SUSE CVE-2008-2079

MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are within the MySQL home data directory,...

SUSE CVE-2008-3525

The sbniioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAPNETADMIN capability before processing a 1 SIOCDEVRESINSTATS, 2 SIOCDEVSHWSTATE, 3 SIOCDEVENSLAVE, or 4 SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass...

SUSE CVE-2008-4098

MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time a...

SUSE CVE-2008-4097

MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are associated with symlinks within pathnames for subdirectories of the MySQL home data directory, which are followed wh...

SUSE CVE-2009-4030

MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future...

SUSE CVE-2010-2198

lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to gain privileges or bypass intended access restrictions by...

SUSE CVE-2017-15099

INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits affect only tables where the attacker lacks full read access but has both INSERT and UPDATE...

Google Android Automotive OS 安全漏洞

Google Android Automotive OS is an operating system and platform from Google Inc. that runs directly on in-vehicle hardware. Android Automotive OS AAOS suffers from a security vulnerability that stems from a privilege bypass in AndroidManifest.xml, which could potentially grant signing privileges...

Qualcomm 芯片安全漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and is often manufactured on the surface of semiconductor wafers. A security vulnerability exists in the Qualcomm chip wlan driver, which stem...

Qualcomm 芯片安全漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and is often manufactured on the surface of semiconductor wafers. A security vulnerability exists in the Qualcomm chip wlan driver, which stem...

Google Android elevation of privilege vulnerability (CNVD-2023-12020)

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in the enforceVisualVoicemailPackage of PhoneInterfaceManager.java in Google Android version 13.0, which stems from a privilege bypass issue. An attacker can exploit the...

Rawchen blog-ssm 安全漏洞

blog-ssm is a JavaWeb-based blog project by the individual developer Rawchen in China. A security vulnerability exists in Rawchen blog-ssm v1.0, which originated from a vulnerability that allows attackers to bypass privilege checks and obtain sensitive user information via the /adminGetUserList...

CVE-2022-45963

h3c firewall = 3.10 ESS6703 has a privilege bypass vulnerability...

CVE-2022-45963

h3c firewall = 3.10 ESS6703 has a privilege bypass vulnerability...

CVE-2022-45963

h3c firewall = 3.10 ESS6703 has a privilege bypass vulnerability...

CVE-2022-45963

CVE-2022-45963 affects H3C Firewall versions <= 3.10 ESS6703. The vulnerability is a privilege bypass in the device’s authentication/authorization path, enabling an attacker with network access to achieve high-impact compromise (C/H/I/A = High) with no user interaction required. CVSS v3.1 base...

CVE-2022-45963

h3c firewall = 3.10 ESS6703 has a privilege bypass vulnerability...

H3C Firewall 安全漏洞

H3C Firewall is a series of firewalls from China's Xinhua San H3C. A security vulnerability exists in H3C Firewall 3.10 ESS6703 and prior versions, which originates from an attacker who can achieve privilege bypass...

PT-2022-27701 · H3C · H3C Firewall

Name of the Vulnerable Software and Affected Versions: h3c firewall versions = 3.10 ESS6703 Description: The issue is related to a privilege bypass. Recommendations: For h3c firewall versions = 3.10 ESS6703, at the moment, there is no information about a newer version that contains a fix for this...

CVE-2022-20544

CVE-2022-20544 affects Android 13; a missing permission check in onOptionsItemSelected of ManageApplications.java could bypass profile owner restrictions, enabling local elevation of privilege without additional execution privileges or user interaction. The issue is documented across multiple sou...