Oracle Solaris Kernel Unauthorized Access

The vulnerability of the Oracle Solaris operating system’s kernel is related to lack of access control mechanisms. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected data...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created application...

Linux subsystem Windows Privilege Escalation

The vulnerability of the Linux subsystem of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created application...

Cisco RV180W Multi-functional Router Disclosure Information

The vulnerability in the code of the software platform for the Cisco RV180W multi-functional router and the Cisco Small Business RV220W wireless network security gateway lies in improper cleaning of data entered by users in HTTP requests. Exploiting this vulnerability allows a malicious actor to...

Apache Tomcat CORS Access Disclosure

The vulnerability of the CORS component in Apache Tomcat servers is related to insufficient access control. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected data using the HTTP protocol...

Oracle VM VirtualBox Core Unauthorized Access

The vulnerability of the Core sub-component of the Oracle VM VirtualBox is related to insufficient access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected data using the VRDP protocol...

Oracle VM VirtualBox Core Unauthorized Access

The vulnerability of the Core sub-component of the Oracle VM VirtualBox is related to insufficient access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected data...

Excel Memory Object Error Access Disclosure

The vulnerability of Excel spreadsheet editors is related to errors in memory object processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information through a specially created file...

ContentProvider Java Disclosure

The vulnerability of several functions in the ContentProvider.java file of the Android operating system is related to a path traversal error. Exploiting this vulnerability can allow an attacker to disclose protected information...

Castor XML Disclosure

The vulnerability of the Castor XML software component for Cisco WebEx Meetings Server relates to errors in restricting XML references to external objects. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Sandbox Protection Mechanism Ghostscript Disclosure

The vulnerability of the Sandbox Protection Mechanism, a component of the software for processing, transforming, and generating documents with Ghostscript, is related to the lack of protection for operational data. Exploiting this vulnerability allows an intruder, operating locally, to circumvent...

Wizard Component RICOH MP C6003 Data Compromise

The vulnerability of the Wizard /web/entry/en/address/adrsSetUserWizard.cgi component of the RICOH MP multifunctional device exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to compromise the...

NVIDIA GeForce Experience Disclosure

The vulnerability of NVIDIA GeForce Experience software is related to security mechanism errors. Exploiting this vulnerability can allow a hacker to disclose protected information...

Cisco Wireless LAN Controllers Web Interface Disclosure

The vulnerability of the web interface of microprogramming software for Cisco Wireless LAN Controllers of the 5500 series arises from insufficient checking of entered URI addresses. Exploiting this vulnerability can allow a malicious actor to disclose protected information using a specially craft...

PT-2018-2364

Name of the Vulnerable Software and Affected Versions Oracle Hyperion Common Events version 11.1.2.4 Description The issue is related to insufficient access control in the User Interface component of Oracle Hyperion Common Events. This can be exploited by a remote attacker to gain unauthorized...

Android mca_ccb_hdl_req Disclosure

The vulnerability of the mcaccbhdlreq function mcacact.cc in the Android operating system relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information using Bluetooth...

Microsoft Edge WebAudio Disclosure

The vulnerability of Microsoft Edge’s WebAudio library is related to errors in processing audio requests. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

PeopleSoft Enterprise PeopleTools Integration Broker Unauthorized Access

The vulnerability of the Integration Broker component in the PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data...

Primavera Unifier Unauthorized Access

The vulnerability of the Core component of the Primavera Unifier application, which is used for automating project management processes, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protecte...

Script Author Unauthorized Access

The vulnerability of the Script Author component in the scripting software for creating and processing scripts is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...