Multiple Apache Struts application server security vulnerabilities

Protection bypass, crossite scripting, DoS...

Enova cryptograpic chip protection bypass

Encryption key is stored in EEPROM...

Multiple Xerox WorkCentre vulnerabilities

Unauthorized access, DoS, crossite scripting, protection bypass...

IRM 014: Sygate Protection Agent 5.0 vulnerability - A low privileged user can disable the security agent

---------------------------------------------------------------------- IRM Security Advisory No. 014 Sygate Protection Agent 5.0 vulnerability - A low privileged user can disable the security agent Vulnerablity Type / Importance: Security Protection Bypass / High Problem discovered: November 23rd...

IBM Tivoli Directory Server protection bypass

No description provided...

CVE-2005-2742

SecurityAgent in Apple Mac OS X 10.4.2 can cause the "Switch User..." button to appear when fast user switching is disabled, potentially allowing attackers with physical access to bypass the wake password requirement. This CVE entry is supported by multiple sources, including NVD and Red Hat, whi...

[SECURITY] [DSA 862-1] New Ruby 1.6 packages fix safety bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 862-1 [email protected] http://www.debian.org/security/ Martin Schulze October 11th, 2005 http://www.debian.org/security/faq -...

Security Bypass Vulnerability with Ruby

The Ruby language has a security mechanism security model that can restrict operations on untrusted objects. This security model is based on mechanisms called "object taint" and "safe level." A vulnerability has been confirmed that allows arbitrary script execution by bypassing the "safe level"...

mod_auth_shadow protection bypass

Access restrictions for different authorization mechanisms may be bypassed if modauthshadow is used...

Metasploit Framework Defanged mode protection bypass

It's possible to overwrite Defanged environment variable with StateToOptions function...

KF Webserver protection bypass

By requesting resource like http://victimaddress/All20Disk20Drives/C:/ it's possible to access protected directory...

security flaw

Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts even when Javascript has been disabled, which makes it easier for remote attackers to bypass such protection...

Shoreline Firewall (ShoreWall) protection bypass

If MAC addres authentication is used, all security rules and policies are bypassed...

PrevX Pro Intrusion Prevension System multiple vulnerabilities

Protection bypass be using memory mapping and internal syscalls, DoS...

IBM DB2 universal database protection bypass

User with only SELECT permissions can can insert, update or delete records...

Multiple Sun Solaris perl modules problems

Safe.pm protection bypass, CGI.pm crossite scripting...

Deep Freeze protection bypass

With debugging application it's possible to bypass system state protection...

Sun Java / BlackDown Java sandbox protection bypass

Applet can bypass sandbox limitation to exefute privileged functions...

Sun Java Webstart virtual machine protection bypass

It's possible to bypass sandbox environment...

security flaw

The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock page count when one process unlocks pages that belong to another process, which allows local users to mlock more memory than specified by the rlimit...