54 matches found
CVE-2013-0887
The developer-tools process in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly restrict privileges during interaction with a connected server, which has unspecified impact and attack vectors...
CVE-2013-0887
Removed by vendor...
CVE-2013-0887
The developer-tools process in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly restrict privileges during interaction with a connected server, which has unspecified impact and attack vectors...
CVE-2013-0887
Chromium-based: CVE-2013-0887 affects Google Chrome prior to 25.0.1364.97 (Windows/Linux) and prior to 25.0.1364.99 (Mac). The developer-tools process does not properly restrict privileges when interacting with a connected server, but the provided documents do not specify impact, attack vectors, ...
CVE-2013-0073
The Windows Forms aka WinForms component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly restrict the privileges of a callback function during object creation, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application XBAP or 2 ...
CVE-2013-0073
CVE-2013-0073 affects the Windows Forms component of Microsoft .NET Framework (versions 2.0 SP2, 3.5, 3.5.1, 4, 4.5). The root cause is improper restriction of privileges for a callback function during object creation, which can allow remote attackers to execute arbitrary code via a crafted XBAP ...
Design/Logic Flaw
Cisco WebEx Training Center allow remote authenticated users to bypass intended privilege restrictions and 1 enable or 2 disable training-center recordings via a crafted URL, aka Bug ID CSCzu81065...
SugarCRM 6.1.1 Privilege Restriction Bypass
Advisory: SugarCRM list privilege restriction bypass RedTeam Pentesting discovered a vulnerability in SugarCRM that allows logged in users to bypass restrictions of their list privilege, allowing to list all entries. Details ======= Product: SugarCRM Community Edition SugarCRM Professional SugarC...
[RT-SA-2011-002] SugarCRM list privilege restriction bypass
Advisory: SugarCRM list privilege restriction bypass RedTeam Pentesting discovered a vulnerability in SugarCRM that allows logged in users to bypass restrictions of their list privilege, allowing to list all entries. Details ======= Product: SugarCRM Community Edition SugarCRM Professional SugarC...
CVE-2010-4491
Google Chrome before 8.0.552.215 does not properly restrict privileged extensions, which allows remote attackers to cause a denial of service memory corruption via a crafted extension...
CVE-2010-4491
Google Chrome before 8.0.552.215 does not properly restrict privileged extensions, which allows remote attackers to cause a denial of service memory corruption via a crafted extension...
CVE-2007-1781
Minna De Office 1.x and 2.x does not properly restrict user access to certain privileged actions, which allows local users to change the configuration or have other unspecified impact. NOTE: some of these details are obtained from third party information...
CVE-2007-1781
Minna De Office 1.x and 2.x does not properly restrict user access to certain privileged actions, which allows local users to change the configuration or have other unspecified impact. NOTE: some of these details are obtained from third party information...
CVE-2003-0246
CVE-2003-0246 affects the Linux kernel (2.4.x) where the ioperm system call does not properly restrict privileges, enabling a local user to gain read and/or write access to certain I/O ports on 2.4.20 and earlier. The connected OpenVAS and advisory records reference Debian and other vendor adviso...