664 matches found
CVE-2018-19981
Amazon AWS SDK =2.8.5 for Android uses Android SharedPreferences to store plain text AWS STS Temporary Credentials retrieved by AWS Cognito Identity Service. An attacker can use these credentials to create authenticated and/or authorized requests. Note that the attacker must have "root" privilege...
Android Permission License and Access Control Vulnerability (CNVD-2019-09144)
Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A privilege permission and access control vulnerability exists in System in Android, which arises from a lack of effective privilege permission and access control measures in a networked system o...
Google Android Privilege Permission and Access Control Vulnerability
Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A security vulnerability exists in System in Google Android versions 8.0, 8.1, and 9, which stems from a lack of effective permissions licensing and access control measures in a networked system ...
Intel 8th Generation Intel Core Processor and 7th Generation Intel Core Processor Privilege Permission and Access Control Issues Vulnerability (CNVD-2020-18568)
The 8th Generation Intel Core Processor and 7th Generation Intel Core Processor are both products of Intel Corporation. 8th Generation Intel Core Processor is an 8th Generation Core Series The 8th Generation Intel Core Processor is an eighth-generation Core series central processing unit CPU, whi...
Design/Logic Flaw
Cloud Foundry Container Runtime, versions prior to 0.29.0, deploys Kubernetes clusters utilize the same CA Certificate Authority to sign and trust certs for ETCD as used by the Kubernetes API. This could allow a user authenticated with a cluster to request a signed certificate leveraging the...
CVE-2019-3779 Cloud Foundry Container Runtime allows a user to bypass security policy when talking to ETCD
Cloud Foundry Container Runtime, versions prior to 0.29.0, deploys Kubernetes clusters utilize the same CA Certificate Authority to sign and trust certs for ETCD as used by the Kubernetes API. This could allow a user authenticated with a cluster to request a signed certificate leveraging the...
Logic Flaw Vulnerability in Wave's Government Services Platform
Wave government service platform is a tooling platform product for administrative approval informatization. There is a logic flaw vulnerability in the Wave Government Service Platform that can be exploited by an attacker to modify the password of any account and obtain account-related privileges...
Memu Play 6.0.7 - Privilege Escalation Vulnerability
Exploit for windows platform in category local exploits Exploit Title: Memu Play 6.0.7 - Privilege Escalation PoC Author: Alejandra Sánchez Vendor Homepage: https://www.memuplay.com/ Software Link: https://www.memuplay.com/download-en.php?filename=Memu-Setup&from=officialrelease Version: 6.0.7...
Memu Play 6.0.7 - Privilege Escalation
Memu Play 6.0.7 - Privilege Escalation Exploit Title: Memu Play 6.0.7 - Privilege Escalation PoC Date: 20/02/2019 Author: Alejandra Sánchez Vendor Homepage: https://www.memuplay.com/ Software Link: https://www.memuplay.com/download-en.php?filename=Memu-Setup&from=officialrelease Version: 6.0.7...
Memu Play 6.0.7 - Privilege Escalation
Exploit Title: Memu Play 6.0.7 - Privilege Escalation PoC Date: 20/02/2019 Author: Alejandra Sánchez Vendor Homepage: https://www.memuplay.com/ Software Link: https://www.memuplay.com/download-en.php?filename=Memu-Setup&from=officialrelease Version: 6.0.7 Tested on: Windows 10 / Windows 7...
GHSA-M8PW-H8QJ-RGJ9 ipip-coffee downloads Resources over HTTP
Affected versions of ipip-coffee insecurely download resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. This could impact the integrity and availability of the data being used to make geolocation decisions by an...
PT-2019-18994 · Microsoft · Lha.Sys
Name of the Vulnerable Software and Affected Versions: LHA.sys driver versions prior to 1.1.1811.2101 Description: The issue allows low-privileged users to read and write arbitrary physical memory, potentially elevating system privileges. This is possible due to the device object having an...
CVE-2019-2523
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualB...
Google Kubernetes Privilege Access Control Vulnerability
Google Kubernetes is an open source Docker container cluster management system from Google, Inc. The system provides resource scheduling, deployment and operation, service discovery and scaling up and down for containerized applications. A privilege access control vulnerability exists in Google...
Google Android Privilege Access Control Vulnerability (CNVD-2018-25313)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A limited access control vulnerability exists in Yocto in Android, which stems from a failure to properly configure a script. An attacker could exploit this vulnerability to gain...
Microsoft Exchange Server Privilege Access Control Vulnerability
Microsoft Exchange Server is a set of e-mail service programs from Microsoft, which provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A privilege access control vulnerability exists in Microsoft Exchange Server. An attacker can exploit this vulnerability by...
IBM DB2 Privilege Access Control Vulnerability
IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBM i, z/OS, and Windows server versions. A privilege access control vulnerability exists in all revision packages of several versions of IBM D...
CVE-2018-3282
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Storage Engines. Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network acce...
CVE-2018-3277
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...