Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 136, which stems from privilege grant spoofing...

Cisco Nexus 3500 Series Switches 权限许可和访问控制问题漏洞

Cisco Nexus 3500 Series Switches is a 3500 series switch from Cisco USA. The Cisco Nexus 3500 Series Switches are vulnerable to a privilege-granting and access-control issue, which arises from an ACL denial rule that is not properly enforced when the device is rebooted. An unauthenticated, remote...

Authentication flaw

An issue was discovered in Jamf Pro before 10.32.0, aka PI-009921. An account can be granted incorrect privileges in response to authentication that uses specific sign-on workflows...

Intel PROSet Wireless 权限许可和访问控制问题漏洞

Intel PROSet Wireless is a driver for the Intel PROSet Wireless network card from Intel Corporation USA. The Intel PROSet Wireless driver is vulnerable to a privilege-granting and access-control issue that could allow information disclosure and denial of service...

CVE-2016-6526

The SpamCall Activity component in Telecom application on Samsung Note device L5.0/5.1 and M6.0 allows attackers to cause a denial of service crash and reboot or possibly gain privileges via a malformed serializable object...

Mozilla recursive eval call causes confirm dialog to evaluate to true (MFSA 2011-02)

Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, does not properly handle certain recursive eval calls, which makes it easier for remote attackers to force a user to respond positively to a dialog question, as demonstrated by a question about granting privileges...

CVE-2007-4409

Race condition in ircu 2.10.12.01 through 2.10.12.05 allows remote attackers to set a new Apass during a netburst by arranging for ops privilege to be granted before the mode arrives...

javaws vulnerabilities

Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.213 and earlier, allows remote attackers to perform unauthorized actions via an application that grants privileges to itself, related to "Incorrect Use of System Classes" and probably related to...