The vulnerability of the Flash Player software allows attackers to obtain confidential information or circumvent existing access restrictions.

The vulnerability of the Flash Player software is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to bypass existing access restrictions or obtain confidential information using uncertain vectors...

Adobe Flash Player Information Disclosure Vulnerability (CNVD-2016-07667)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from the American company Adobe. An information disclosure vulnerability exists in Adobe Flash Player, which can be exploited by attackers to bypass established access restrictions and obtain sensitive information...

PT-2016-2774 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player affected versions not specified Description: The issue is related to the lack of protection for internal data in the Flash Player platform. It can be exploited by a remote attacker to bypass existing access restrictions or...

PT-2016-2781 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player affected versions not specified Description: The issue allows an attacker to obtain confidential information or bypass existing access restrictions. Recommendations: At the moment, there is no information about a newer...

CVE-2016-4381

HPE XP7 Command View Advanced Edition CVAE Suite 6.x through 8.x before 8.4.1-02, when Replication Manager RepMgr and Device Manager DevMgr are enabled, allows local users to bypass intended access restrictions via unspecified vectors...

Powerlogic / Schneider Electric IONXXXX CSRF / Missing Access Controls

Powerlogic/Schneider Electric IONXXXX series Smart Meters - Multiple security issues Impacted devices: ION7300 and potentially all IONXXXX models based off of Powerlogic For example, Power Measurement Ltd. Meter ION 7330V283 ETH ETH7330V274...

CVE-2016-1484

Cisco WebEx Meetings Server 2.6 allows remote attackers to bypass intended access restrictions and obtain sensitive application information via unspecified vectors, aka Bug ID CSCuy92724...

WSO2 Carbon 4.4.5 - Persistent Cross-Site Scripting

Credits: John Page aka HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/WSO2-CARBON-v4.4.5-PERSISTENT-XSS-COOKIE-THEFT.txt + ISR: ApparitionSec Vendor: ============= www.wso2.com Product: ================== Ws02Carbon v4.4.5 WSO2 Carbon is the...

Google Chrome DevTools Access Restriction Vulnerability (CNVD-2016-06146)

Google Chrome is a web browsing tool developed by Google. Google Chrome has a security vulnerability. Due to incorrect handling of the hostname of a script path, it allows remote attackers to bypass intended access restrictions via URLs. Unlike CVE-2016-5143...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, allow attackers to circumvent restrictions on the execution of JavaScript APIs.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat and Adobe Acrobat Document Cloud, are related to lack of access control mechanisms. Exploiting these vulnerabilities can allow a malicious actor to...

The vulnerability of the Apache Struts software platform, which allows attackers to circumvent existing access restrictions

The vulnerability of the Apache Struts software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to circumvent existing access restrictions by using the default method...

The vulnerability of the Apache Struts software platform, which allows attackers to circumvent existing access restrictions

The vulnerability of the MultiPageValidator implementation in the Apache Struts software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to bypass existing access restrictions by modifying page parameters remotely...

UBUNTU-CVE-2016-4178

Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors...

Android Qualcomm component security bypass vulnerability (CNVD-2016-04817)

Android on Nexus 5 and 7 is an open source Linux-based operating system for the Nexus 5 and 7 smartphones developed by Google and the Open Handset Alliance OHA in the U.S. Qualcomm is one of the U.S.-based companies used in the Qualcomm devices. Qualcomm is a Qualcomm device-specific component us...

The vulnerability of the HP NonStop Safegguard Security protection mechanism allows attackers to escalate their privileges.

The vulnerability of the HP NonStop Safegguard Security information protection tool is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor, operating remotely, to enhance their privileges by utilizing extended access control...

The vulnerability of Adobe Pepper Flash software for Google Chrome allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in Adobe Pepper Flash for Google Chrome allows attackers to circumvent access restrictions...

The vulnerability of the Cisco Wireless LAN Controller 4100 software allows for circumventing access restrictions.

Vulnerability exists in Cisco Wireless LAN Controller WLC devices due to the widespread use of the Aironet IOS software. This leads to a state where the controller acts as an administrative HTTP server. Exploiting this vulnerability allows malicious actors to bypass access restrictions by...

The vulnerability of the Flash Player software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in Adobe Flash Player allows attackers to circumvent access restrictions...

Vulnerability of Adobe AIR software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information

The vulnerability in Adobe AIR allows attackers to circumvent access restrictions...

The vulnerability of Adobe Pepper Flash software for Google Chrome allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in Adobe Pepper Flash for Google Chrome allows attackers to circumvent access restrictions...