1129 matches found
Cross-Site Request Forgery Vulnerability in Multiple Moxa Products (CNVD-2020-18362)
Moxa MB3170/MB3270/MB3180/MB3280/MB3480/MB3660 series is an advanced Ethernet gateway device manufactured by moxa Taiwan. A cross-site request forgery vulnerability exists in multiple Moxa products, which can be exploited by remote attackers to bypass the cross-site request forgery protection...
CVE-2019-19550
Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the correct URL...
sqlite: dropping of shadow tables not restricted in defensive mode
Insufficient data validation in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass defense-in-depth measures via a crafted HTML page...
DEBIAN-CVE-2019-13750
Insufficient data validation in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass defense-in-depth measures via a crafted HTML page...
The vulnerability of the Ruby interpreter’s methods UNIXServer.open and UNIXSocket.open allows attackers to circumvent security restrictions.
The vulnerability of the UNIXServer.open and UNIXSocket.open methods in the Ruby programming language exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass security restrictions from a remote location...
CVE-2019-15685
Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, Kaspersky Security Cloud up to 2020, the web protection component allowed an attacker remotely disable such product's security features as private browsing and...
DEBIAN-CVE-2019-13710
Insufficient validation of untrusted input in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass download restrictions via a crafted HTML page...
UBUNTU-CVE-2019-13677
Insufficient policy enforcement in site isolation in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass site isolation via a crafted HTML page...
Cisco Email Security Appliance AsyncOS Software Input Validation Error Vulnerability
Cisco Email Security Appliance ESA is an email security appliance from Cisco in the U.S. AsyncOS Software is the operating system that runs on it. An input validation error vulnerability exists in the MP3 detection engine of AsyncOS Software prior to version 13.0 in the Cisco ESA, which stems fro...
Multiple Cisco Products Privilege License and Access Control Issues Vulnerability (CNVD-2020-00293)
Cisco Firepower Management Center FMC and so on are the products of the United States Cisco Cisco company.Cisco Firepower Management Center is a new generation of firewall management center software.Cisco Firepower Threat Defense FTD is a set of unified software to provide next-generation firewal...
python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms
urllib in Python 2.x through 2.7.16 supports the localfile: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen'localfile:///etc/passwd' call...
chromium-browser: Chrome web store origin needs to be isolated
Insufficient policy enforcement in site isolation in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass site isolation via a crafted HTML page...
Cisco Firepower Management Center Path Traversal Vulnerability
Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. A path traversal vulnerability exists in the web-based management interface in Cisco Firepower Management Center FMC, which can be exploited by a remote attacker to bypass the security...
The vulnerability of the “Enable Adobe Flash protected mode” parameter in the Adobe Flash plugin for the Firefox ESR browser allows a hacker to bypass existing security restrictions.
The vulnerability of the “Enable Adobe Flash protected mode” parameter in the Adobe Flash plugin for the Firefox ESR browser is related to privilege management errors. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...
The vulnerability of the cross-browser system used for developing WebExtensions extensions in the Firefox ESR browser allows a hacker to circumvent existing security restrictions.
The vulnerability of the cross-browser system used for developing WebExtensions extensions in Firefox ESR is related to privilege assignment errors. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...
The vulnerabilities of Internet Explorer and Microsoft Edge browsers stem from security flaws in their URL validation mechanisms. This allows attackers to circumvent existing security restrictions.
The vulnerability of Internet Explorer and Microsoft Edge is related to deficiencies in security mechanisms for checking URL addresses. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...
The vulnerability of the Intune MAM Policy implementation mechanism allows a perpetrator to circumvent existing security restrictions for internal corporate communication and Yammer for Android.
The vulnerability of the Intune MAM Policy implementation mechanism for corporate internal communication and Yammer for Android lies in insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...
CVE-2019-6005
Smart TV Box firmware version prior to 1300 allows remote attackers to bypass access restriction to conduct arbitrary operations on the device without user's intent, such as installing arbitrary software or changing the device settings via Android Debug Bridge port 5555/TCP...
