The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Qualcomm TrustZone-based Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to enhance their privileges through a specially created application...

The vulnerability of the SAP NetWeaver software integration platform, which allows a hacker to gain access to protected information

The vulnerability of the Universal Worklist Configuration component of the SAP NetWeaver software integration platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information through a...

The vulnerability of the PMG5318 router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the PMG5318 router microprogramming system’s accessibility detection mechanism is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to execute arbitrary commands via the PingIPAddr parameter...

Vulnerability of NVIDIA GPU graphics processor software, which allows attackers to enhance their privileges or cause service failures

The vulnerability of NVIDIA GPU graphics processor software is related to access control deficiencies. Exploiting this vulnerability can allow a remote attacker to enhance their privileges or cause service interruptions...

The vulnerability of the Flash Player and Adobe Integrated Runtime software allows attackers to circumvent existing restrictions and gain access to protected information.

The vulnerability of the Flash Player and Adobe Integrated Runtime programming platforms is related to deficiencies in access control mechanisms. Exploiting this vulnerability allows a malicious actor to bypass existing restrictions and gain access to protected information...

The vulnerability of the AIX operating system, which allows a perpetrator to increase their privileges

The vulnerability of the netstat component in the AIX operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow an attacker, who operates locally, to increase their privileges...

The vulnerability of the Mac OS X operating system, which allows a hacker to gain root user privileges

The vulnerability of the Install Framework Legacy component in the Mac OS X operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow an attacker, operating locally, to gain root user privileges...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Android operating system’s mediaserver component is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially crafted application...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Android operating system’s mediaserver component is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially crafted application...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the ATML component in the Windows operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow an attacker, operating locally, to enhance their privileges through a specially crafted application...

The vulnerability of the Mac OS X operating system, which allows a hacker to manipulate timestamps

The vulnerability of the Mac OS X operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to forge timestamps due to errors in restricting access to the date and time settings panel...

The vulnerability of the Adobe AIR software platform allows a perpetrator to increase the execution priority of a process from low to medium.

The vulnerability of the Adobe AIR software platform is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to increase the execution priority of processes from low to medium...

The vulnerability of the Flash Player software allows a violator to increase the priority of the execution process from low to medium.

The vulnerability of the Flash Player software is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to increase the priority of execution of processes from low to medium level...

The vulnerability of the microprogramming software of the Cisco TelePresence Supervisor MSE 8050 allows a intruder to execute arbitrary code with privileges of the root user.

The vulnerability of the web-based framework of the microprogramming software for the Cisco TelePresence Supervisor MSE 8050 relates to deficiencies in access control for files. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code with...

ManageEngine Desktop Central Unauthorized Administrative Password Reset (CVE-2015-2560)

An access control weakness vulnerability exists in ManageEngine Desktop Central. The vulnerability is due to design error in limiting the admin's password reset functionality to authorized admin users only. This allows any remote unauthenticated users to access the administrative control panel of...

Spider Event Calendar 1.3.0 Multiple Vulnerabilities

Spider Event Calendar version 1.3.0 is a Wordpress plugin that suffers from multiple cross site scripting, path disclosure, and remote SQL injection vulnerabilities. Author: Janek Vind "waraxe" Date: 22. May 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-104.html Description of...

PT-2010-5338 · Red Hat · Condor +1

Name of the Vulnerable Software and Affected Versions: Red Hat Enterprise Messaging, Realtime and Grid MRG version 1.3 Description: The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid MRG recommends a configuration that creates a trusted channel with insufficient...

Oracle Database DBMS_JAVA.SET_OUTPUT_TO_JAVA Privilege Escalation (CVE-2010-0866; CVE-2010-0867)

Oracle Database Server is an enterprise-level relational database application suite. A vulnerability exists in Oracle Database 11g server that could allow users with limited privileges to execute SQL commands with System privileges on the server. The vulnerability is due to an access control...

Oracle Database DBMS_JVM_EXP_PERMS System Command Execution (CVE-2010-0866; CVE-2010-0867)

Oracle Database server is an enterprise-level relational database application suite. A privilege escalation vulnerability exists in Oracle Database server that can allow users with limited privileges to execute arbitrary operating system commands on a target server. The vulnerability is due to an...

Midicart PHP - Arbitrary File Upload

Midicart PHP - Arbitrary File Upload source: https://www.securityfocus.com/bid/5855/info A problem with the default installation of Midicart PHP may make it possible for remote users to gain access to sensitive information. The default installation of Midicart PHP does not place sufficient access...