CVE-2011-5062: Undefined Security Weakness

The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=auth value, a different vulnerability th...

Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities

Memory corruptions, protection bypass, integer overflows, DoS conditions...

libcap protection bypass

chdir is not called after chroot...

EMC RSA Adaptive Authentication (On-Premise) security vulnerabilities

Protection bypass is possible...

Apple iPhone multiple security vulnerabilities

URL spoofing, memory corruption, protection bypass...

SonicWall NSA 4500 protection bypass

ARP spoofing protection doesn't work if used in conjunction...

CVE-2011-2201: Undefined Security Weakness

The Data::FormValidator module 4.66 and earlier for Perl, when untaintallconstraints is enabled, does not properly preserve the taint attribute of data, which might allow remote attackers to bypass the taint protection mechanism via form input...

perl multiple security vulnerabilities

Data injection and protection bypass in lc, lcfirst, uc, ucfirst functions and CGI module...

Apache Tomcat protection bypass

@ServletSecurity parameters are ignored...

Kaspersky Antivirus protection bypass

User can bypass application protection by activating inactive interface elements with EnableWindow...

IcedTea for Java OpenJDK protection bypass

Protection bypass in JNLP SecurityManage, JAR files digital signature spoofing...

Cisco Content Services Gateway multiple security vulnerabilities

Protection bypass, DoS...

PHP multiple security vulnerabilities

DoS, basedir protection bypass, crossite scripting...

Apache Shiro protection bypass

Protection bypass via directory traversal...

The Windows File System vulnerability-a small vulnerability, big-vulnerability warning-the black bar safety net

Windows useful file to replace the command, to bypass the File Protection Used to replace file replace, even being used of the file can also be replaced. Very invincible. For example: in C:\create a directory, c:\aaa Then copy an mp3 to c:\aaa and named to the c:\aaa\a. mp3 Then copy another...

Microsoft .Net XML signing protection bypass

Only part of signature is compared in case of incomplete HMAC...

CVE-2010-1225: Undefined Security Weakness

The memory-management implementation in the Virtual Machine Monitor aka VMM or hypervisor in Microsoft Virtual PC 2007 Gold and SP1, Virtual Server 2005 Gold and R2 SP1, and Windows Virtual PC does not properly restrict access from the guest OS to memory locations in the VMM work area, which allo...

Apple Safari / WebKit protection bypass

Integer overflow allows to bypass destination port limitations...

Apache mod_security multiple security vulnerabilities

DoS, protection bypass...

kernel: personality: fix PER_CLEAR_ON_SETID

The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PERCLEARONSETID setting that does not clear the ADDRCOMPATLAYOUT and MMAPPAGEZERO flags when executing a setuid or setgid program, which makes it easier for local users to leverage the details of memory usage to 1 conduct NULL...