CVE-2021-3671

A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ Ticket Granting Server - Request. An authenticated user could use this flaw to crash the samba server...

Microsoft Win32k 权限许可和访问控制问题漏洞

Microsoft Win32k is a system file for Windows multi-user administration by Microsoft Corporation USA. Microsoft Win32k is vulnerable to privilege-granting and access-control issues. The following products and versions are affected: Windows Server, version 2004 Server Core installation,Windows 10...

Apple macOS Big Sur 权限许可和访问控制问题漏洞

Apple macOS Big Sur is a mobile application app from Apple, Inc USA. A vulnerability exists in Apple macOS Big Sur with privilege permission and access control issues. The vulnerability arises from a lack of effective privilege-granting and access-control measures in a networked system or product...

Apple macOS 权限许可和访问控制问题漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. macOS is vulnerable to a privilege-granting and access-control issue, which arises from an application that does not properly impose security restrictions within the AMD subsystem. A remote attacker could...

Exim Permission License and Access Control Issues Vulnerability

Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. Exim suffers from a privilege-granting and access-control issue vulnerability that stems from the application not properly applying security restrictions to a fake offline directory. An...

Intel Quartus Prime Pro Security Vulnerability

Intel Quartus Prime Pro is a set of multi-platform design environments from the U.S. company Intel Intel. The product is primarily used for programming programmable logic devices. A security vulnerability exists in Intel Quartus Prime Pro and Standard edition, which arises from a lack of effectiv...

Intel SOC driver package for STK1A32SC security vulnerability

Intel SOC driver package for STK1A32SC is a computer stick from Intel Corporation USA. A security vulnerability exists in the Intel SOC driver package for STK1A32SC that arises from a lack of effective privilege-granting and access-control measures on a networked system or product...

Intel Collaboration Suite for WebRTC Security Vulnerability

Intel Collaboration Suite for WebRTC is an Intel WebRTC collaboration suite from Intel. A security vulnerability exists in Intel Collaboration Suite for WebRTC that arises from a lack of effective privilege-granting and access-control measures in a networked system or product...

OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Security. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

GaussDB Kernel: Enabling the Auditing of Permission Granting and Revoking

The parameter auditgrantrevoke specifies whether to audit the permissions granted to and revoked from database users. After this parameter is set to on, database account permissions are traced. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...

openGauss: Enabling the Auditing of Permission Granting and Revoking

The parameter auditgrantrevoke specifies whether to audit the permissions granted to and revoked from database users. After this parameter is set to on, database account permissions are traced. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced...

openGauss: Controlling Roles with the WITH GRANT OPTION Permission

Users with the WITH GRANT OPTION permission can grant permissions on objects to other users. For database security purposes, control users having this permission. During permission granting, users with the WITH GRANT OPTION permission specify the objects and users with the WITH ADMIN OPTION...

OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Security. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

The vulnerability of the Sumac utility component, related to the lack of mechanisms for granting permissions, privileges, and controlling access, allows a violator to trigger the octath service.

The vulnerability of the Sumac utility component is related to the lack of mechanisms for granting permissions, privileges, and managing access control. Exploiting this vulnerability could allow a perpetrator to trigger the octath service...

CVE-2020-0665

An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from the trusted forest, aka 'Active Directory Elevation of Privilege Vulnerability'...

OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Security. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Security. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

October 15, 2019—KB4520015 (Preview of Monthly Rollup)

None None...

Android Permission License and Access Control Vulnerability (CNVD-2019-09145)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A privilege-granting and access-control vulnerability exists in the Framework in Android version 8.0, which stems from a lack of effective privilege-granting and access-control measures in a...

Intel 8th Generation Intel Core Processor and 7th Generation Intel Core Processor Privilege Permission and Access Control Issues Vulnerability

The 8th Generation Intel Core Processor and 7th Generation Intel Core Processor are both products of Intel Corporation. 8th Generation Intel Core Processor is an 8th Generation Core Series The 8th Generation Intel Core Processor is an eighth-generation Core series central processing unit CPU, whi...