Multiple HP System Management Homepage security vulnerabilities

Protection bypass, crossite scripting...

pam_ldap protection bypass

It's possible to login into a suspended system account...

PHP safe_mode glob() protection bypass

glob function allows to check existance of file/directory and build directory listing...

Password Safe protection bypass

Password database locking doesn't work under some specific conditions...

FlexWATCH 3.0 - 'AIndex.asp' Authentication Bypass

source: https://www.securityfocus.com/bid/18948/info FlexWatch is prone to an authorization-bypass vulnerability. This issue is due to a failure in the application to properly verify user-supplied input. An attacker can exploit this issue to bypass the authorization mechanism. This allows the...

Windows Software Restriction Policy Protection Bypass

Windows Software Restriction Policy Protection Bypass Class: Protection bypass Vector: Local Tested on: Windows XP SP2, Windows Server 2003 SP1 Risk: Low Remark: I don't know, what is it - bug or feature, but I can't find any documentation on this issue. Description: Software Restriction Policies...

Secure Elements Class 5 AVR multiple security vulnerabilities

Sensitive information disclosure and spoofing, protection bypass, DoS, unauthorized system access...

Multiple Adobe Document Server for Reader Extensions security vulnerabilities

Protection bypass, crossite scripting, session hijacking...

Multiple Apache Struts application server security vulnerabilities

Protection bypass, crossite scripting, DoS...

Enova cryptograpic chip protection bypass

Encryption key is stored in EEPROM...

Multiple Xerox WorkCentre vulnerabilities

Unauthorized access, DoS, crossite scripting, protection bypass...

IRM 014: Sygate Protection Agent 5.0 vulnerability - A low privileged user can disable the security agent

---------------------------------------------------------------------- IRM Security Advisory No. 014 Sygate Protection Agent 5.0 vulnerability - A low privileged user can disable the security agent Vulnerablity Type / Importance: Security Protection Bypass / High Problem discovered: November 23rd...

IBM Tivoli Directory Server protection bypass

No description provided...

CVE-2005-2742

SecurityAgent in Apple Mac OS X 10.4.2 can cause the "Switch User..." button to appear when fast user switching is disabled, potentially allowing attackers with physical access to bypass the wake password requirement. This CVE entry is supported by multiple sources, including NVD and Red Hat, whi...

[SECURITY] [DSA 862-1] New Ruby 1.6 packages fix safety bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 862-1 [email protected] http://www.debian.org/security/ Martin Schulze October 11th, 2005 http://www.debian.org/security/faq -...

Security Bypass Vulnerability with Ruby

The Ruby language has a security mechanism security model that can restrict operations on untrusted objects. This security model is based on mechanisms called "object taint" and "safe level." A vulnerability has been confirmed that allows arbitrary script execution by bypassing the "safe level"...

mod_auth_shadow protection bypass

Access restrictions for different authorization mechanisms may be bypassed if modauthshadow is used...

Metasploit Framework Defanged mode protection bypass

It's possible to overwrite Defanged environment variable with StateToOptions function...

KF Webserver protection bypass

By requesting resource like http://victimaddress/All20Disk20Drives/C:/ it's possible to access protected directory...

security flaw

Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection...