1129 matches found
UBUNTU-CVE-2021-21130
Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page...
UBUNTU-CVE-2021-21129
Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page...
MyBB Hide-Thread-Content plugin security vulnerability
MyBB MyBulletinBoard is a free and web-based forum software developed by MyBB MYBB team using PHP and MySQL. The software is easy to use, supports multiple languages, scalable and so on. A security vulnerability exists in the MyBB Hide-Thread-Content plugin through 2021-01-27, which originates fr...
The vulnerability of Trend Micro InterScan Web Security Virtual Appliance, related to deficiencies in authentication procedures, allows attackers to bypass the authentication process.
The vulnerability of Trend Micro InterScan Web Security Virtual Appliance is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process remotely...
Vulnerabilities fixed in Juniper Junos OS
Juniper has fixed vulnerabilities in Junos OS. The vulnerabilities allow a remote malicious person to to bypass a security measure and to cause a denial-of-service cause. Juniper categorizes these vulnerabilities according to the CVSSv3 method with a highest score of 8.8. Juniper has released...
PT-2020-6791 · Fortinet · Fortios +1
Name of the Vulnerable Software and Affected Versions: Fortinet FortiOS affected versions not specified Fortinet FortiClient for Mac affected versions not specified Description: The issue is related to a flaw in the Fortinet antivirus scanner, affecting FortiOS and FortiClient for Mac, which occu...
CVE-2020-16029
Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file...
VulnCheck KEV: CVE-2020-26876
The wp-courses plugin through 2.0.27 for WordPress allows remote attackers to bypass the intended payment step for course videos and materials by using the /wp-json REST API, as exploited in the wild in September 2020. This occurs because showinrest is enabled for custom post types e.g.,...
CVE-2020-4324
IBM Security Secret Server proir to 10.9 could allow a remote attacker to bypass security restrictions, caused by improper input validation. IBM X-Force ID: 177515...
UBUNTU-CVE-2020-6567
Insufficient validation of untrusted input in command line handling in Google Chrome on Windows prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...
CVE-2020-6568
Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...
chromium-browser: Insufficient validation of untrusted input in command line handling
Insufficient validation of untrusted input in command line handling in Google Chrome on Windows prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...
The vulnerability of the SSH/Telnet protocol implementations in NPort IAW5000A-I/O Series web server software allows a hacker to bypass security restrictions.
The vulnerability of the SSH/Telnet protocol implementations in NPort IAW5000A-I/O Series web servers is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions remotely...
The vulnerability of the microprogrammed software of Schneider Electric’s spaceLYnk and Schneider Electric’s homeLYnk logic controllers lies in the lack of authentication attempt limits, allowing attackers to bypass the authentication process.
The vulnerability of the microprogramming software for Schneider Electric’s spaceLYnk and homeLYnk logic controllers is related to the absence of restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to bypass the authentication process remotely...
PT-2020-6900 · Apache +2 · Apache Shiro +2
Name of the Vulnerable Software and Affected Versions: Apache Shiro versions prior to 1.6.0 Description: The issue is related to weaknesses in the authentication procedure of the Apache Shiro framework. It may allow a remote attacker to bypass existing security restrictions by sending a specially...
chromium-browser: Insufficient policy enforcement in CSP
Insufficient policy enforcement in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML page...
Unspecified Vulnerability in RIPE NCC RPKI Validator (CNVD-2020-52431)
RIPE NCC RPKI Validator is an RPKI validator from RIPE NCC in the Netherlands. A security vulnerability exists in version 3.x of RIPE NCC RPKI Validator prior to 3.1-2020.07.06.14.28. A remote attacker could exploit the vulnerability to bypass access restrictions...
Unspecified Vulnerability in RIPE NCC RPKI Validator (CNVD-2020-52430)
RIPE NCC RPKI Validator is an RPKI validator from RIPE NCC in the Netherlands. A security vulnerability exists in RIPE NCC RPKI Validator versions 3.x through 3.1-2020.07.06.14.28. A remote attacker could exploit the vulnerability to bypass access restrictions or cause a denial of service...
Sick Package Analytics Input Validation Error Vulnerability
Sick Package Analytics is a system performance monitoring software for automatic identification systems from Sick. An input validation error vulnerability exists in SICK Package Analytics V04.0.0 and prior versions. The vulnerability arises from a networked system or product that does not properl...