6 matches found
CVE-2026-42318: Missing Authorization
GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to versions 10.0.25 and 11.0.7, low privilege users with access to planning can delete any object in GLPI. Upgrade to 11.0.7 or 10.0.25 to receive a patch. As a workaround, disable delete rights for User'...
EUVD-2014-2444
Malware in sbrugna...
PT-2023-2255 · Samba +4 · Samba +4
Name of the Vulnerable Software and Affected Versions: Samba affected versions not specified Description: A flaw was found in Samba, related to an incomplete access check on dnsHostName, allowing authenticated but otherwise unprivileged users to delete this attribute from any object in the...
CVE-2014-2408
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to the "Grant Any Object Privilege."...
Design/Logic Flaw
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to the "Grant Any Object Privilege."...
CVE-2014-2408: Undefined Security Weakness
Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to the "Grant Any Object Privilege."...