Facebook Proxygen Security Bypass Vulnerability

Facebook Proxygen is a set of open source C++ HTTP class libraries from the U.S. company Facebook . A security vulnerability exists in the SPDY/2 codec in versions of Facebook Proxygen prior to 2015-11-09. A remote attacker can exploit the vulnerability with the help of a specially crafted host...

The vulnerability of the Mac OS X operating system, which allows a hacker to circumvent existing access restrictions

The vulnerability of the MCX Client component of the Mac OS X operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions using residual data from Active Directory certificates...

The vulnerability of the iOS operating system and the Safari browser allows attackers to obtain confidential information or circumvent existing access control policies.

The vulnerability of the WebKit JavaScript Bindings component in the iOS operating system and Safari browser exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions or obtain confidential information throug...

IBM WebSphere Portal Access Control Bypass Vulnerability (swg22000152)

IBM Websphere Portal is prone to access control bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Rancher Server Security Bypass Vulnerability

Rancher Server is an open source platform for Docker that integrates native Docker management features such as Docker Machine and Docker Swarm. A security vulnerability exists in Rancher Server version 1.2.0+. An attacker can exploit the vulnerability to disable access control with the help of AP...

Cisco Nexus 7000 Series Switches Security Bypass Vulnerability

Cisco Nexus 7000 Series Switches are 7000 series switches from Cisco USA. A security bypass vulnerability exists in the access control filtering mechanism in Cisco Nexus 7000 Series Switches. An attacker could use this vulnerability to bypass some security restrictions to perform unauthorized...

The vulnerability of the McAfee VirusScan Enterprise anti-virus software allows a hacker to bypass access control rules.

The vulnerability of the McAfee VirusScan Enterprise antivirus software is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to bypass access control rules using a specially crafted HTTP request...

Design/Logic Flaw

An Access-Control Filtering Mechanisms Bypass vulnerability in certain access-control filtering mechanisms on Cisco Nexus 7000 Series Switches could allow an unauthenticated, remote attacker to bypass defined traffic configured within an access control list ACL on the affected system. More...

PT-2017-1543 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance versions 9.62 through 9.62.7 Cisco Adaptive Security Appliance versions prior to 9.71.1 Cisco Adaptive Security Appliance versions prior to 96.20.109 Cisco Adaptive Security Appliance versions prior to...

PT-2017-1478

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to insufficient access control in Microsoft Edge, allowing a remote attacker to bypass existing access restriction policies for HTML elements in other browser...

PT-2017-1593

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to inadequate access control in Microsoft Edge, allowing a remote attacker to bypass existing access restriction policies in other browser windows. Recommendations...

PT-2017-1467

Name of the Vulnerable Software and Affected Versions McAfee VirusScan Enterprise versions 2.0.3 and earlier Description The issue allows remote authenticated users to obtain product information via a crafted HTTP request parameter due to a lack of protection against SQL injection attacks. This c...

PT-2017-1479

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to inadequate access control in Microsoft Edge, allowing a remote attacker to bypass existing access restriction policies for HTML elements in other browser window...

Debian DLA-835-1 : cakephp security update

Dawid Golunski from legalhackers.com discovered that cakephp, an application development framework for PHP, contains a vulnerability that allows attackers to spoof the source IP address. It would allow them to bypass access control lists, or the injection of malicious data which, if treated as...

The vulnerability of the Android operating system, which allows a malicious actor to compromise the confidentiality of information

The vulnerability of the tremolo/dpen.s function in the Android operating system’s media server is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of information...

Vulnerabilities of Microsoft Edge and Internet Explorer browsers, which allow attackers to circumvent existing access restrictions policies

The vulnerabilities of Microsoft Edge and Internet Explorer are caused by an operation that goes beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow a malicious actor to bypass existing access restrictions by using a specially crafted website...

Security Bypass Vulnerabilities in Multiple Cisco Products

Cisco TelePresence Video Communication Server VCS and Cisco Expressway are both telepresence video communication servers from Cisco that integrate with Unified Communications and voice communication environments to provide the best possible experience for end users using a variety of communicatio...

PT-2016-3046

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 55.0.2883.75 for Mac, Windows and Linux Google Chrome version prior to 55.0.2883.84 for Android Description The issue is related to the PDF plugin in Google Chrome, which incorrectly followed redirects. This...

The vulnerability of the Perl interpreter, allowing attackers to inject arbitrary code

The vulnerability of the lc, lcfirst, uc, and ucfirst functions in the Perl interpreter is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to bypass security mechanisms and inject arbitrary code due to errors related to the improper use of the taint...

PT-2016-5629

Name of the Vulnerable Software and Affected Versions SAP Netweaver version 7.4 Description The issue allows remote authenticated users to bypass an intended Unified Connectivity UCON access control list. This can lead to the execution of arbitrary Remote Function Modules RFM by leveraging a...