The vulnerability of the File System API interface in the Google Chrome web browser allows a hacker to circumvent existing security restrictions.

The vulnerability of the File System API interface in the Google Chrome web browser is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

The vulnerability of the Bluetooth BR/EDR encryption key negotiation protocol lies in its authentication procedures’ deficiencies, which allow attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Bluetooth BR/EDR encryption key negotiation protocol is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of Trend Micro InterScan Web Security Virtual Appliance, related to deficiencies in authentication procedures, allows attackers to bypass the authentication process.

The vulnerability of Trend Micro InterScan Web Security Virtual Appliance is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process remotely...

The vulnerability of the Intel LED Manager for NUC software, related to authentication deficiencies, allows a hacker to trigger a service failure.

The vulnerability of the Intel LED Manager for NUC software-related lighting control systems is related to authentication deficiencies. Exploiting this vulnerability could allow an attacker to cause malfunctions in the system’s operation...

The vulnerability of the microprogrammed software of D-Link DAP-2610 wireless routers allows a hacker to execute arbitrary code with root privileges.

The vulnerability of D-Link DAP-2610 wireless router’s microprogramming software is related to authentication deficiencies. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands with root privileges...

The vulnerability of the API interface of the Threat Intelligence Exchange Server allows attackers to compromise the integrity of the protected information.

The vulnerability of the Threat Intelligence Exchange Server’s API interface is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor, operating remotely, to compromise the integrity of the protected information through specially crafted...

Vulnerabilities of Windows operating systems, related to authentication deficiencies, allow attackers to escalate their privileges.

The vulnerability of Windows operating systems is related to authentication deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges by running a specially created application...

Vulnerabilities of Windows operating systems, related to authentication deficiencies, allow attackers to escalate their privileges.

The vulnerability of Windows operating systems is related to authentication deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges by running a specially created application...

The vulnerability of the SAP Disclosure Management tool in terms of reporting capabilities is related to deficiencies in authentication procedures, which allow unauthorized users to increase their privileges.

The vulnerability of the SAP Disclosure Management reporting tool is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially crafted request...

The vulnerability of the command-line interface of the Cisco NX-OSS network operating system in Cisco devices allows a attacker to elevate their privileges and execute arbitrary code.

The vulnerability of the command-line interface of the Cisco NX-OSS network operating system devices stems from deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

The vulnerability of the Identity Services Engine, a platform for managing network policies, exposes the Cisco Prime Infrastructure monitoring and management system to attacks from insiders. This allows attackers to carry out “man-in-the-middle” type attacks.

The vulnerability of the Identity Services Engine, a platform for managing network policies, is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker operating remotely to carry out a “man-in-the-middle” attack...

The vulnerability of Canon’s microprogrammed software for printers stems from deficiencies in authentication procedures, allowing attackers to gain access to the device’s web interface with administrator privileges.

The vulnerability of Canon printer’s microprogramming software is related to deficiencies in the authentication process when using standard device settings. Exploiting this vulnerability can allow a malicious actor to gain access to the device’s web interface with administrator privileges...

The vulnerabilities of Siemens EN100 switching module software, SIPROTEC relay protection devices, and the DIGSI 4 device management and configuration software package are related to authentication errors, allowing attackers to obtain access passwords.

The vulnerabilities of Siemens EN100 switching module software, SIPROTEC relay protection devices, and the DIGSI 4 device management and configuration software package are related to deficiencies in the authentication process. Exploiting these vulnerabilities can allow attackers to obtain access...

The vulnerability of the microprogrammed software of the Digizo ShAirDisk PTW-WMS1 mobile disk drive lies in its authentication procedures’ deficiencies, allowing an intruder to gain access to the device with root privileges.

The vulnerability of the microprogrammed wireless mobile disk storage device Digizo ShAirDisk PTW-WMS1 is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain access to the device with root privileges...

CVE-2017-12251

A vulnerability in the web console of the Cisco Cloud Services Platform CSP 2100 could allow an authenticated, remote attacker to interact maliciously with the services or virtual machines VMs operating remotely on an affected CSP device. The vulnerability is due to weaknesses in the generation o...

The vulnerability of the Cisco Identity Services Engine, a platform for managing network policies, allows a perpetrator to obtain confidential information.

The vulnerability of the Cisco Identity Services Engine’s gateway portal is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain confidential information through direct requests...

openSUSE Security Update : tomcat6 (openSUSE-SU-2012:1700-1)

fix bnc793394 - bypass of security constraints CVE-2012-3546 - apache-tomcat-CVE-2012-3546.patch http://svn.apache.org/viewvc?view=revision&revision=1381 035 - fix bnc793391 - bypass of CSRF prevention filter CVE-2012-4431 - apache-tomcat-CVE-2012-4431.patch...

Moderate: Red Hat Security Advisory: jbossweb security update

An update for JBoss Enterprise Web Platform 5.2.0 which fixes multiple security issues is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

tomcat: Multiple weaknesses in HTTP DIGEST authentication

DigestAuthenticator.java in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 uses Catalina as the hard-coded server secret aka private key, which makes it easier for remote attackers to bypass cryptographic...

[SECURITY] CVE-2011-1184 Apache Tomcat - Multiple weaknesses in HTTP DIGEST authentication

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2011-1184 Apache Tomcat - Multiple weaknesses in HTTP DIGEST authentication Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: - - Tomcat 7.0.0 to 7.0.11 - - Tomcat 6.0.0 to 6.0.32 - - Tomcat 5.5.0 to 5.5.33 - - Earlier,...