PT-2019-15855

Name of the Vulnerable Software and Affected Versions LiteManager version 4.5.0 Description The issue concerns weak permissions in the LiteManagerFree - Server folder, where Everyone has Full Control, as demonstrated by ROMFUSClient.exe. Recommendations For LiteManager version 4.5.0, consider...

CVE-2019-19490: Incorrect Default Permissions

LiteManager 4.5.0 has weak permissions Everyone: Full Control in the "LiteManagerFree - Server" folder, as demonstrated by ROMFUSClient.exe...

The vulnerability of Junos OS router NFX Series lies in insufficient validation of input data, allowing attackers to gain full control over the system.

The vulnerability of Junos OS router of the NFX Series exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the system...

The vulnerability of the Exadata Plug-In Deploy and Install sub-component, as well as the Enterprise Manager for Exadata software platform of Oracle Enterprise Manager, allows a hacker to gain full control over the application.

The vulnerability of the Exadata Plug-In Deploy and Install component of the Enterprise Manager for Exadata software from Oracle involves access control deficiencies. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using t...

The vulnerability of the Console sub-component of the Oracle WebLogic Server application server, a software platform of Oracle Fusion Middleware, allows a perpetrator to gain full control over the application.

The vulnerability of the Console sub-component of the Oracle WebLogic Server application server software, part of the Oracle Fusion Middleware platform, is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control...

CVE-2019-19824

On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI syscmd.htm is not available. This allows for full control over the device’s internals. This affects A3002RU through...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability in the web interface of TP-Link’s router software, TL-WR1043ND, allows a hacker to gain full control over the device.

The vulnerability of the web interface for TP-Link TL-WR1043ND microprogramming device lies in the deficiencies of its authentication procedures. Exploiting this vulnerability allows a malicious actor to gain full control over the device by sending a specially crafted file...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Oracle Hospitality RES 3700 component in the Oracle Food and Beverage Applications software package allows a hacker to gain full control over the application.

The vulnerability of the Oracle Hospitality RES 3700 component of the Oracle Food and Beverage Applications software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the application through network HTTP protocols...

The vulnerability of the XScreenSaver component in the Solaris operating system allows a hacker to gain full control over the system.

The vulnerability of the XScreenSaver component in the Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the system...

The vulnerability of the Junos OS router series in connection with authentication process errors allows attackers to gain access to the Junos Device Manager application and exercise full control over the system.

The vulnerability of the Junos OS router of the NFX Series is related to errors in the authentication process. Exploiting this vulnerability can allow an attacker to gain access to the Junos Device Manager JDM and gain full control over the system...

PT-2019-3775

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 Description The issue is related to insufficient access control in the Web Services component of Oracle WebLogic Server, part of the Oracle Fusion Middleware platform. This can...

Cisco Small Business RV132W and RV134W Remote Code Execution (cisco-sa-20180207-rv13x)

According to its self-reported version, this Cisco Small Business RV Series router is affected by a remote code execution vulnerability. A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote...

CVE-2019-16913

PC Protect Antivirus v4.14.31 installs by default to %PROGRAMFILESX86%\PCProtect with very weak folder permissions, granting any user full permission "Everyone: F" to the contents of the directory and its subfolders. In addition, the program installs a service called SecurityService that runs as...

CVE-2019-9008

An issue was discovered in 3S-Smart CODESYS V3 through 3.5.12.30. A user with low privileges can take full control over the runtime...

CVE-2019-9008: Incorrect Permission Assignment for Critical Resource

An issue was discovered in 3S-Smart CODESYS V3 through 3.5.12.30. A user with low privileges can take full control over the runtime...

The vulnerability of the Java VM component of the Oracle Database Server database management system allows a hacker to gain full control over the DBMS.

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full control over the DBMS...

PT-2019-3128

Name of the Vulnerable Software and Affected Versions Supermicro BMC versions affected versions not specified Description The issue is caused by insufficient security restrictions for critical management functions in the virtual media service of Supermicro BMC controllers. This can be exploited b...

Malicious Package

bb-builder is a malicious package. The package could run an executable targeting Windows and upload information to a remote server. Additionally an outside entity may gain full control of the computer via exploiting this malicious package...