Cybozu Office 安全漏洞

Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. An operation restriction bypass vulnerability exists in the bulletin boards in Cybozu Office. An attacker could use this vulnerability to change the data in the bulletin board without proper privileges...

IBM DB2 Privilege Bypass Vulnerability

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A security vulnerability exists in IBM DB2, which can be exploited by an attacker to bypass access...

CVE-2021-0372

CVE-2021-0372 is a local elevation of privilege in Android 11 via getMediaOutputSliceAction in RemoteMediaSlice.java, caused by an unsafe PendingIntent that bypasses permissions without requiring user interaction. The impact is escalation to higher privileges (HIGH per CVSSv3.1) with local access...

HarmonyOS Privilege Bypass Vulnerability

HarmonyOS is a distributed operating system for all scenarios developed by Huawei, a Chinese company. A privilege bypass vulnerability exists in a component API of HarmonyOS 2.0. A local attacker could exploit the vulnerability to repeatedly issue commands that could exhaust system service...

HarmonyOS 安全漏洞

HarmonyOS is a distributed operating system for all scenarios developed by Huawei, a Chinese company. A privilege bypass vulnerability exists in a component API of HarmonyOS 2.0. A local attacker could exploit the vulnerability to repeatedly issue commands that could exhaust system service...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from a privilege bypass in the getMediaOutputSliceAction of RemoteMediaSlice.java. An attacker...

Google Android Access Control Error Vulnerability

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android has an access control error vulnerability in the checkGrantUriPermission file, which stems from a possible privilege bypass in checkGrantUriPermission.java. This could resul...

Unspecified vulnerability in Apache Pulsar manager

Apache Pulsar is the Apache Foundation for cloud environments , set of messages , storage , lightweight functional computing as one of the distributed message flow platform . The software supports multi-tenancy, persistent storage, multi-machine room cross-region data replication, with strong...

Apache Pulsar manager 安全漏洞

Apache Pulsar is the Apache Foundation for cloud environments , set of messages , storage , lightweight functional computing as one of the distributed message flow platform . The software supports multi-tenancy, persistent storage, multi-machine room cross-region data replication, with strong...

Apache Shiro Privilege Bypass Vulnerability (CNVD-2020-60318)

Apache Shiro is a Java security framework that performs authentication, authorization, password and session management . Apache Shiro suffers from a privilege bypass vulnerability. A remote attacker could send specially crafted HTTP requests to bypass the authentication process and gain...

PT-2020-4389 · Microsoft · Windows +2

Name of the Vulnerable Software and Affected Versions: PowerShellGet V2 module affected versions not specified Description: The issue is related to security mechanism shortcomings in the PowerShellGet module of the Windows operating system. It allows an attacker to bypass Windows Defender...

Vulnerabilities fixed in Cisco Identity Services Engine

Cisco has fixed multiple vulnerabilities in Identity Services Engine ISE. The vulnerabilities allow a malicious person with limited administrator privileges be able to modify ISE configurations modify ISE configurations without having the required privileges or a Cross-Site Scripting XSS attack...

Google Android Information Disclosure Vulnerability (CNVD-2020-54305)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A security vulnerability exists in the Android-11 version of Window Manager, which stems from a privilege bypass that allows an attacker to leak local information...

Google Android Information Disclosure Vulnerability (CNVD-2020-54308)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A security vulnerability exists in the Android-11 version of PackageManager, which stems from a lack of privilege checking and can be exploited by an attacker to leak local information...

Google Android MediaProvider Privilege Control Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A privilege control vulnerability exists in Android-11 version MediaProvider. The vulnerability stems from a privilege bypass, which can be exploited by an attacker to access ContentResolver and...

CVE-2020-25062

An issue was discovered on LG mobile devices with Android OS 9 and 10 software. LGTelephonyProvider allows a bypass of intended privilege restrictions. The LG ID is LVE-SMP-200017 July 2020...

CVE-2020-25062

An issue was discovered on LG mobile devices with Android OS 9 and 10 software. LGTelephonyProvider allows a bypass of intended privilege restrictions. The LG ID is LVE-SMP-200017 July 2020...

CVE-2020-25062

CVE-2020-25062 describes a privilege-bypass in LGTelephonyProvider on LG Android devices (9/10). Affected product: LG mobile devices running Android 9–10; root cause: bypass of intended privilege restrictions in LGTelephonyProvider (LG internal ID LVE-SMP-200017). Impact is reported as high to cr...

Unspecified Vulnerability in SAP Banking Services

SAP Banking Services is a banking services solution from SAP. A security vulnerability exists in SAP Banking Services versions 400, 450, and 500 that stems from a lack of privilege checking in the program. An attacker could exploit the vulnerability to display a user's General Market Data GMD and...

ArticaTech Artica Web Proxy SQL Injection Vulnerability

ArticaTech Artica Proxy is an open source Artica proxy solution from the French company ArticaTech. An SQL injection vulnerability exists in the 'apikey' parameter of the fw.login.php file in Artica Web Proxy version 4.30.00000000. A remote attacker can exploit this vulnerability to bypass...