OpenSSL Fork Unauthorized Access

The vulnerability of the fork function in the OpenSSL library is related to the use of insufficiently random values. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...

Ruby Dir Methods Unauthenticated Access

The vulnerability of the Dir.open, Dir.new, Dir.entries, and Dir.empty methods in the Ruby programming language exists due to incorrect path name restrictions for restricted-access directories. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected data or...

Kerberos Component Unauthorized Access

The vulnerability of the Kerberos component in Java SE and Java SE Embedded software platforms is related to deficiencies in access control. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information using Kerberos network...

Oracle Database Server Information Disclosure

The vulnerability of the Core RDBMS component of the database management system, Oracle Database Server, is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Siebel UI Framework Unauthorized Access

The vulnerability of the Siebel UI Framework component of the Oracle Siebel CRM system relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

Oracle Hospitality Reporting and Analytics Unauthorized Access

The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data usin...

MySQL Information Schema Unauthorized Access

The vulnerability of the Information Schema component of the MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the MySQL networ...

Microsoft SQL Server Management Studio Permission Issue

The vulnerability of the Microsoft SQL Server Management Studio database management system is related to the improper assignment of permissions for files. Exploiting this vulnerability can allow an attacker to gain access to protected information remotely...

Open Enclave SDK Memory Disclosure

The vulnerability of the Open Enclave SDK software development tools is related to an object handling error in memory. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

PeopleSoft Enterprise Performance Monitor Unauthorized Access

The vulnerability of the Performance Monitor sub-component of the PeopleSoft Enterprise component of the Oracle PeopleSoft Enterprise business application suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthoriz...

ZingBox Inspector Credential Storage

The vulnerability of the ZingBox Inspector network traffic processor is related to the unencrypted storage of user credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Linux kernel fd_locked_ioctl Disclosure

The vulnerability of the fdlockedioctl function in the Linux kernel’s drivers/block/floppy.c file is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker to disclose protected information...

fly-admin-viewaudit Security Journal Unauthorized Access

The vulnerability of the security journal “fly-admin-viewaudit” in the FLY operating system of Astra Linux relates to a bug in log opening with identical modification times. Exploiting this vulnerability could allow an attacker, working remotely, to gain unauthorized access to protected informati...

Firefox WebExtensions Cross- Unauthorized Access

The vulnerability of the cross-browser system used for developing WebExtensions extensions in the Firefox web browser is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Firefox ESR Unauthorized Access

The vulnerability in the web console and the JavaScript debugger of the Firefox ESR browser is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Moxa MGate MB3170 Unstable Cryptographic Algorithm Unauthorized Access

The vulnerability of the microprogrammed software of Moxa MGate MB3170, MB3180, MB3270, MB3280, MB3480, and MB3660 is related to the use of a unstable cryptographic algorithm. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

Windows kernel Unauthorized Access

The vulnerability of the Windows operating system’s kernel is related to memory initialization errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

Level 3 Maintenance Functions

The vulnerability of the Level 3 Maintenance Functions component of Oracle Retail Convenience Store Back Office software is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to gain access to protected information, modify file access rights, or cause...

Windows Graphics Disclosure

The vulnerability of the Windows Graphics component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

Node.js URL Parser Unauthorized Access

The vulnerability of Node.js’s URL parser lies in errors during the processing of HTTP packets. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected data through HTTP requests...