3055 matches found
The vulnerability of the Mac OS X operating system, which allows a hacker to circumvent existing access restrictions
The vulnerability of the MCX Client component of the Mac OS X operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions using residual data from Active Directory certificates...
Facebook Proxygen Security Bypass Vulnerability
Facebook Proxygen is a set of open source C++ HTTP class libraries from the U.S. company Facebook . A security vulnerability exists in the SPDY/2 codec in versions of Facebook Proxygen prior to 2015-11-09. A remote attacker can exploit the vulnerability with the help of a specially crafted host...
The vulnerability of the iOS operating system and the Safari browser allows attackers to obtain confidential information or circumvent existing access control policies.
The vulnerability of the WebKit JavaScript Bindings component in the iOS operating system and Safari browser exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions or obtain confidential information throug...
IBM WebSphere Portal Access Control Bypass Vulnerability (swg22000152)
IBM Websphere Portal is prone to access control bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Rancher Server Security Bypass Vulnerability
Rancher Server is an open source platform for Docker that integrates native Docker management features such as Docker Machine and Docker Swarm. A security vulnerability exists in Rancher Server version 1.2.0+. An attacker can exploit the vulnerability to disable access control with the help of AP...
Cisco Nexus 7000 Series Switches Security Bypass Vulnerability
Cisco Nexus 7000 Series Switches are 7000 series switches from Cisco USA. A security bypass vulnerability exists in the access control filtering mechanism in Cisco Nexus 7000 Series Switches. An attacker could use this vulnerability to bypass some security restrictions to perform unauthorized...
The vulnerability of the McAfee VirusScan Enterprise anti-virus software allows a hacker to bypass access control rules.
The vulnerability of the McAfee VirusScan Enterprise antivirus software is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to bypass access control rules using a specially crafted HTTP request...
Design/Logic Flaw
An Access-Control Filtering Mechanisms Bypass vulnerability in certain access-control filtering mechanisms on Cisco Nexus 7000 Series Switches could allow an unauthenticated, remote attacker to bypass defined traffic configured within an access control list ACL on the affected system. More...
PT-2017-1543 · Cisco · Cisco Asa
Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance versions 9.62 through 9.62.7 Cisco Adaptive Security Appliance versions prior to 9.71.1 Cisco Adaptive Security Appliance versions prior to 96.20.109 Cisco Adaptive Security Appliance versions prior to...
Debian DLA-835-1 : cakephp security update
Dawid Golunski from legalhackers.com discovered that cakephp, an application development framework for PHP, contains a vulnerability that allows attackers to spoof the source IP address. It would allow them to bypass access control lists, or the injection of malicious data which, if treated as...
The vulnerability of the Android operating system, which allows a malicious actor to compromise the confidentiality of information
The vulnerability of the tremolo/dpen.s function in the Android operating system’s media server is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of information...
Vulnerabilities of Microsoft Edge and Internet Explorer browsers, which allow attackers to circumvent existing access restrictions policies
The vulnerabilities of Microsoft Edge and Internet Explorer are caused by an operation that goes beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow a malicious actor to bypass existing access restrictions by using a specially crafted website...
Security Bypass Vulnerabilities in Multiple Cisco Products
Cisco TelePresence Video Communication Server VCS and Cisco Expressway are both telepresence video communication servers from Cisco that integrate with Unified Communications and voice communication environments to provide the best possible experience for end users using a variety of communicatio...
The vulnerability of the Perl interpreter, allowing attackers to inject arbitrary code
The vulnerability of the lc, lcfirst, uc, and ucfirst functions in the Perl interpreter is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to bypass security mechanisms and inject arbitrary code due to errors related to the improper use of the taint...
flash-plugin: multiple code execution issues fixed in APSB16-29
Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-4271 and...
The vulnerability of the Android operating system, which allows a hacker to circumvent existing access restrictions
The vulnerability of the Shell component in the Android operating system lies in the improper handling of the MANAGEUSERS and CREATEUSERS access control functions. Exploiting this vulnerability allows a malicious actor to circumvent existing access restrictions through a specially created...
The vulnerability of Firefox and Firefox ESR browsers allows a hacker to bypass existing access restrictions policies or read arbitrary files.
The vulnerability of Firefox and Firefox ESR browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions policies or read arbitrary files by placing a specially crafted HTML document and links to it ...
The vulnerability of the Firefox browser, which allows a remote attacker to execute arbitrary JavaScript code
The vulnerability of Firefox lies in the improper restriction of resource: URL. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code with privileges of a Chrome browser, thereby circumventing access control policies. This can be achieved, for example, by usi...
Vulnerability of the 1C-Bitrix web project management system: Website management that allows malicious actors to bypass access restrictions
Vulnerability of the 1C-Bitrix web project management system: Website management related to errors in the integrity control mechanism of the control scripts. Exploiting this vulnerability allows a malicious actor to manipulate the integrity check mechanism and modify files within the system witho...
