The vulnerability of the iRecruitment component of the Oracle Human Resources workforce management software allows a hacker to gain access to data for editing, adding, or deleting.

The vulnerability of the iRecruitment component of the Oracle Human Resources staffing management software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data using the HTTP protocol...

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32k.sys component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges by using a specially created application...

CVE-2020-24495

Insufficient access control in the firmware for the IntelR 700-series of Ethernet Controllers before version 7.3 may allow a privileged user to potentially enable denial of service via local access...

Vulnerability of the MySQL Server component: The DML mechanism of the MySQL Database Management System allows a hacker to trigger a service failure.

The vulnerability of the MySQL Server component relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions using the MySQL network protocol...

CVE-2020-24595

Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to retrieve sensitive information due to insufficient access control...

GitLab Authentication Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An authentication vulnerability was discovered in GitLab...

CVE-2020-13767

The Mitel MiCollab application before 9.1.332 for iOS could allow an unauthorized user to access restricted files and folders due to insufficient access control. An exploit requires a rooted iOS device, and if successful could allow an attacker to gain access to sensitive information,...

CVE-2020-9246

FusionCompute 8.0.0 has an information leak vulnerability. A module does not launch strict access control and information protection. Attackers with low privilege can get some extra information. This can lead to information leak...

The vulnerability of the User Interface component of the Oracle Insurance Accounting Analyzer allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the User Interface component of the Oracle Insurance Accounting Analyzer is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to read, modify, add, or delete data using the HTTP protocol...

The vulnerability of the Core server component of Oracle WebLogic Server allows a hacker to gain full control over the application.

The vulnerability of the Core server component of Oracle WebLogic Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain full control over the application through the IIOP and T3 network protocols...

The vulnerability of the Advanced Management Console component of the Java SE software platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Advanced Management Console component of the Java SE software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through various network...

UBUNTU-CVE-2020-12389

The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. Note: this issue only affects Firefox on Windows operating systems.. This vulnerability affects Firefox ESR 68.8 and Firefox 76...

Micro Star Dragon Center Security Vulnerability

Micro Star Dragon Center is an application for management control of MSI components, desktop systems, and peripherals from Micro Star Technology Micro Star of Taiwan, China. A security vulnerability exists in the "C:\%PROGRAMDATA\%MSIDragon Center" folder of Micro Star Dragon Center version...

QRadar Community Edition 7.3.1.6 CSRF / Weak Access Control Vulnerability

QRadar Community Edition version 7.3.1.6 suffers from cross site request forgery and weak access control vulnerabilities. ------------------------------------------------------------------------ Cross-Site Request Forgery & weak access control in QRadar ConfigServices webservice...

QRadar Community Edition 7.3.1.6 CSRF / Weak Access Control

------------------------------------------------------------------------ Cross-Site Request Forgery & weak access control in QRadar ConfigServices webservice ------------------------------------------------------------------------ Yorick Koster, September 2019...

iCATCH DVR Access Control Error Vulnerability

The iCATCH DVR is a digital video recorder DVR from China Desirable International iCATCH. A security vulnerability exists in the firmware of iCATCH DVR prior to version 20200103, which stems from the lack of proper access control in the file management interface. An attacker can exploit the...

Vulnerability of the Server component: Security: Privileges of the MySQL database management system, allowing attackers to modify data or cause partial service interruptions.

The vulnerability of the Server component, specifically in the Security section related to MySQL database management system privileges, is associated with deficiencies in access control. Exploiting this vulnerability allows a malicious actor to modify data or cause partial service interruptions...

The vulnerability of the IPv4 protocol in real-time operating systems like Wind River VxWorks allows attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the IPv4 protocol for real-time operating systems developed by Wind River VxWorks is related to insufficient access control mechanisms, such as ipdhcpc and DHCP. Exploiting this vulnerability could allow attackers to compromise the integrity and accessibility of protected...

The vulnerability of the Java VM component of the Oracle Database Server management system allows a hacker to gain full control over the application.

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full control over the application by using network protocols...

The vulnerability of the Oracle Application component, DBA of the Oracle Database Server system, allows a hacker to gain access to modify, add, delete data, or cause service failures.

The vulnerability of the Oracle Application component, specifically the DBA component of the Oracle Database Server system, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to modify, add, or delete data, or cause service interruptions...