G DATA Software Total Security Security Feature Issue Vulnerability

G DATA Software Total Security is a suite of antivirus software from the German company G DATA Software. The software is anti-phishing, anti-virus and anti-spam. A security feature issue vulnerability in the gdwfpcd.sys file in versions of G DATA Software Total Security prior to 2019-02-22, which...

GHSA-5GVM-HRW5-H6XF Improper Authentication in org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service

The LDAP implementation in HiveServer2 in Apache Hive before 1.0.1 and 1.1.x before 1.1.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, mishandles simple unauthenticated and anonymous bind configurations, which allows remote attackers to bypass authenticatio...

Google Chrome DevTools Navigation Restriction Bypass Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. Devtools is one of the development and debugging tools. A security vulnerability exists in DevTools in versions of Google Chrome prior to 66.0.3359.117, which stems from the program's failure to handle URLs correctl...

Google Chrome for Mac, Windows and Linux V8 Security Bypass Vulnerability

Google Chrome for Mac, Windows and Linux is a web browser based on Mac, Windows and Linux platforms developed by Google USA.V8 is one of the open source JavaScript engines. A security vulnerability exists in V8 in versions of Google Chrome prior to 64.0.3282.167 for Mac and Linux-based platforms...

PHP Scripts Mall Advance Peer to Peer MLM Script Access Control Error Vulnerability

PHP Scripts Mall Advance Peer to Peer MLM Script is an online MLM Multi-Level Marketing system from PHP Scripts Mall India.Admin Panel is one of the admin panels. An access control error vulnerability exists in PHP Scripts Mall Advance Peer to Peer MLM Script version 1.7.0 in the Admin Panel, whi...

Google Chrome Blink Security Bypass Vulnerability (CNVD-2019-03550)

Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A security vulnerability exists in Blink in versions of Google Chrome prior to 66.0.3359.117, which stems from the program's...

Design/Logic Flaw

Lack of proper state tracking in Permissions in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

SAP BW/4HANA Remote Authorization Bypass Vulnerability

SAP BW/4HANA is a data warehouse solution based on SAP HANA from SAP, Germany. The product is able to integrate with SAP or non-SAP applications for real-time data processing. A remote authorization bypass vulnerability exists in SAP BW/4HANA version 1.0 SP08, which stems from the maintenance of...

CVE-2018-1000628

Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the direct checking of the API key against a user-supplied value in PHP's GET global variable array using PHP's strcmp function. By adding "" to the end of "key" in the URL when accessing API functions...

CVE-2018-1000626

Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the lack of requirement to change the default API key. An attacker could exploit this vulnerability using all available API functions containing an unchanged API key to gain unauthorized access to the...

Google Chrome Site Isolation Information Disclosure Vulnerability

Google Chrome is a web browser developed by Google Inc. and Site Isolation is one of the security threat protection components. A security vulnerability exists in Site Isolation in Google Chrome versions prior to 71.0.3578.80. The vulnerability can be exploited by remote attackers to bypass the...

Google Chrome Privilege Bypass Vulnerability

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the Permissions pop-up window in Google Chrome versions prior to 66.0.3359.106. A remote attacker can exploit this vulnerability to bypass the permissions policy with the help of...

DEBIAN-CVE-2018-19475

psi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because available stack space is not checked when the device remains the same...

DEBIAN-CVE-2018-19476

psi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access restrictions because of a setcolorspace type confusion...

UBUNTU-CVE-2018-6074

Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to bypass OS level controls via a crafted HTML page...

Code injection

tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/cms/column/list directly to read the column list page or edit a column...

GHSA-8Q89-PWHH-7WFQ Use of Insufficiently Random Values in penggle:kaptcha

text/impl/DefaultTextCreator.java, text/impl/ChineseTextProducer.java, and text/impl/FiveLetterFirstNameTextCreator.java in kaptcha 2.3.2 use the Random rather than SecureRandom function for generating CAPTCHA values, which makes it easier for remote attackers to bypass intended access restrictio...

USN-3795-1 libssh vulnerability

Peter Winter-Smith discovered that libssh incorrectly handled authentication when being used as a server. A remote attacker could use this issue to bypass authentication without any credentials...

CQU-LANKERS Cross-Site Scripting Vulnerability

CQU-LANKERS is a system of university community services. A cross-site scripting vulnerability exists in the public/api.php file in CQU-LANKERS 2017-11-02 and earlier versions, which can be exploited by remote attackers to bypass the Web Application Protection System with the help of the 'callbac...

The vulnerability of microprogrammed software in Schneider Electric Modicon M221 programmable logic controllers arises from deficiencies in the authentication process, which allows attackers to bypass the authentication procedures.

The vulnerability of the microprogrammed software in Schneider Electric Modicon M221 programmable logic controllers is due to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to bypass the authentication process remotely...