CVE-2022-25782 Insufficient privilege checks on object access and updates.

Improper Handling of Insufficient Privileges vulnerability in Web UI of Secomea GateManager allows logged in user to access and update privileged information. This issue affects: Secomea GateManager versions prior to 9.7...

IBM Java 8.0 < 8.0.6.0

The version of IBM Java installed on the remote host is prior to 8.0 8.0.6.0. It is, therefore, affected by a vulnerability as referenced in the IBM Security Update November 2019 advisory. - From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a...

Google Android 安全漏洞

Google Android is a Linux-based open-source operating system from the U.S. company Google. Google Android has a security vulnerability that stems from a lack of privilege checks in PackageManager, which could be exploited by attackers to escalate privileges...

Google Android 安全漏洞

Google Android is a Linux-based open-source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android, which stems from a lack of privilege checks in CellBroadcastReceiver, and there may be a path to enable specific cellular features that could be exploit...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android, which stems from a lack of privilege checking in PackageManager. An attacker could exploit this vulnerability to cause a local elevation of privilege...

Google Android 安全漏洞

Google Android is a Linux-based open-source operating system from the U.S. Google Android has an elevation of privilege vulnerability that stems from a lack of privilege checks in WindowManager, which could be exploited by attackers to gain elevated privileges...

MediaTek 多款产品命令注入漏洞

MediaTek Mt Series is a series of smartphone chips from China's MediaTek. A security vulnerability exists in several MediaTek products, which stems from a lack of privilege checking in the ims service and possible AT command injection. The following products and versions are affected: MT6580,...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android suffers from a buffer overflow vulnerability, which stems from a lack of privilege checks in the ims service, and can be exploited by attackers to cause local privilege escalation...

MediaTek 芯片安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called Mediatek. A security vulnerability exists in the MediaTek chips, which stems from a lack of privilege checking and could lead to privilege escalation...

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Mediatek. A security vulnerability exists in the MediaTek chips that originates from a stack-based buffer overflow in the power hal manager service, which may allow privilege bypass...

MediaTek 芯片安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called Mediatek. A security vulnerability exists in the MediaTek chips, which stems from a lack of privilege checking and could lead to privilege escalation...

Google Android 安全漏洞

Google Android is a Linux-based open-source operating system from the U.S. Google Android has an elevation of privilege vulnerability that stems from a lack of privilege checks in system services, which can be exploited by attackers to cause local privilege escalation...

Rapid7 Insight Agent 安全漏洞

Rapid7 Insight Agent is a lightweight software from Rapid7, Inc. that collects data from IT assets. The software is capable of collecting data from IT assets.An arbitrary file reading vulnerability exists in Rapid7 Insight Agent versions prior to 3.1.3, which stems from the software's lack of...

Google Android 安全漏洞

An elevation of privilege vulnerability exists in Google Android, a Linux-based open source operating system from Google, Inc. The vulnerability stems from a lack of privilege checking in the broadcast definition of AndroidManifest.xml, which could potentially set the A2DP Bluetooth device...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android, which stems from a lack of privilege checks and could result in CPU behavior that could be considered faulty and could be exploited by attackers to...

The vulnerability of the Linux operating system’s kernel, related to insufficient checking of privilege assignment for critical resources, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to insufficient checking of permission assignments for critical resources. Exploiting this vulnerability can allow an attacker to cause service failures...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in MediaTek components System properties in Google Android 11, which stems from a lack of privilege checking and could lead to information disclosure...

Mediatek 芯片安全漏洞

Mediatek chips are smartphone chipsets from China's MediaTek Mediatek. A security vulnerability exists in the Mediatek chipset, which is caused by a lack of privilege checking in the memory management driver, leading to information disclosure...

Mediatek 芯片输入验证错误漏洞

Mediatek chips are smartphone chipsets from China's MediaTek Mediatek. A security vulnerability exists in the Mediatek chipset, which is caused by a lack of privilege checking in the memory management driver, resulting in the disclosure of information...

CVE-2021-38137

Corero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns-monitor user’s privileges, allowing a user to perform actions not belonging to his role...