VulnCheck KEV: CVE-2017-11467

OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackers to execute arbitrary OS commands via a crafted request...

Mozilla Firefox Access Privilege Bypass Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in previous versions of Mozilla Firefox 58. An attacker can exploit this vulnerability by performing a symbolic link attack to bypass access privilege protection...

Unauthorized Access Vulnerability in Hikvision's Terminal Feature Control System

Zhejiang Haikang Technology Co., Ltd. specializes in the research, development, design and manufacture of intelligent control technology and is a domestic intelligent control technology/product provider. An unauthorized access vulnerability exists in Hikang Technology Terminal Feature Control...

Microsoft Windows - NTFS OwnerMandatory Label Privilege Bypass

Microsoft Windows - NTFS OwnerMandatory Label Privilege Bypass / Windows: NTFS Owner/Mandatory Label Privilege Bypass EoP Platform: Windows 10 1709 not tested 8.1 Update 2 or Windows 7 Class: Elevation of Privilege Summary: When creating a new file on an NTFS drive it’s possible to circumvent...

SAP Solution Manager Privilege Bypass Vulnerability

SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...

DEBIAN-CVE-2017-17448

net/netfilter/nfnetlinkcthelper.c in the Linux kernel through 4.14.4 does not require the CAPNETADMIN capability for new, get, and del operations, which allows local users to bypass intended access restrictions because the nfnlcthelperlist data structure is shared across all net namespaces...

ALPINE-CVE-2017-15099

INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits affect only tables where the attacker lacks full read access but has both INSERT and UPDATE...

CVE-2017-15099

CVE-2017-15099 involves an information-disclosure and access-restriction bypass in PostgreSQL through faulty checks in the PostgreSQL engine when using "INSERT … ON CONFLICT DO UPDATE". Affected versions are PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10. The vulnerabili...

Android Qualcomm Memory Subsystem Elevation of Privilege Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA.Qualcomm Memory The Qualcomm Memory subsystem is a memory subsystem developed by Qualcomm Incorporated. An elevatio...

Shadow: Buffer overflow

Background Shadow is a set of tools to deal with user accounts. Description Malformed input in the newusers tool may produce crashes and other unspecified behaviors. Impact A remote attacker could possibly cause a Denial of Service condition or bypass privilege boundaries in some web-hosting...

There are multiple vulnerabilities in the digital teaching resource platform of Tesco

DSS Digital Teaching Resource Platform is a digital learning platform developed by DSS Information Technology Shenzhen Co., Ltd. which integrates online course production, online teaching, course management, teacher-student interaction and so on. There are arbitrary user registration, privilege...

Unauthorized Access Vulnerability in Digital Programmable Subscriber Switch of NSN9000i Series IPPBX System of Shenzhen Guowei Saina Technology Co.

NSN9000i series IPPBX system is a new-generation hybrid IPPBX system developed by Xena Technology based on the latest IP technology and domestic market. The system combines the digital program-controlled subscriber switch platform developed by SANA Technology and the popular Asterisk application...

EMC RSA Archer Privilege Bypass Vulnerability

EMC RSA Archer is an enterprise IT governance and compliance governance product from EMC Corporation EMC. The product enables the development of eGRC programs for managing enterprise risk, automating business processes, and more. A privilege bypass vulnerability exists in EMC RSA Archer. A remote...

Privilege Bypass

Kibana is vulnerable to privilege bypass attacks. When X-Pack is installed, requests to the short URL and advanced settings services. This flaw allows authenticated users to make requests to those services regardless of their own permissions...

Amazon Linux AMI : postgresql92 (ALAS-2017-838)

Selectivity estimators bypass SELECT privilege checks It was found that some selectivity estimation functions did not check user privileges before providing information from pgstatistic, possibly leaking information. An unprivileged attacker could use this flaw to steal some information from tabl...

Positive apabi thesis submission system has unauthorized access vulnerability

Positive apabi thesis submission system is a thesis collection and management system. An unauthorized operation vulnerability exists in the Positive apabi Thesis Submission System, which allows an attacker to bypass privilege authentication and obtain the administrator's password. It poses...

Drupal Core Privilege Bypass Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A privilege bypass vulnerability exists in Drupal Core version 8 before 8.2.8 and version 8.3 before 8.3.1. If the RESTful Web Services rest module is enabled, the site...

Xionghai CMS v1.0 Backend Login Bypass Vulnerability

XIONGHAI CMS is developed by XIONGHAI a set of applications for personal blogs, personal websites, corporate websites, a set of integrated website management system. XIONGHAI CMS v1.0 there is a backend privilege bypass vulnerability, attackers can forge COOKIE bypass login detection, successfull...

TYPO3 Remote Privilege Bypass Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. A privilege bypass vulnerability exists in TYPO3 Table Configuration Queue TCA, which can be exploited by remote attackers to bypass authentication and perform unauthorized...

D-Link DSL-2730U Wireless N 150 - Cross-Site Request Forgery

Exploit for hardware platform in category web applications Author : B GOVIND Exploit Title : DLink DSL-2730U Wireless N 150, Change DNS Configuration bypassing ‘admin’ privilege Date : 01-03-2017 Vendor Homepage : http://www.dlink.co.in Firmware Link : ftp://support.dlink.co.in/firmware/DSL-2730U...