4160 matches found
The vulnerability of the iOS operating system allows a hacker to circumvent existing restrictions on access to file system objects.
The vulnerability of the Location Framework component in the iOS operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to circumvent existing restrictions on access to file system objects through symbolic links...
The vulnerability of the Firefox OS operating system, as well as the Firefox and Firefox ESR browsers, allows attackers to circumvent access restrictions, read arbitrary files, and increase their privileges.
The vulnerability of the PDF reader component in the Firefox OS operating system, as well as in Firefox and Firefox ESR browsers, is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access controls, read arbitrary files, and...
The vulnerability of the Business Process Manager system allows a perpetrator to circumvent access restrictions related to document loading/saving.
The vulnerability of the Business Process Manager system’s automation functionality is related to deficiencies in restricting access to certain functions. Exploiting this vulnerability could allow a malicious actor to circumvent access restrictions associated with document loading/saving when the...
Cisco ACE 4710 and ACE30 Application Control Engine CLI Privilege Escalation Vulnerability
A vulnerability in the command-line interface CLI of Cisco Application Control Engine ACE could allow an authenticated, local attacker to elevate privileges to read and alter the content of files that belong to other contexts. The vulnerability is due to insufficient file access controls. An...
ownCloud: apps.owncloud.com: Path Disclosure
Threat: A potentially sensitive file, directory, or directory listing was discovered on the Web server. Impact: The contents of this file or directory may disclose sensitive information. Solution: Verify that access to this file or directory is permitted. If necessary, remove it or apply access...
The vulnerability of the Moodle learning management system allows a hacker to bypass access restrictions for managing files.
The vulnerability of the files/externallib.php sub-component of the Moodle learning management system is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor to circumvent access restrictions to file management by using web...
The vulnerability of Adobe Acrobat’s PDF editing software allows a hacker to circumvent existing access restrictions.
The vulnerability of Adobe Acrobat’s PDF editing software is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions from a remote location...
The vulnerability of the Adobe Reader PDF viewer program allows a hacker to circumvent access restrictions.
The vulnerability of the Adobe Reader PDF viewer program is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass restrictions on access to the JavaScript API...
Apache ap_some_auth_required() Security Bypass Vulnerability
Apache is an open source HTTPD service program. An unspecified security vulnerability exists in the Apache apsomeauthrequired function, where the Require directive is still used for authorization settings and displayed in the configuration because the program does not require authentication. A...
Adobe Reader and Acrobat Information Disclosure Vulnerability (CNVD-2015-04610)
Adobe Reader Acrobat is the United States Adobe developed a very popular and excellent PDF document reading software. An information disclosure vulnerability exists in Adobe Reader and Acrobat that could allow an attacker to bypass predetermined access restrictions and obtain sensitive informatio...
Adobe Reader and Acrobat Information Disclosure Vulnerability (CNVD-2015-04604)
Adobe Reader Acrobat is the United States Adobe developed a very popular and excellent PDF document reading software. An information disclosure vulnerability exists in Adobe Reader and Acrobat that could allow an attacker to bypass predetermined access restrictions and obtain sensitive informatio...
Adobe Reader and Acrobat Information Disclosure Vulnerability (CNVD-2015-04609)
Adobe Reader Acrobat is the United States Adobe developed a very popular and excellent PDF document reading software. An information disclosure vulnerability exists in Adobe Reader and Acrobat that could allow an attacker to bypass predetermined access restrictions and obtain sensitive informatio...
Adobe Reader and Acrobat Information Disclosure Vulnerability (CNVD-2015-04605)
Adobe Reader Acrobat is the United States Adobe developed a very popular and excellent PDF document reading software. An information disclosure vulnerability exists in Adobe Reader and Acrobat that could allow an attacker to bypass predetermined access restrictions and obtain sensitive informatio...
php: regressions in 5.4+
It was found that certain PHP functions did not properly handle file names containing a NULL character. A remote attacker could possibly use this flaw to make a PHP script access unexpected files and bypass intended file system access restrictions...
PT-2015-3402 · Openssh +6 · Openssh +6
Name of the Vulnerable Software and Affected Versions: OpenSSH versions prior to 6.9 Description: The issue is related to the x11 open helper function in channels.c in ssh, which lacks a check of the refusal deadline for X connections when ForwardX11Trusted mode is not used. This makes it easier...
Mozilla Firefox/Firefox ESR/Thunderbird Security Restriction Bypass Vulnerability
Mozilla Firefox/Thunderbird is a web browser/email client released by Mozilla. A security restriction bypass vulnerability exists in Mozilla Firefox/Firefox ESR/Thunderbird. An attacker can exploit the vulnerability to bypass targeted access restrictions...
USN-2652-1 oxide-qt vulnerabilities
It was discovered that Chromium did not properly consider the scheme when determining whether a URL is associated with a WebUI SiteInstance. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass security restrictions. CVE-2015-1266 ...
Cisco Unified Communications Domain Manager Information Disclosure Vulnerability
A vulnerability in the web framework of Cisco Unified Communications Domain Manager Application Software could allow an unauthenticated, remote attacker to access content in the bvsmweb directory. The vulnerability is due to insufficient access controls. An attacker could exploit this vulnerabili...
Igreks MilkyStep Light and Professional Access Restriction Bypass Vulnerability
Igreks MilkyStep is a CGI for pushing magazines through the email system. A security vulnerability in the user-information management feature of Igreks MilkyStep Light and Professional allows remote attackers to bypass access restrictions and modify administrator credentials...
