samba: Incorrect ACL get/set allowed on symlink path

A flaw was found in the way Samba handled ACLs on symbolic links. An authenticated user could use this flaw to gain access to an arbitrary file or directory by overwriting its ACL...

Google Chrome Extensions Subsystem Security Bypass Vulnerability (CNVD-2016-01513)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the Extensions subsystem of Google Chrome prior to version 49.0.2623.75, which stems from the program failing to properly preserve internal properties. A remote attacker could exploi...

Cisco Spark REST Interface Access Bypass Vulnerability

Cisco Spark is a collaboration services solution. A security vulnerability in the REST interface of Cisco Spark allows remote attackers to bypass established access restrictions by sending web requests to create arbitrary user accounts...

CVE-2016-1322

The REST interface in Cisco Spark 2015-07-04 allows remote attackers to bypass intended access restrictions and create arbitrary user accounts via unspecified web requests, aka Bug ID CSCuv72584...

The vulnerability of the iOS operating system allows a hacker to bypass existing mechanisms for restricting local access and gain access to information about notifications.

The vulnerability of the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating locally, to circumvent existing mechanisms for restricting local access and gain access to information about notifications by...

DEBIAN-CVE-2016-2048

Django 1.9.x before 1.9.2, when ModelAdmin.saveas is set to True, allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objects via the "Save as New" option when editing objects and leveraging the "change" permission...

CAREL PlantVisorEnhanced Access Restriction Bypass Vulnerability

CAREL PlantVisor Enhanced is a suite of monitoring and remote maintenance software for CAREL instrument-controlled refrigeration and air conditioning systems. A security vulnerability in CAREL PlantVisor Enhanced allows a remote attacker to bypass established access restrictions by sending a dire...

The vulnerability of the Windows operating system allows a perpetrator to circumvent existing access restrictions or establish a connection for an account with a empty password.

The vulnerability of the RDP service implementation in the Windows operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions or establish a connection for an account with a empty password using a...

The vulnerability of microprogrammed software in HP networking switches allows attackers to circumvent existing access restrictions.

The vulnerability of microprogrammed software in HP Networking switches is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder operating locally to circumvent existing access restrictions...

Microsoft SharePoint Server Security Mechanism Bypass Vulnerability

Microsoft SharePoint Server is the U.S. Microsoft Microsoft company launched the integrated suite of server functionality to provide comprehensive WEB-based information sharing and document collaboration technology content management and enterprise search, accelerate the sharing of business...

Microsoft SharePoint Security Bypass Vulnerability

Microsoft Office is an office software suite based on the Windows operating system. A security feature bypass vulnerability exists in Microsoft SharePoint, which can be exploited by remote attackers to bypass target ACP restrictions and conduct XSS attacks by modifying the webpart...

HP Networking Products and H3C Comware Devices Denial of Service Vulnerability

H3C Comware is H3C's core software platform that builds the foundation of its IP network products. A security vulnerability exists in H3C Comware 5/7 devices, which can be exploited by remote attackers to bypass target access restrictions or cause a denial of service through virtual routing and...

Cisco Prime Network Services Controller Arbitrary Command Execution Vulnerability

Cisco Prime Network Services Controller is a set of cloud automation network management software from Cisco Cisco. An arbitrary command execution vulnerability exists in Cisco Prime Network Services Controller 3.0. It allows a local user to bypass predefined access restrictions and execute...

Cisco Application Policy Infrastructure Controller Insecure Credentials Vulnerability

A vulnerability in the boot process of the Cisco Application Policy Infrastructure Controller APIC could allow an authenticated, local attacker to access the APIC as the root user. The vulnerability is due to improper implementation of access controls in the APIC system. An attacker could exploit...

The vulnerability of Microsoft Exchange Server allows attackers to circumvent existing access restrictions and redirect network traffic.

The vulnerability of Microsoft Exchange Server web applications is related to code errors. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and redirect network traffic through a specially crafted request...

Cisco Prime Service Catalog Web Interface Unauthorized Access Vulnerability

A vulnerability in the web interface of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to perform limited configuration changes. The vulnerability is due to missing access controls in some of the web pages that allow configuration changes. An attacker could exploit th...

Security Bypass Vulnerabilities in Multiple IBM Products (CNVD-2015-07939)

IBM Maximo Asset Management is a product of IBM Corporation.Maximo Asset Management and Maximo Asset Management Essentials are comprehensive asset lifecycle and maintenance management solutions.SmartCloud Control Desk SCCD is a unified asset and service management software.Tivoli IT Asset...

Cisco UCS Central Software Server-Side Request Forgery Vulnerability

A vulnerability in the Cisco Unified Computing System UCS Central software could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery SSRF on a targeted system. The vulnerability is due to improper validation of user-supplied input on the...

The vulnerabilities of Adobe Integrated Runtime and Flash Player allow a perpetrator to circumvent access restrictions for recording files.

The vulnerability of Adobe Integrated Runtime and Flash Player is related to deficiencies in access control for files. Exploiting this vulnerability can allow a malicious actor to bypass access restrictions on file writing...

The vulnerability of the Firefox browser allows a violator to circumvent domain restrictions and breach data confidentiality.

The vulnerability of Firefox browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access controls and compromise data confidentiality using a specially crafted HTML document...