QRadar Community Edition 7.3.1.6 CSRF / Weak Access Control Vulnerability

QRadar Community Edition version 7.3.1.6 suffers from cross site request forgery and weak access control vulnerabilities. ------------------------------------------------------------------------ Cross-Site Request Forgery & weak access control in QRadar ConfigServices webservice...

QRadar Community Edition 7.3.1.6 CSRF / Weak Access Control

------------------------------------------------------------------------ Cross-Site Request Forgery & weak access control in QRadar ConfigServices webservice ------------------------------------------------------------------------ Yorick Koster, September 2019...

iCATCH DVR Access Control Error Vulnerability

The iCATCH DVR is a digital video recorder DVR from China Desirable International iCATCH. A security vulnerability exists in the firmware of iCATCH DVR prior to version 20200103, which stems from the lack of proper access control in the file management interface. An attacker can exploit the...

Vulnerability of the Server component: Security: Privileges of the MySQL database management system, allowing attackers to modify data or cause partial service interruptions.

The vulnerability of the Server component, specifically in the Security section related to MySQL database management system privileges, is associated with deficiencies in access control. Exploiting this vulnerability allows a malicious actor to modify data or cause partial service interruptions...

The vulnerability of the IPv4 protocol in real-time operating systems like Wind River VxWorks allows attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the IPv4 protocol for real-time operating systems developed by Wind River VxWorks is related to insufficient access control mechanisms, such as ipdhcpc and DHCP. Exploiting this vulnerability could allow attackers to compromise the integrity and accessibility of protected...

CVE-2020-9756

Patriot Viper RGB Driver 1.1 and prior exposes IOCTL and allows insufficient access control. The IOCTL Codes 0x80102050 and 0x80102054 allows a local user with low privileges to read/write 1/2/4 bytes from or to an IO port. This could be leveraged in a number of ways to ultimately run code with...

The vulnerability of the Java VM component of the Oracle Database Server management system allows a hacker to gain full control over the application.

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full control over the application by using network protocols...

The vulnerability of the Oracle Application component, DBA of the Oracle Database Server system, allows a hacker to gain access to modify, add, delete data, or cause service failures.

The vulnerability of the Oracle Application component, specifically the DBA component of the Oracle Database Server system, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to modify, add, or delete data, or cause service interruptions...

intel elevation of privilege vulnerability

Graphics is a series of integrated display cores from Intel. A security vulnerability exists in Intel graphics hardware GPU that stems from a program's failure to perform adequate access control. A local attacker could exploit the vulnerability to gain elevated privileges...

ScanGuard Antivirus 2020 - Insecure Folder Permissions

ScanGuard Antivirus 2020 - Insecure Folder Permissions Exploit Title: ScanGuard Antivirus 2020 - Insecure Folder Permissions Date: 2019-10-10 Exploit Author: hyp3rlinx Vendor Homepage: https://www.scanguard.com/ Software Link: https://support.scanguard.com/en/kb/22/upgrades-available Version: 202...

The vulnerability of the Information Schema component of the MySQL Server database management system allows attackers to gain unauthorized access to protected information.

The vulnerability of the Information Schema component of the MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the MySQL networ...

The vulnerability of the InnoDB component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component of the Oracle MySQL ServerL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service failures using the MySQL protocol...

WPGraphQL <= 0.2.3 - Multiple Vulnerabilities

Without authorisation, weak access controls allow us to: Create administrative users Post comments on articles bypassing article restrictions and global moderation Retrieve content of password-protected posts/articles/pages Retrieve full list of registered users in the platform Retrieve full list...

Vulnerability of the Server component: Security: Privileges of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server component: Security: Privileges of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

PT-2019-1921 · Mysql Server +5 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.15 and prior Description: The issue is related to insufficient access control in the MySQL Server component, specifically in the DDL subcomponent. This can be exploited by a remote attacker to cause a denial of...

The vulnerability of the Outside In Filters component within the software development kit (SDK) of Outside In Technology allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the Outside In Filters component within the software development kit SDK of Outside In Technology is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using th...

Vulnerability of the Server component: The MySQL database management system’s options, which allow a hacker to cause a service failure.

The vulnerability of the Server component: The options of the Oracle MySQL database management system are related to insufficient access control. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of the Server component: The DDL system for database management in MySQL, which allows a hacker to cause a service failure.

The vulnerability of the Server component: The DDL system for database management in Oracle MySQL is related to insufficient access control. Exploiting this vulnerability may allow a malicious actor to cause service interruptions...

The vulnerability of the Oracle CRM Technical Foundation component of the Oracle E-Business Suite system allows a perpetrator to alter the access rights to files.

The vulnerability of the Oracle CRM Technical Foundation component of the Oracle E-Business Suite system relates to insufficient access control. Exploiting this vulnerability could allow an attacker, operating remotely, to alter the access rights to files using the HTTP protocol...

The vulnerability of the Oracle CRM Technical Foundation component of the Oracle E-Business Suite system allows a perpetrator to alter the access rights to files.

The vulnerability of the Oracle CRM Technical Foundation component of the Oracle E-Business Suite system relates to insufficient access control. Exploiting this vulnerability could allow an attacker, operating remotely, to alter the access rights to files using the HTTP protocol...