Lucene search
+L

2639 matches found

CNVD
CNVD
added 2015/08/29 12:00 a.m.9 views

Cisco Identity Services Engine Access Control Bypass Vulnerability

Cisco Identity Services Engine A centralized policy engine for Cisco TrustSec solutions. A security vulnerability exists in the Cisco Identity Services Engine that allows a remote user to submit a special HTTP request to access arbitrarily customized HTML pages on the target Guest portal system...

5CVSS6.7AI score0.01591EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2015/08/07 12:00 a.m.10 views

The vulnerability of the Moodle learning management system allows a hacker to bypass access restrictions to the system.

The vulnerability of the Moodle learning management system’s sub-component login/confirm.php is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor to bypass system access restrictions by obtaining access using an account...

3.5CVSS7AI score0.01535EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/07/31 12:00 a.m.11 views

The vulnerability of the Adobe Reader DC PDF viewer program, which allows a hacker to circumvent existing access restrictions

The vulnerability of the Adobe Reader DC PDF viewer program is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to circumvent existing access restrictions remotely...

7.5CVSS5.4AI score0.05065EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2015/07/21 10:15 a.m.11 views

ntp: drop packets with source address ::1

It was found that because NTP's access control was based on a source IP address, an attacker could bypass source IP restrictions and send malicious control and configuration packets by spoofing ::1 addresses...

6.8CVSS7.1AI score0.04532EPSS
SaveExploits0References5
OSV
OSV
added 2015/07/09 4:59 p.m.5 views

UBUNTU-CVE-2015-3114

Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR before 18.0.0.180, Adobe AIR SDK before 18.0.0.180, and Adobe AIR SDK & Compiler before 18.0.0.180 allow attackers to bypass intended access restrictions an...

5CVSS5.8AI score0.04065EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2015/06/05 12:00 a.m.9 views

The vulnerability of the Acrobat text viewing program allows a violator to circumvent access restrictions.

The vulnerability of the Acrobat text viewing program arises when using the JavaScript API, and it could allow a malicious actor to circumvent current access control regulations remotely...

10CVSS5.4AI score0.2547EPSS
SaveExploits4References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/06/05 12:00 a.m.10 views

The vulnerability of the Acrobat text viewing program allows a violator to circumvent access restrictions.

The vulnerability of the Acrobat text viewing program arises when using the JavaScript API, and it could allow a malicious actor to circumvent current access control regulations remotely...

10CVSS5.4AI score0.09917EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/06/05 12:00 a.m.11 views

The vulnerability of the Adobe Reader text viewer program, which allows a violator to circumvent access restrictions

The vulnerability of the Adobe Reader text viewer arises when using the JavaScript API, and it could allow a remote attacker to circumvent current access control rules...

10CVSS5.5AI score0.09917EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/06/05 12:00 a.m.11 views

The vulnerability of the Adobe Reader text viewer program, which allows a violator to circumvent access restrictions

The vulnerability of the Adobe Reader text viewer arises when using the JavaScript API, and it could allow a remote attacker to circumvent current access control rules...

10CVSS5.5AI score0.09917EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/06/05 12:00 a.m.10 views

The vulnerability of the Adobe Reader text viewer program, which allows a violator to circumvent access restrictions

The vulnerability of the Adobe Reader text viewer arises when using the JavaScript API, and it could allow a remote attacker to circumvent current access control rules...

10CVSS5.5AI score0.09917EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/06/05 12:00 a.m.9 views

The vulnerability of the Acrobat text viewing program allows a violator to circumvent access restrictions.

The vulnerability of the Acrobat text viewing program arises when using the JavaScript API, and it could allow a malicious actor to circumvent current access control regulations remotely...

10CVSS5.4AI score0.09917EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/06/05 12:00 a.m.12 views

The vulnerability of the Acrobat text viewing program allows a violator to circumvent access restrictions.

The vulnerability of the Acrobat text viewing program arises when using the JavaScript API, and it could allow a malicious actor to circumvent current access control regulations remotely...

10CVSS5.4AI score0.09917EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/06/05 12:00 a.m.11 views

The vulnerability of the Adobe Reader text viewer program, which allows a violator to circumvent access restrictions

The vulnerability of the Adobe Reader text viewer arises when using the JavaScript API, and it could allow a remote attacker to circumvent current access control rules...

10CVSS5.5AI score0.09917EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2015/06/01 7:59 p.m.10 views

UBUNTU-CVE-2015-2271

tag/user.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 does not consider the moodle/tag:flag capability before proceeding with a flaginappropriate action, which allows remote authenticated users to bypass intended access restrictions via the "Flag as...

4CVSS5.8AI score0.01712EPSS
SaveExploits0References4
CNVD
CNVD
added 2015/05/14 12:00 a.m.4 views

Adobe Flash Player Security Control Bypass Information Disclosure Vulnerability

Adobe Flash Player is a Flash file processing program.Adobe AIR is a cross-operating system runtime library produced by Adobe, through which developers can take advantage of existing Web development technology. A control bypass vulnerability exists in Adobe Flash Player/AIR's handling of swf...

5CVSS6.8AI score0.0521EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2015/04/28 6:17 p.m.9 views

389-ds-base: access control bypass with modrdn

A flaw was found in the way Red Hat Directory Server performed authorization of modrdn operations. An unauthenticated attacker able to issue an ldapmodrdn call to the directory server could use this flaw to perform unauthorized modifications of entries in the directory server...

7.5CVSS5.7AI score0.02073EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:00 a.m.11 views

The vulnerability of the Cisco IOS operating system, which allows a remote attacker to bypass access control rules or cause service failures.

The vulnerability of the ANI interface allows a remote attacker to bypass access control rules or cause service failures by using specially crafted AN messages...

9CVSS5.5AI score0.0211EPSS
SaveExploits0References4Affected Software1
Oracle linux
Oracle linux
added 2015/04/28 12:00 a.m.40 views

389-ds-base security update

1.3.3.1-16 - release 1.3.3.1-16 - Resolves: bug 1212894 - CVE-2015-1854 389ds-base: access control bypass with modrdn...

5CVSS2.5AI score0.02073EPSS
SaveExploits0
CNVD
CNVD
added 2015/04/01 12:00 a.m.10 views

Fiyo CMS Access Control Bypass Vulnerability

Fiyo CMS is small business phone service and mobile collaboration tool. Fiyo CMS suffers from access control bypass vulnerabilities. An attacker could exploit these vulnerabilities to perform unauthorized operations...

9.8CVSS7.2AI score0.08594EPSS
SaveExploits5References1
Tenable Nessus
Tenable Nessus
added 2015/02/09 12:00 a.m.44 views

openSUSE Security Update : libvirt (openSUSE-2015-112)

This update fixes the following security issues : - CVE-2015-0236: libvirt: access control bypass bsc914693 - bnc905086: libvirt cannot properly determine cpu flags with qemu-kvm - Fixed allowing devices for containers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

3.5CVSS6.1AI score0.01802EPSS
SaveExploits0References3
Rows per page
Query Builder