BaserCMS Access Privilege Bypass Vulnerability

baserCMS is an enterprise-level content management system CMS. A privilege bypass vulnerability exists in baserCMS versions 4.1.0.1 and earlier and 3.0.15 and earlier, which stems from the program failing to restrict access. A remote attacker can exploit this vulnerability to bypass access...

Mozilla Firefox WebExtensions Host Privilege Bypass Vulnerability

Mozilla Firefox browser Firefox is a free and open source browser for Windows, Linux and MacOSX platforms. Mozilla Firefox suffers from a WebExtensions host privilege bypass vulnerability. An attacker can exploit this vulnerability to bypass host privilege settings via request redirection and...

CVE-2018-10172

CVE-2018-10172 affects 7-Zip on Windows up to version 18.01. The issue stems from enabling the Large memory pages option, which uses LsaAddAccountRights to grant SeLockMemoryPrivilege to the user account. This privilege can be leveraged to bypass access restrictions within a sandboxed process. Re...

D-Link DIR-815 Privilege Bypass and Information Disclosure Vulnerability

D-Link DIR-815 REV.B is a wireless router product from AUO D-Link. A security vulnerability exists in the /htdocs/web/getcfg.php file in the D-Link DIR-815 REV. B with DIR-815REVBFIRMWAREPATCH2.07.B01 and prior firmware versions. An attacker can exploit the vulnerability to bypass privileges and...

CVE-2018-8885

screenresolution-mechanism in screen-resolution-extra 0.17.2 does not properly use the PolicyKit D-Bus API, which allows local users to bypass intended access restrictions by leveraging a race condition via a setuid or pkexec process that is mishandled in a PolicyKitService.checkpermission call...

DEBIAN-CVE-2017-14178

In snapd 2.27 through 2.29.2 the 'snap logs' command could be made to call journalctl without match arguments and therefore allow unprivileged, unauthenticated users to bypass systemd-journald's access restrictions...

VulnCheck KEV: CVE-2017-11467

OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackers to execute arbitrary OS commands via a crafted request...

Mozilla Firefox Access Privilege Bypass Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in previous versions of Mozilla Firefox 58. An attacker can exploit this vulnerability by performing a symbolic link attack to bypass access privilege protection...

Unauthorized Access Vulnerability in Hikvision's Terminal Feature Control System

Zhejiang Haikang Technology Co., Ltd. specializes in the research, development, design and manufacture of intelligent control technology and is a domestic intelligent control technology/product provider. An unauthorized access vulnerability exists in Hikang Technology Terminal Feature Control...

Microsoft Windows - NTFS OwnerMandatory Label Privilege Bypass

Microsoft Windows - NTFS OwnerMandatory Label Privilege Bypass / Windows: NTFS Owner/Mandatory Label Privilege Bypass EoP Platform: Windows 10 1709 not tested 8.1 Update 2 or Windows 7 Class: Elevation of Privilege Summary: When creating a new file on an NTFS drive it’s possible to circumvent...

SAP Solution Manager Privilege Bypass Vulnerability

SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...

DEBIAN-CVE-2017-17448

net/netfilter/nfnetlinkcthelper.c in the Linux kernel through 4.14.4 does not require the CAPNETADMIN capability for new, get, and del operations, which allows local users to bypass intended access restrictions because the nfnlcthelperlist data structure is shared across all net namespaces...

ALPINE-CVE-2017-15099

INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits affect only tables where the attacker lacks full read access but has both INSERT and UPDATE...

CVE-2017-15099

CVE-2017-15099 involves an information-disclosure and access-restriction bypass in PostgreSQL through faulty checks in the PostgreSQL engine when using "INSERT … ON CONFLICT DO UPDATE". Affected versions are PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10. The vulnerabili...

Android Qualcomm Memory Subsystem Elevation of Privilege Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA.Qualcomm Memory The Qualcomm Memory subsystem is a memory subsystem developed by Qualcomm Incorporated. An elevatio...

Shadow: Buffer overflow

Background Shadow is a set of tools to deal with user accounts. Description Malformed input in the newusers tool may produce crashes and other unspecified behaviors. Impact A remote attacker could possibly cause a Denial of Service condition or bypass privilege boundaries in some web-hosting...

There are multiple vulnerabilities in the digital teaching resource platform of Tesco

DSS Digital Teaching Resource Platform is a digital learning platform developed by DSS Information Technology Shenzhen Co., Ltd. which integrates online course production, online teaching, course management, teacher-student interaction and so on. There are arbitrary user registration, privilege...

Unauthorized Access Vulnerability in Digital Programmable Subscriber Switch of NSN9000i Series IPPBX System of Shenzhen Guowei Saina Technology Co.

NSN9000i series IPPBX system is a new-generation hybrid IPPBX system developed by Xena Technology based on the latest IP technology and domestic market. The system combines the digital program-controlled subscriber switch platform developed by SANA Technology and the popular Asterisk application...

EMC RSA Archer Privilege Bypass Vulnerability

EMC RSA Archer is an enterprise IT governance and compliance governance product from EMC Corporation EMC. The product enables the development of eGRC programs for managing enterprise risk, automating business processes, and more. A privilege bypass vulnerability exists in EMC RSA Archer. A remote...

Privilege Bypass

Kibana is vulnerable to privilege bypass attacks. When X-Pack is installed, requests to the short URL and advanced settings services. This flaw allows authenticated users to make requests to those services regardless of their own permissions...