Cisco Network Services Orchestrator Network Plug and Play server component privilege access control vulnerability

Cisco Network Services Orchestrator NSO is the United States Cisco Cisco company's set of network automation service solutions. network Plug and Play server is one of the network plug and play server components. A privilege access control vulnerability exists in the Network Plug and Play server...

Multiple Trend Micro Products Privilege Access Control Vulnerabilities

Trend Micro Premium Security and others are cross-platform antivirus products from Trend Micro that feature anti-ransomware, anti-malware email and system optimization. A privilege access control vulnerability exists in the handling of IDAMSPMASTER requests in multiple Trend Micro products, which...

Multiple Trend Micro Product Privilege Access Control Vulnerabilities (CNVD-2018-17418)

Trend Micro Premium Security and others are cross-platform antivirus products from Trend Micro that feature anti-ransomware, anti-malware email and system optimization. The privilege access control vulnerability exists in several Trend Micro products and stems from the coreServiceShell service...

Multiple Trend Micro Product Privilege Access Control Vulnerabilities (CNVD-2018-17417)

Trend Micro Premium Security and others are cross-platform antivirus products from Trend Micro that feature anti-ransomware, anti-malware email and system optimization. A privilege access control vulnerability exists in coreServiceShell.exe in multiple Trend Micro products, which originates when...

Samsung Galaxy Apps Privilege Access Control Vulnerability

Samsung Galaxy Apps is an application store program from Samsung South Korea that is used in Samsung cell phones. A privilege access control vulnerability exists in the handling of push messages in Samsung Galaxy Apps. A local attacker could exploit this vulnerability by obtaining execute...

mysql: Server: DML unspecified vulnerability (CPU Jul 2017)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocol...

CVE-2018-3061

CVE-2018-3061 is a vulnerability in Oracle MySQL (MySQL Server: DML). Public sources in the Fedora update FEDORA-2018-f67fda3db6 show that MySQL 5.7.23 fixes this issue; prior 5.7.x versions are affected. The Red Hat RHSA-2018-3655/Nessus listing confirms a DML-related vulnerability in MySQL that...

Red Hat OpenShift Container Platform source-to-image component privilege access control vulnerability

The Red Hat OpenShift Container Platform is a Red Hat application platform that enables organizations to develop, deploy, and manage existing container-based applications across physical, virtual, and public cloud infrastructures. source-to-image component is a tool for building and injecting...

Google Android Qualcomm WLAN Privilege Access Control Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, with Qualcomm WLAN being one of the components used. Qualcomm WLAN is a wireless LAN component developed by Qualco...

Google Android Qualcomm KGSL Driver Privilege Access Control Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which the Qualcomm KGSL driver is a kernel graphics driver. A privilege access control vulnerability exists in the Qualcomm KGSL driver in Android. No details of the...

Google Android Qualcomm Driver Privilege Access Control Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA.Qualcomm video driver is one of the video drivers used in this program. The Qualcomm video driver is one of the video...

Google Android Qualcomm QTEECOM Driver Privilege Access Control Vulnerability

Android on Google Pixel and Nexus is an open source Linux-based operating system for Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA.Qualcomm QTEECOM driver The Qualcomm QTEECOM driver is one of the Secure Execution Environment Communicator drivers. A...

Google Android Camera Sequential Privilege Access Control Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handheld Alliance OHA.Camera is one of the camera components. A privilege access control vulnerability exists in Camera in Android on Google Pixe...

Google Android Qualcomm Snapdragon display engine privilege access control vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA.The Qualcomm Snapdragon The Qualcomm Snapdragon display engine is one of the display engine components. A privilege...

BaserCMS Privilege Access Control Vulnerability

baserCMS is an enterprise-level content management system CMS. A privilege access control vulnerability exists in baserCMS versions 4.1.0.1 and earlier and 3.0.15 and earlier, which stems from the program failing to restrict access. The vulnerability can be exploited by a remote attacker to bypas...

2018 Cyberthreat Defense Report: Where IT Security Is Going

What keeps you awake at night? We asked IT security professionals the same question and found that these issues are top of mind: malware and spear phishing, securing mobile devices, employee security awareness and new technologies that detect threats capable of bypassing traditional signature-bas...

Kupu Privilege Access Control Vulnerability

Kupu is an open source text editor. A security vulnerability exists in Kupu. A remote attacker can exploit this vulnerability to edit Kupu settings...

Damon database suffers from an override modification process vulnerability (CNVD-2018-03645)

DM7 is a new-generation database product designed by Damon on the basis of summarizing the R&D and application experience of DM series products, absorbing the advantages of mainstream database products, and adopting JAVA-like virtual machine technology. DM7 database has the loophole of oversteppi...

CVE-2017-5260

In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, although the option to access the configuration file is not available in the normal web administrative console for the 'user' account, the configuration file is accessible via direct object reference DRO at...

CVE-2017-9957: Use of Hard-coded Credentials

A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the web service contains a hidden system account with a hardcoded password. An attacker can use this information to log into the system with high-privilege credentials...