CVE-2011-3891

CVE-2011-3891 affects Google Chrome prior to 15.0.874.102, where improper restriction of internal Google V8 functions may enable remote attackers to cause a denial of service or potentially other impact via unknown vectors. The cited connected advisories indicate this requires upgrading to Chrome...

CVE-2011-2677

Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information time card and attendance via unspecified vectors related to manipulation of a URL...

CVE-2011-2677

Cybozu Office before 8.0.0 is affected by an improper access control vulnerability where remote authenticated users can bypass restrictions and access sensitive information (time card and attendance) by manipulating a URL. Affected product: Cybozu Office (pre-8.0.0). Root cause: insufficient enfo...

CVE-2011-2677

Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information time card and attendance via unspecified vectors related to manipulation of a URL...

CVE-2011-0260

CVE-2011-0260 affects the CoreProcesses component in Mac OS X 10.7 prior to 10.7.2 . The issue allowed a window on the locked screen to receive keystrokes, potentially enabling a physically proximate attacker to bypass screen-lock restrictions. Apple addresses this by preventing system windows fr...

Cybozu Office vulnerable in restricting access

Overview Cybozu Office contains a vulnerability in restricting access permissions. Cybozu Office is a groupware.Cybozu Office contains a vulnerability in restricting access permissions. Masako Ohno reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

PT-2011-1859 · Clearbudget · Clearbudget

Name of the Vulnerable Software and Affected Versions: clearBudget version 0.9.8 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the actionPath parameter in the logic/controller.class.php file. This is a remote file inclusion issue. Note that this issue h...

CVE-2011-2878

Google Chrome before 14.0.835.202 does not properly restrict access to the window prototype, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

CVE-2011-2878

Removed by vendor...

CVE-2011-2495

fs/proc/base.c in the Linux kernel before 2.6.39.4 does not properly restrict access to /proc//io files, which allows local users to obtain sensitive I/O statistics by polling a file, as demonstrated by discovering the length of another user's password...

BaserCMS vulnerable to access restriction

Overview BaserCMS contains a vulnerability in access restriction. BaserCMS is an open-source Contents Management System CMS. BaserCMS contains a vulnerability in access restriction where adding a user in the user group "operators" which is created by default when BaserCMS is installed. Masako Ohn...

JVN#16617002: BaserCMS vulnerable to access restriction

BaserCMS is an open-source Contents Management System CMS. BaserCMS contains a vulnerability in access restriction where adding a user in the user group "operators" which is created by default when BaserCMS is installed. Impact Users without administrative privileges may obtain administrative...

ProjectForum XSS vulnerability

Overview ProjectForum 7.0.1.3038 and possibly previous versions, are vulnerable to cross site scripting XSS. Description CourseForum's ProjectForum software fails to sanitize all input fields. As a result, cross site scripting XSS attacks can be conducted. By default, a non-credentialed user can...

CVE-2011-3645

Newgen OmniDocs allows remote attackers to bypass intended access restrictions via 1 a modified FolderRights parameter to doccab/doclist.jsp, which leads to arbitrary permission changes; or 2 a modified UserIndex parameter to doccab/userprofile/editprofile.jsp, which selects the settings page of ...

CVE-2011-3645

Newgen OmniDocs vulnerability CVE-2011-3645 exists in the Omnidocs web interface. Multiple parameter manipulations enable unauthorized privilege escalation and bypass of access controls: modifying FolderRights in doccab/doclist.jsp can grant arbitrary permissions (including rights to add/delete f...

Freefloat FTPD Invalid Command Overflow

Added: 09/26/2011 BID: 48704 Background Freefloat is a software series developed directly for handheld terminals. Freefloat FTP Server is a free FTP server for various versions of Windows including Windows CE/Pocket PC. Problem Freefloat FTP Server is vulnerable to a stack overflow as a result of...

Security feature bypass

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, related to a "security control bypass."...

CVE-2011-2862

Google V8, as used in Google Chrome before 14.0.835.163, does not properly restrict access to built-in objects, which has unspecified impact and remote attack vectors...

CVE-2011-2862

Google V8, as used in Google Chrome before 14.0.835.163, does not properly restrict access to built-in objects, which has unspecified impact and remote attack vectors...

CVE-2011-2862

CVE-2011-2862 concerns Google V8 in Chrome before 14.0.835.163, where access to built-in objects is not properly restricted. Affected software is the V8 engine as used by Chrome; root cause and precise impact are not detailed in the provided documents. No exploitation details are given here, and ...