4338 matches found
CVE-2014-0317
CVE-2014-0317 is the SAMR Security Feature Bypass vulnerability in Microsoft Windows, affecting Windows XP SP2-SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows Server 2012 (Gold/R2). The issue stems from the Security Account Manager Remote (SAMR) protoc...
MS14-016: Vulnerability in Security Account Manager Remote (SAMR) Protocol Could Allow Security Feature Bypass (2934418)
A security feature bypass vulnerability exists in Windows due to the Security Account Manager Remote SAMR protocol incorrectly validating the user lockout state. Remote, authenticated attackers can exploit this issue to conduct brute force attacks against user passwords. Note that the host must...
MS14-016: Vulnerability in Security Account Manager Remote (SAMR) protocol could allow security feature bypass: March 11, 2014
Resolves a vulnerability in Windows that could allow a security feature bypass if an attacker makes multiple attempts to match passwords to a username.IntroductionThis update resolves a vulnerability in Windows that could allow a security feature bypass if an attacker makes multiple attempts to...
MS14-014: Vulnerability in Silverlight Could Allow Security Feature Bypass (2932677) (Mac OS X)
The version of Microsoft Silverlight installed on the remote host is reportedly affected by a security feature bypass vulnerability due to improper implementation of Data Execution Protection DEP and Address Space Layout Randomization ASLR. If an attacker could trick a user on the affected system...
MS14-014: Vulnerability in Silverlight Could Allow Security Feature Bypass (2932677)
The version of Microsoft Silverlight installed on the remote host is reportedly affected by a security feature bypass vulnerability due to improper implementation of Data Execution Protection DEP and Address Space Layout Randomization ASLR. If an attacker could trick a user on the affected system...
Security feature bypass
Unspecified vulnerability in the PeopleSoft Enterprise SCM Services Procurement component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Security...
Security feature bypass
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 allows remote attackers to affect integrity via unknown vectors related to Security...
Security feature bypass
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not comment...
Security feature bypass
Unspecified vulnerability in the Webservice Axis Gateway in IBM Rational Focal Point 6.4 before devfix1, 6.4.1.3 before devfix1, 6.5.1 before devfix1, 6.5.2 before devfix4, 6.5.2.3 before devfix9, 6.6 before devfix5, 6.6.0.1 before devfix2, and 6.6.1 allows remote attackers to bypass intended...
Microsoft Releases December 2013 Security Bulletin
Microsoft has released updates to address vulnerabilities in Microsoft Windows, Microsoft Office, Microsoft Lync, Internet Explorer, Microsoft Exchange, Microsoft SharePoint, and Microsoft Developer Tools as part of the Microsoft Security Bulletin Summary for December 2013. These vulnerabilities...
MS13-106: Farewell to another ASLR bypass
Today we released MS13-106 which resolves a security feature bypass that can allow attackers to circumvent Address Space Layout Randomization ASLR using a specific DLL library HXDS.DLL provided as part of Microsoft Office 2007 and 2010. The existence of an ASLR bypass does not directly enable the...
Security feature bypass
Unspecified vulnerability in Virtual User Generator in HP LoadRunner before 11.52 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1851...
Security feature bypass
The remember feature in the DHCP server in Cisco IOS allows remote attackers to cause a denial of service device reload by acquiring a lease and then sending a DHCPRELEASE message, aka Bug ID CSCuh46822...
Security feature bypass
lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability than CVE-2013-2138...
Security feature bypass
Unspecified vulnerability in WebAdmin in Sophos UTM aka Astaro Security Gateway before 9.105 has unknown impact and attack vectors...
Security feature bypass
Unspecified vulnerability in the Java Runtime Environment JRE in IBM Java 6.0.1 before 6.0.1 SR6 and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3006...
Microsoft .NET Framework 身份验证绕过漏洞(CVE-2013-1337)(MS13-040)
BUGTRAQ ID: 59790 CVECAN ID: CVE-2013-1337 .NET就是微软的用来实现XML，Web Services，SOA（面向服务的体系结构service-oriented architecture）和敏捷性的技术。.NET Framework是微软开发的软件框架，主要运行在Microsoft Windows上。 当设置自定义 WCF 终结点身份验证时，Microsoft .NET Framework...
Security feature bypass
The msropen function in arch/x86/kernel/msr.c in the Linux kernel before 3.7.6 allows local users to bypass intended capability restrictions by executing a crafted application as root, as demonstrated by msr32.c...
Security feature bypass
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka "Issue 52," a different vulnerability than...