The vulnerability of the com.privat.vpn.helper component of the software for accessing VPN services, PrivateVPN, allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the com.privat.vpnhelper component, which implements the XPC service for accessing the PrivateVPN service, is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with root privileges...

The vulnerability of the implementation of the commit-scenarios mechanism in the JunOS operating system allows a perpetrator to gain access to the device with root privileges.

The vulnerability of the Junos operating system’s commit-scenario mechanism is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain access to a device with root privileges without using a password, after reloading the specially crafted commit-scenari...

The vulnerability of the Microsoft Outlook email client, related to deficiencies in access control, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Outlook email client is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted email message...

The vulnerability of the microprogrammed surveillance camera software ACTi models series B, D, E, and I, due to lack of access control mechanisms, allows intruders to gain access to the device or cause malfunctions during maintenance.

The vulnerability of the microprogrammed surveillance camera software ACTi models series B, D, E, and I is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to alter the device’s settings by directly accessing the...

The vulnerability of the Conarc iChannel system for managing customer relationships, due to lack of access control, allows a hacker to obtain confidential information, modify configurations, or cause service interruptions.

The vulnerability of the Conarc iChannel system for managing customer relationships is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to obtain confidential information, modify configurations, or cause service failures by using the request...

The vulnerability of the Android operating system’s kernel, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of the Android operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Vulnerability of EMC Unisphere for VMAX Virtual Appliance, EMC VMAX Embedded Management, EMC VASA Virtual Appliance, and EMC Solutions Enabler Virtual Appliance systems lies in their lack of access control mechanisms. This vulnerability allows attackers to bypass authentication procedures.

The vulnerabilities of EMC Unisphere for VMAX Virtual Appliance, EMC VMAX Embedded Management, EMC VASA Virtual Appliance, and EMC Solutions Enabler Virtual Appliance are related to deficiencies in access control. Exploiting these vulnerabilities could allow a malicious actor to bypass...

SQL injection vulnerability in the api.class.php page of UQCMS Cloud Business B2B2C Multi-store System

UQCMS cloud business system is a B2B2C e-commerce software with the program using PHP+MYSQL and the template using smarty template. A SQL injection vulnerability exists in the api.class.php page of the UQCMS Cloud Business B2B2C Multi-Store System due to the program's failure to adequately filter...

The vulnerability of the sys_amd64 IRET Handler component in the FreeBSD operating system allows a hacker to trigger a service failure or enhance their privileges.

The vulnerability of the sysamd64 IRET Handler component in the FreeBSD operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges or cause a kernel failure...

The vulnerability of the software tools for backup and data restoration in NetBackup Appliance and NetBackup allows a malicious individual to execute arbitrary commands in a privileged mode. This vulnerability is related to deficiencies in access control.

The vulnerability of software tools for backup and data restoration in NetBackup Appliance and NetBackup lies in the lack of access control mechanisms root/admin privileges. Exploiting this vulnerability allows a malicious actor to remotely copy any file and execute arbitrary commands with...

The vulnerability of MediaTek’s Android operating system kernel, which allows attackers to increase their privileges

The vulnerability of MediaTek’s Android operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability in the embedded microprogramming software of Comcast’s Cisco DPC3939 allows a hacker to gain root access to the Linux application processor and execute arbitrary code.

The vulnerability in the embedded microprogramming software of Comcast’s Cisco DPC3939 router is related to deficiencies in access control for the Linux network processor. Exploiting this vulnerability allows a malicious actor to gain root access to the Linux application processor and execute...

The vulnerability of the libvorbis library in the Android operating system’s Media Framework allows a hacker to execute arbitrary code.

The vulnerability of the libvorbis library in the Android operating system’s Media Framework is related to lack of access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability lies in the built-in procedure executed by the system during the loading of the automation software for Application Policy Infrastructure Controller. This vulnerability allows a perpetrator to increase their privileges, gain access to root directories, and exercise full control over the device.

The vulnerability of the built-in procedure for executing system files during the installation of the Application Policy Infrastructure Controller software relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating locally, to increase their...

The vulnerability of the Mercurial version control software lies in its lack of access control mechanisms, allowing attackers to execute arbitrary code.

The vulnerability of the Mercurial version control software is related to deficiencies in access control using the command-line parameter “hg serve --stdio”. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using a Python debugger, by replacing the...

PYSEC-2017-50

Lemur 0.1.4 does not use sufficient entropy in its IV when encrypting AES in CBC mode...

The vulnerability of Broadcom’s Wi-Fi driver for Android operating systems allows attackers to increase their privileges.

The vulnerability of Broadcom’s Wi-Fi driver in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a local attacker to increase their privileges...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Vulnerability of the Windows OLE operating system component, allowing a hacker to execute arbitrary code

The vulnerability of the Windows OLE operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using a specially created file or program...

The vulnerability of the Resource Power Manager (RPM) component in the Android operating system allows a hacker to compromise the confidentiality of information.

The vulnerability of the Resource Power Manager RPM component in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of sensitive information...