PT-2020-22841

Уязвимость компонента утилиты Sumac связана с недостатком механизма предоставляющего разрешения, привилегии и средства управления доступом. Эксплуатация уязвимости может позволить нарушителю вызвать октаз в обслуживании...

Multiple Cisco Products Privilege License and Access Control Issues Vulnerability (CNVD-2020-00293)

Cisco Firepower Management Center FMC and so on are the products of the United States Cisco Cisco company.Cisco Firepower Management Center is a new generation of firewall management center software.Cisco Firepower Threat Defense FTD is a set of unified software to provide next-generation firewal...

CentOS 7 : polkit (CESA-2019:2046)

An update for polkit is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

IBM Informix Dynamic Server Privilege License and Access Control Issues Vulnerability (CNVD-2019-29419)

IBM Informix Dynamic Server IDS is a scalable object-relational database server from IBM in the United States that provides continuous data availability and disaster recovery, among other features, for clustered data centers. IBM Informix Dynamic Server suffers from a Privilege Permission and...

IBM Informix Dynamic Server Privilege License and Access Control Issues Vulnerability (CNVD-2019-29425)

IBM Informix Dynamic Server IDS is a scalable object-relational database server from IBM in the United States that provides continuous data availability and disaster recovery, among other features, for clustered data centers. IBM Informix Dynamic Server suffers from a Privilege Permission and...

Foxit PDF SDK ActiveX File Write Vulnerability

Foxit PDF SDK ActiveX is a visual programming components , not only to provide PDF display and annotation features , but also has a small amount of resources , distribution of small size and so on. Foxit PDF SDK ActiveX 5.5.0 and earlier versions in the use of JavaScript API Doc.exportAsFDF file...

CentOS Update for polkit CESA-2019:0420 centos6

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Oracle Linux 6 : polkit (ELSA-2019-0420)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2019-0420 advisory. - Fix of CVE-2019-6133, PID reuse via slow fork Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...

Window Admin Center suffers from a privilege control vulnerability

Windows Admin Center is the new browser-based management server tool for Windows Server deployments. A privilege control vulnerability exists in Window Admin Center, which can be exploited by an attacker to gain access to sensitive information on a website...

Google Android Access Privilege Control Vulnerability (CNVD-2019-24173)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An access control error vulnerability exists in Yocto in Android. An attacker can exploit the vulnerability to modify properties...

Google Android Access Privilege Control Vulnerability (CNVD-2019-24172)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A privilege permission and access control vulnerability exists in Yocto in Android. An attacker can exploit the vulnerability to cause a security issue in the current scenario,...

Multiple Siemens Product Privilege Access Control Vulnerabilities (CNVD-2018-25419)

Siemens SINUMERIK 808D and so on are the German Siemens Siemens company's CNC machine tool system controller. A privilege access control vulnerability exists in multiple Siemens products. A remote attacker could exploit this vulnerability by sending specially crafted authentication requests to...

Huawei Watch Privilege Control Vulnerability

Huawei Watch 2 is Huawei's second generation smart sports watch. A privilege control vulnerability exists in Huawei Watch 2. Due to misconfiguration of privileges for specific operations, an attacker who has been informed that the watch is bound to a Huawei account can bypass privilege checking b...

Huawei HiCinema Privilege Control Vulnerability

Huawei HiCinema is a video application from Huawei, China. A privilege control vulnerability exists in Huawei HiCinema due to the program failing to properly verify the privileges of a particular interface. An attacker on the same network as the user could obtain some information about the user v...

Huawei Document Security Management Information Disclosure Vulnerability

Huawei Document Security Management DSM is a set of document rights management software from Huawei, China. The software is characterized by high stability, reliability and scalability. A security vulnerability exists in the privilege control function in Huawei DSM versions prior to...

MileSight camera privilege control page unauthorized access vulnerability

MileSight camera is a network camera produced by Xiamen PulseVision Digital Technology Co. An unauthorized access vulnerability exists in the privilege control page of MileSight camera. An unauthorized attacker can use the vulnerability to execute arbitrary commands...

kernel 2.2.x/2.4 .0-test1,SGI ProPack 1.2/1.3 Capabilities Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/1322/info POSIX Capabilities have recently been implemented in the Linux kernel. These Capabilities are an additional form of privilege control to enable more specific control over what priviliged processes can do...

Modern sky any order unauthorized modifications-vulnerability warning-the black bar safety net

I heard that modern sky sent the tickets, get to. Require the year tickets! Norman Jade on! Goddess! I'm coming! （Vulnerability demonstration using your own test account, the story is this, there once was a handsome than the and an ugly ratio. A handsome than buying a heavens laugh, the shipping...

PT-2013-1324

Name of the Vulnerable Software and Affected Versions Samba versions 3.2.x through 3.6.x before 3.6.20 Samba versions 4.0.x before 4.0.11 Samba versions 4.1.x before 4.1.1 Description The issue is related to a lack of privilege control and access management mechanisms in the vfs streams depot or...

PT-2011-1228

Name of the Vulnerable Software and Affected Versions HP Application Lifestyle Management ALM 11 Description The issue is related to the GetInstalledPackages function in the configuration tool, which lacks proper privilege control and access management mechanisms. This can allow an attacker to ga...