CVE-2020-11498

CVE-2020-11498 affects Slack Nebula up to version 1.1.0. A relative-path vulnerability in the tunnel drivers tun_darwin.go and tun_windows.go allows a low-privileged attacker to execute code in the context of the root user, with potential user-context execution as well. The issue enables path tra...

Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-40830)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have a security vulnerability that can be exploited by attackers to bypass security restrictions...

The vulnerability of the Microsoft Outlook client and the Microsoft Office and Office 365 ProPlus software packages relates to a security feature that allows an attacker to bypass existing security restrictions. This feature enables the attacker to redirect users to malicious URIs and execute malicious code in conjunction with other vulnerabilities.

The vulnerability of the Microsoft Outlook client and the Microsoft Office and Office 365 ProPlus software packages is related to the bypassing of security features. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions, redirect users to malicious...

The vulnerability of the Security Audit Log of the SAP HANA database management system allows a perpetrator to circumvent existing security restrictions.

The vulnerability of the Security Audit Log of the SAP HANA database management system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions remotely...

Security Bulletin: IBM MQ Console and REST API are vulnerable to a privilege escalation attack. (CVE-2019-4304)

Summary IBM WebSphere Application Server Liberty profile, which is used to host the IBM MQ Console and REST API, could allow an attacker to bypass security and gain access to the MQ Console and REST API. Vulnerability Details CVEID: CVE-2019-4304 DESCRIPTION: IBM WebSphere Application Server -...

ManageEngine EventLog Analyzer 10.0 - Information Disclosure

ManageEngine EventLog Analyzer 10.0 - Information Disclosure Exploit Title: ManageEngine EventLog Analyzer 10.0 - Information Disclosure Date: 2020-02-23 Author:Scott Goodwin Vendor: https://www.manageengine.com/ Software Link: https://www.manageengine.com/products/eventlog/ CVE: CVE-2019-19774...

CVE-2016-4606

Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensitive information, cause denial-of-service conditions, bypass security restrictions, and perform unauthorized actions. This may aid in other attacks...

SQL Injection Bypass Vulnerability in Web Security Dog (Apache Edition) (CNVD-2020-18767)

Website Security Dog Apache Edition is a server tool that integrates website content security protection, website resource protection and website traffic protection features. Web Security Dog Apache Edition suffers from a SQL injection bypass vulnerability. Attackers use the vulnerability to bypa...

Security Bulletin: Multiple Vulnerabilities in WebSphere Application Server Liberty in IBM Cloud Private VM Quickstarter

Summary There are multiple vulnerabiltities in WebSphere Application Server Liberty that is shipped with IBM WebSphere Application for IBM Cloud Private VM Quickstarter. There is an information disclosure and a bypass security vulnerability in WebSphere Application Server Liberty. There is a...

CVE-2013-6927

Internet TRiLOGI Server unknown versions could allow a local user to bypass security and create a local user account...

KLA11669 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, perform cross-site scripting attack. Below is a complete list of vulnerabilities: 1. A memory corruption...

Security Bulletin: Vulnerabilities in Perl component shipped with IBM Rational ClearQuest (CVE-2015-8608, CVE-2015-8853, CVE-2016-2381)

Summary IBM Rational ClearQuest is affected by vulnerabilities in the Perl interpreter. Vulnerability Details CVEID: CVE-2015-8608 DESCRIPTION: Perl could allow a remote attacker to execute arbitrary code on the system, caused by an out-of-bounds read in the VDir::MapPathA and VDir::MapPathW...

CVE-2016-2031

Multiple vulnerabilities exists in Aruba Instate before 4.1.3.0 and 4.2.3.1 due to insufficient validation of user-supplied input and insufficient checking of parameters, which could allow a malicious user to bypass security restrictions, obtain sensitive information, perform unauthorized actions...

Vulnerability of Windows operating systems related to bypassing security functions, allowing attackers to escalate their privileges

Vulnerabilities of Windows operating systems are related to bypassing security functions. Exploiting these vulnerabilities can allow attackers to gain increased privileges...

CVE-2019-11998

HPE Superdome Flex Server is vulnerable to multiple remote vulnerabilities via improper input validation of administrator commands. This vulnerability could allow an Administrator to bypass security restrictions and access multiple remote vulnerabilities including information disclosure, or denia...

KLA11647 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Use-after-free vulnerability in speech recognizer can be...

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, which stems from insufficient data encryption, allows attackers to bypass existing security measures in the context of current users.

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud are related to insufficient data encryption. Exploiting these vulnerabilities can allow attackers to bypass existing security measures when acting remotely...

Unspecified Vulnerability in Ivanti Workspace Control

Ivanti Workspace Control RES One Workspace is a set of workspace control software from Ivanti, USA. The software includes features such as user management, application management and report management. A security vulnerability exists in Ivanti Workspace Control versions prior to 10.3.180.0. A loc...

CVE-2019-19774

An issue was discovered in Zoho ManageEngine EventLog Analyzer 10.0 SP1 before Build 12110. By running "select hostdetails from hostdetails" at the /event/runquery.do endpoint, it is possible to bypass the security restrictions that prevent even administrative users from viewing credential data...

The vulnerability of Microsoft Edge browser, related to insufficient validation of input data, allows attackers to bypass existing security restrictions.

The vulnerability of Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions using a specially crafted web page...