PT-2016-3713 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 9.4.1 through 9.5.1 Description: The issue allows remote users to bypass an intended DCERPC-only ACL by sending arbitrary network traffic. This is related to the DCERPC Inspection featur...

CVE-2015-7249

The provided connected sources document multiple CVEs (CVE-2015-7248 through CVE-2015-7252) affecting ZTE ZXHN H108N R1A (and related ZXV10 W300 variants). Affected components include the webproc CGI module and related pages, enabling: information exposure (credentials/config data in web sources ...

UBUNTU-CVE-2015-6770

The DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-6768...

CVE-2015-6365

Cisco IOS 15.204M and 15.403M lets physical-interface ACLs supersede virtual PPP interface ACLs, which allows remote authenticated users to bypass intended network-traffic restrictions in opportunistic circumstances by using PPP, aka Bug ID CSCur61303...

The vulnerability of the Radia Client Automation program allows a hacker to circumvent existing access restrictions.

The vulnerability of the Radia Client Automation user automation program is related to errors in security settings during default configuration. Exploiting this vulnerability can allow a malicious actor to circumvent existing access restrictions remotely...

OpenStack Image Service Access Restriction Bypass Vulnerability

OpenStack is a cloud platform management project developed by the National Aeronautics and Space Administration NASA in collaboration with Rackspace, Inc. in the U.S. Image Service Glance is one of the projects that can store, query, and retrieve virtual machine Image Service Glance is one of the...

DEBIAN-CVE-2015-5235

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving applet execution via a crafted web page...

UBUNTU-CVE-2015-5235

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving applet execution via a crafted web page...

The vulnerability of the iOS operating system, which allows a hacker to circumvent existing access control rules

The vulnerability of the WebKit component of the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass existing access control rules remotely...

chromium-browser: information leak in PDF viewer

The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages and API exposure, which allows remote attackers to bypass the Same Origin Policy via an unintended embedder or unintended plugin loading, related to pdf.js and outofprocessinstance.cc...

Cisco Prime Collaboration Provisioning Access Control Bypass Vulnerability

Cisco Prime Collaboration Provisioning is the United States of America Cisco Cisco a set of Web-based next-generation communications services solutions. A security vulnerability exists in the Web framework of Cisco Prime Collaboration Assurance. A remote attacker could exploit the vulnerability b...

UBUNTU-CVE-2015-1297

The WebRequest API implementation in extensions/browser/api/webrequest/webrequestapi.cc in Google Chrome before 45.0.2454.85 does not properly consider a request's source before accepting the request, which allows remote attackers to bypass intended access restrictions via a crafted 1 app or 2...

UBUNTU-CVE-2015-1293

The DOM implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

The vulnerability of the Adobe AIR software platform, which allows a hacker to circumvent access restrictions

The vulnerability of the Adobe AIR software platform is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access restrictions remotely...

The vulnerability of the Flash Player software platform, which allows attackers to circumvent existing access restrictions

The vulnerability of the Flash Player software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to bypass existing access restrictions remotely...

The vulnerability of the Flash Player software platform, which allows attackers to circumvent existing access restrictions

The vulnerability of the Flash Player software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to bypass existing access restrictions remotely...

The vulnerability of the Flash Player software platform, which allows attackers to circumvent existing access restrictions

The vulnerability of the Flash Player software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to bypass existing access restrictions remotely...

The vulnerability of the Flash Player software platform, which allows a violator to circumvent access restrictions

The vulnerability of the Flash Player software is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access restrictions remotely...

The vulnerability of the Flash Player software platform, which allows a violator to circumvent access restrictions

The vulnerability of the Flash Player software is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access restrictions remotely...

The vulnerability of the Flash Player software platform, which allows a violator to circumvent access restrictions

The vulnerability of the Flash Player software is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass access restrictions remotely...