CVE-2005-4757: Undefined Security Weakness

BEA WebLogic Server and WebLogic Express 8.1 SP3 and earlier, and 7.0 SP5 and earlier, do not properly "constrain" a "/" slash servlet root URL pattern, which might allow remote attackers to bypass intended servlet protections...

Enova cryptograpic chip protection bypass

Encryption key is stored in EEPROM...

CVE-2006-0982: Undefined Security Weakness

The on-access scanner for McAfee Virex 7.7 for Macintosh, in some circumstances, might not activate when malicious content is accessed from the web browser, and might not prevent the content from being saved, which allows remote attackers to bypass virus protection, as demonstrated using the EICA...

Multiple Xerox WorkCentre vulnerabilities

Unauthorized access, DoS, crossite scripting, protection bypass...

IRM 014: Sygate Protection Agent 5.0 vulnerability - A low privileged user can disable the security agent

---------------------------------------------------------------------- IRM Security Advisory No. 014 Sygate Protection Agent 5.0 vulnerability - A low privileged user can disable the security agent Vulnerablity Type / Importance: Security Protection Bypass / High Problem discovered: November 23rd...

CVE-2004-2619: Undefined Security Weakness

ripMIME 1.3.2.3 and earlier allows remote attackers to bypass e-mail protection via a base64 MIME encoded attachment containing invalid characters that are not properly extracted...

CVE-2005-3647: Undefined Security Weakness

Folder Guard allows local users to bypass protections by running from or installing to the temporary files directory...

IBM Tivoli Directory Server protection bypass

No description provided...

CVE-2005-3499: Undefined Security Weakness

Frisk F-Prot Antivirus allows remote attackers to bypass protection via a ZIP file with a version header greater than 15, which prevents F-Prot from decompressing and analyzing the file...

CVE-2005-3415: Undefined Security Weakness

phpBB 2.0.17 and earlier allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GET/POST/COOKIE GPC variable and a GLOBALS variable with the same name, which causes phpBB to unset the GLOBALS variable but not the GPC variable...

CVE-2005-2742

SecurityAgent in Apple Mac OS X 10.4.2 can cause the "Switch User..." button to appear when fast user switching is disabled, potentially allowing attackers with physical access to bypass the wake password requirement. This CVE entry is supported by multiple sources, including NVD and Red Hat, whi...

[SECURITY] [DSA 862-1] New Ruby 1.6 packages fix safety bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 862-1 [email protected] http://www.debian.org/security/ Martin Schulze October 11th, 2005 http://www.debian.org/security/faq -...

Security Bypass Vulnerability with Ruby

The Ruby language has a security mechanism security model that can restrict operations on untrusted objects. This security model is based on mechanisms called "object taint" and "safe level." A vulnerability has been confirmed that allows arbitrary script execution by bypassing the "safe level"...

mod_auth_shadow protection bypass

Access restrictions for different authorization mechanisms may be bypassed if modauthshadow is used...

Metasploit Framework Defanged mode protection bypass

It's possible to overwrite Defanged environment variable with StateToOptions function...

KF Webserver protection bypass

By requesting resource like http://victimaddress/All20Disk20Drives/C:/ it's possible to access protected directory...

security flaw

Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection...

Shoreline Firewall (ShoreWall) protection bypass

If MAC addres authentication is used, all security rules and policies are bypassed...

CVE-2005-2145: Undefined Security Weakness

The kernel driver in Prevx Pro 2005 1.0 does not verify the source of certain messages, which allows local users to bypass protection by sending certain messages to the driver, as demonstrated by sending an "allow" message to bypass a warning message...

CVE-2005-2144: Undefined Security Weakness

Prevx Pro 2005 1.0 allows local users to bypass file protection and modify files by using MapViewOfFile to perform memory mapping on the file...