Schneider Electric EcoStruxure Geo SCADA Expert Privilege Permission and Access Control Issues Vulnerability

Schneider Electric EcoStruxure Geo SCADA Expert is a suite of data acquisition and monitoring software SCADA from Schneider Electric, France. A vulnerability exists in a folder in Schneider Electric EcoStruxure Geo SCADA Expert ClearSCADA with privilege permission and access control issues. The...

CVE-2019-11109

Logic issue in the subsystem for IntelR SPS before versions SPSE504.01.04.275.0, SPSSoC-X04.00.04.100.0 and SPSSoC-A04.00.04.191.0 may allow a privileged user to potentially enable denial of service via local access...

Harbor Privilege Permission and Access Control Issues Vulnerability

Harbor is an open source trusted cloud native registry. The product is primarily used to store, sign and scan container images for vulnerabilities. A privilege permission and access control issue vulnerability exists in the core/api/user.go file in Harbor versions 1.7.0 through 1.8.2, which can b...

PT-2019-2991 · Microsoft · Visual Studio +1

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Git for Visual Studio affected versions not specified Description: The issue is related to errors in privilege management in the Git component of Microsoft Visual Studio. It allows an...

Microsoft Windows Common Log File System Driver Privilege Permission and Access Control Issues Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Common Log File System Driver is one of the common log file system drivers. A...

Intel SCS Discovery Utility Privilege Permission and Access Control Issues Vulnerability

Intel SCS Discovery Utility is a utility program from Intel Corporation USA for obtaining detailed data about Intel AMT. The Intel SCS Discovery Utility is vulnerable to a privilege permission and access control issue. The vulnerability stems from a lack of effective privilege permission and acce...

PT-2019-2000 · Mysql Server +5 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.15 and prior Description: A vulnerability in the MySQL Server component allows a high-privileged attacker with network access via multiple protocols to compromise the server. Successful attacks can result in the...

Rancher Labs Rancher Privilege Permission and Access Control Issues Vulnerability

Rancher Labs Rancher is the United States Rancher Labs, Inc. of a set of open source enterprise-class container management platform. A vulnerability exists in Rancher Labs Rancher versions 2.0.0 through 2.1.5 for privilege licensing and access control issues. The vulnerability stems from a lack o...

Rancher Labs Rancher Privilege Permission and Access Control Issues Vulnerability (CNVD-2019-43043)

Rancher Labs Rancher is the United States Rancher Labs, Inc. of a set of open source enterprise-class container management platform. A vulnerability exists in Rancher Labs Rancher for privilege permission and access control issues. The vulnerability stems from a lack of effective privilege...

Synology Android Moments Privilege Permission and Access Control Issues Vulnerability

Synology Android Moments is an Android-based application from Synology Inc. of Taiwan, China for viewing various documents stored in Synology Drive. A vulnerability exists in the privacy page of Synology Android Moments prior to version 1.2.3-199 due to privilege permission and access control...

UBUNTU-CVE-2018-14635

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

Fedora 9 : phpMyAdmin-3.0.1.1-1.fc9 (2008-9316)

This update by upstream to phpMyAdmin 3.0.1.1 solves CVE-2008-4775, a XSS issue in pmdpdf.php via db parameter when registerglobals is enabled. - GUI SQL error after sorting a subset - lang Catalan update - lang Russian update - import Temporary uploaded file not deleted - auth Cannot create...

CVE-2007-4417

IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 does not properly revoke privileges on methods, which allows remote authenticated users to execute a method after revocation until the routine auth cache is flushed...

CVE-2007-2448

Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users who have access to changed paths but not copied paths, which allows remote authenticated users to obtain sensitive information revision properties via svn 1 propget, 2 proplist, or 3 propedit...

CVE-2005-0261

lspath in AIX 5.2, 5.3, and possibly earlier versions, does not drop privileges before processing the -f option, which allows local users to read one line of arbitrary files...

DEBIAN-CVE-2003-0949

xsok 1.02 does not properly drop privileges before finding and executing the "gunzip" program, which allows local users to execute arbitrary commands...

Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (4)

// source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based application. Attackers with loca...

[SNS Advisory No.37] HTTProtect allows attackers to change the protected file using a symlink

----------------------------------------------------------------------- SNS Advisory No.37 HTTProtect allows attackers to change the protected file using a symlink Problem first discovered: Mon, 4 Jun 2001 Published: Wed, 18 Jul 2001...

CVE-2001-0424

BubbleMon 1.31 does not properly drop group privileges before executing programs, which allows local users to execute arbitrary commands with the kmem group id...

tco.txt

Synnergy Laboratories Advisory SLA-2000-14 NAME BSD/Linux telnet client overflow AFFECTED Linux Debian Redhat Mandrake Slackware possibly others BSD FreeBSD possible others SYNOPSIS Synnergy Labs has found a bug in the telnet client that causes a stack overflow by filling the DISPLAY environment...