-CVE-2013-4325

The checkpermissionv1 function in base/pkit.py in HP Linux Imaging and Printing HPLIP through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race conditio...

AdvancePro Technologies Advanceware software suite vulnerable to privilege bypass

Overview AdvancePro Technologies Advanceware software suite contains a privilege bypass vulnerability, resulting in information leakage CWE-200. Description CWE-200: Information Exposure AdvancePro Technologies Advanceware software suite contains a privilege bypass vulnerability, resulting in...

Debian DSA-2743-1 : kfreebsd-9 - privilege escalation/information leak

Several vulnerabilities have been discovered in the FreeBSD kernel that may lead to a privilege escalation or information leak. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2013-3077 Clement Lecigne from the Google Security Team reported an integer...

Mozilla Thunderbird Multiple Vulnerabilities -01 (May 2013) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-1672

CVE-2013-1672 affects Mozilla Firefox on Windows (and related Thunderbird/ESR components) where the Mozilla Maintenance Service can be exploited to bypass integrity verification and escalate privileges. The issue is tied to local privilege escalation via manipulation of data passed to the mainten...

CVE-2013-3057

Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requirements and list the privileges of arbitrary users via unspecified vectors...

CVE-2013-3056

Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 are affected by CVE-2013-3056 due to inadequate permission checks, enabling remote authenticated users to bypass privileges and delete arbitrary private messages. Root cause: insufficient access control enforcement on message deletion. Impact: un...

CVE-2013-3057

CVE-2013-3057 is a Joomla! core information disclosure vulnerability. Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allow remote authenticated users to bypass privilege requirements and list privileges of arbitrary users via unspecified vectors due to inadequate permission checking. The conn...

CVE-2013-3057

Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requirements and list the privileges of arbitrary users via unspecified vectors...

CVE-2013-3057

Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requirements and list the privileges of arbitrary users via unspecified vectors...

CVE-2013-3056

Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requirements and delete the private messages of arbitrary users via unspecified vectors...

CVE-2013-3056

Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requirements and delete the private messages of arbitrary users via unspecified vectors...

PT-2013-4126

Name of the Vulnerable Software and Affected Versions Joomla! versions 2.5.x through 2.5.9 Joomla! versions 3.0.x through 3.0.3 Description The issue allows remote authenticated users to bypass intended privilege requirements and delete the private messages of arbitrary users. Recommendations For...

PT-2013-4127

Name of the Vulnerable Software and Affected Versions Joomla! versions 2.5.x through 2.5.9 Joomla! versions 3.0.x through 3.0.3 Description The issue allows remote authenticated users to bypass intended privilege requirements and list the privileges of arbitrary users. Recommendations For Joomla!...

CVE-2013-3056: Undefined Security Weakness

Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requirements and delete the private messages of arbitrary users via unspecified vectors...

CVE-2013-3057: Undefined Security Weakness

Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requirements and list the privileges of arbitrary users via unspecified vectors...

CVE-2013-1110

Cisco WebEx Training Center allow remote authenticated users to bypass intended privilege restrictions and 1 enable or 2 disable training-center recordings via a crafted URL, aka Bug ID CSCzu81065...

CVE-2013-1110

Cisco WebEx Training Center allow remote authenticated users to bypass intended privilege restrictions and 1 enable or 2 disable training-center recordings via a crafted URL, aka Bug ID CSCzu81065...

PT-2013-2882

Name of the Vulnerable Software and Affected Versions Cisco WebEx Training Center affected versions not specified Description The issue allows remote authenticated users to bypass intended privilege restrictions. This can lead to enabling or disabling training-center recordings via a crafted URL...

mysql: regression of CVE-2009-4030

MySQL 5.0.88, and possibly other versions and platforms, allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point...