The vulnerability of the WLS Web Services component of the Oracle WebLogic Server application server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the WLS Web Services component of the Oracle WebLogic Server application server is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through the IIOP and T3 network protocols...

The vulnerability of the InnoDB component of the Oracle MySQL Server database management system allows a attacker to cause a service failure.

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause a service failure using the MySQL network protocol...

The vulnerability of the Core server component of Oracle WebLogic Server allows a hacker to gain full control over the application.

The vulnerability of the Core server component of Oracle WebLogic Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain full control over the application through the IIOP and T3 network protocols...

CVE-2020-12388

CVE-2020-12388 concerns Firefox on Windows where the content-process sandbox was not sufficiently lockdown, enabling a sandbox escape. Public writeups describe this as a sandbox-escape chain that abuses the Windows token/ACL handling of the content process to break out of the sandbox; the issue a...

The vulnerability of the Print Server component of the Oracle One-to-One Fulfillment application allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Print Server component of the Oracle One-to-One Fulfillment application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP network...

The vulnerability of the Print Server component of the Oracle One-to-One Fulfillment application allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Print Server component of the Oracle One-to-One Fulfillment application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP network...

The vulnerability of the Windows Error Reporting service on Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Windows Error Reporting service on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

The vulnerability of the Microsoft Remote Desktop App for Mac, which allows unauthorized users to escalate their privileges due to insufficient access control mechanisms.

The vulnerability of the Microsoft Remote Desktop App for Mac relates to deficiencies in access control. Exploiting this vulnerability can allow attackers to increase their privileges...

dotCMS CMSFilter Authentication Bypass (CVE-2020-6754)

An access control weakness exists in the dotCMS content management system. The vulnerability is due to insufficient path validation in the CMSFilter class...

The vulnerability of the ptrace_link function in Linux operating systems allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the ptracelink function in Linux operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause system failures or increase their privileges by using the system call execve...

The vulnerability of the InnoDB component of the MySQL database management system allows attackers to modify data or cause service failures.

The vulnerability of the InnoDB component in the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to modify data or cause service failures by using specially crafted network packets...

CVE-2019-20679

NETGEAR MR1100 devices before 12.06.08.00 are affected by lack of access control at the function level...

Hostapd Security Feature Issue Vulnerability

hostapd is a user space daemon for access points and authentication servers. A security signature issue vulnerability exists in versions of hostapd prior to 2.6 that stems from a lack of security measures such as authentication, access control, and privilege management in a networked system or...

The vulnerability of the PIA Core Technology component of the PeopleSoft Enterprise PeopleTools business application suite allows a hacker to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the PIA Core Technology component in the PeopleSoft Enterprise PeopleTools business application suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to unauthorizedly access...

The vulnerability of the Security and Authentication component of the Oracle Business Intelligence Enterprise Edition allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Security and Authentication component of the Oracle Business Intelligence Enterprise Edition is related to deficiencies in access control. Exploitation of this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, or to gain unauthoriz...

The vulnerability of the Core component of the Oracle Primavero P6 Enterprise Project Portfolio Management application allows a malicious individual to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Core component of the Oracle Primavero P6 Enterprise Project Portfolio Management application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service...

The vulnerability of the SMB Server component of the Oracle Solaris operating system allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the SMB Server component of the Oracle Solaris operating system is related to lack of access control mechanisms. Exploiting this vulnerability can allow an attacker to modify, add, or delete data...

The vulnerability of the Enterprise Config Management component of the Enterprise Manager Base Platform allows a malicious individual to gain access to modify, add, or delete data, to gain unauthorized access to protected information, or to cause service failures.

The vulnerability of the Enterprise Config Management component of the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected...

The vulnerability of the Connector Framework component of the Enterprise Manager Base Platform allows a perpetrator to gain access to modify, add, or delete data, to gain unauthorized access to protected information, or to cause service failures.

The vulnerability of the Connector Framework component of the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected information...

The vulnerability of the Oracle Application component, DBA of the Oracle Database Server system, allows a hacker to gain access to modify, add, delete data, or cause service failures.

The vulnerability of the Oracle Application component, specifically the DBA component of the Oracle Database Server, is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to modify, add, or delete data, or cause service interruptions...