Unspecified vulnerability in parser-server

parser-server is an API server module for Node/Express. A security vulnerability exists in parser-server version 3.5.0 through versions prior to 4.3.0, which can be exploited by attackers to bypass security restrictions...

CVE-2020-15126

In parser-server from version 3.5.0 and before 4.3.0, an authenticated user using the viewer GraphQL query can by pass all read security on his User object and can also by pass all objects linked via relation or Pointer on his User object...

Security Bulletin: Novalink is impacted by Multiple vulnerabilities in WebSphere Application Server Liberty

Summary Novalink uses WebSphere Application Server Liberty. There is an information disclosure and a bypass security vulnerability in WebSphere Application Server Liberty. These vulnerabilities have been addressed. Vulnerability Details CVEID: CVE-2019-4305 DESCRIPTION: IBM WebSphere Application...

Security feature bypass

OMERO.server before 5.6.1 allows attackers to bypass the security filters and access hidden objects via a crafted query...

Unspecified Vulnerability in Google Chrome (CNVD-2020-43479)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A security vulnerability exists in versions prior to Google Chrome 84.0.4147.89, which can be exploited by attackers to bypass security restrictions...

Vulnerability of the Flash Player software platform, related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions and execute arbitrary code.

The vulnerability of the Adobe Flash Player software relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to bypass security restrictions and execute arbitrary code with system privileges...

BSA-2020-1043

Security Advisory ID : BSA-2020-1043 Component : Apache Tomcat Revision : 1.0: Final When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the VirtualDirContext using a specially...

Security Bulletin: Vulnerability in Go programming language affects IBM Spectrum Protect Server (CVE-2019-16276)

Summary The Go programming language could allow a remote attacker to bypass security restrictions which affects the IBM Spectrum Protect Server. Vulnerability Details CVEID: CVE-2019-16276 DESCRIPTION: Golang could allow a remote attacker to bypass security restrictions, caused by improper...

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (May 2020)

This host is missing an important security update according to Microsoft Edge Chromium-Based updates. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Security Bulletin: IBM Security Access Manager is vulnerable to a bypass security vulnerability (CVE-2020-4461)

Summary A bypass security vulnerability was fixed in IBM Security Access Manager 9.0.7.1 Vulnerability Details CVEID: CVE-2020-4461 DESCRIPTION: IBM Security Access Manager could allow an authenticated user to bypass security by allowing idtoken claims manipulation without verification. CVSS Base...

KLA11787 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilitie...

Adobe Acrobat DC Security Update (APSB20-24) - Mac OS X

Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Adobe Acrobat 2017 Security Update (APSB20-24) - Windows

Adobe Acrobat 2017 is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

USN-4353-2: Firefox regression

USN-4353-1 fixed vulnerabilities in Firefox. The update caused a regression that impaired the functionality of some addons. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked in ...

F5 BIG-IP Encryption Problem Vulnerability (CNVD-2020-36268)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A cryptographic issue vulnerability exists in F5 BIG-IP, which can be exploited by remote attackers to bypass security...

Security Bulletin: Multiple vulnerabilities in Apache HTTP Server affect Rational Build Forge (CVE-2018-1283, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2017-15710, CVE-2017-15715, CVE-2018-1301)

Summary There are multiple vulnerabilities in Apache HTTP Server affecting IBM Rational Build Forge. Vulnerability Details CVEID: CVE-2018-1283 DESCRIPTION: Apache HTTPD could allow a remote attacker to bypass security restrictions, caused by an error when modsession is configured with SessionEnv...

chromium-browser: Insufficient policy enforcement in navigations

Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page...

CVE-2020-6439

Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page...

KLA11801 Security vulnerability in Zoom

Security vulnerability was found in Zoom. Malicious users can exploit this vulnerability to bypass security restrictions, gain privileges. Original advisories Zoom Security CVE-2020-11443 CVE-2020-11443 Related products Zoom-MSI CVE list CVE-2020-11443 critical Solution Update to the latest versi...

The vulnerability of the Samba Active Directory domain controller in the Samba networking software package allows a perpetrator to circumvent existing security restrictions through brute-force attacks.

The vulnerability of the Samba Domain Controller in the Active Directory software for network interactions involves flaws in the password-changing mechanism. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions through brute-force attacks...