Google Chrome Extensions Subsystem Security Bypass Vulnerability (CNVD-2016-01513)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the Extensions subsystem of Google Chrome prior to version 49.0.2623.75, which stems from the program failing to properly preserve internal properties. A remote attacker could exploi...

CVE-2016-1632

The Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly maintain own properties, which allows remote attackers to bypass intended access restrictions via crafted JavaScript code that triggers an incorrect cast, related to extensions/renderer/v8helpers.h and gin/converter.h...

UBUNTU-CVE-2016-1632

The Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly maintain own properties, which allows remote attackers to bypass intended access restrictions via crafted JavaScript code that triggers an incorrect cast, related to extensions/renderer/v8helpers.h and gin/converter.h...

UBUNTU-CVE-2016-1638

extensions/renderer/resources/platformapp.js in the Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly restrict use of Web APIs, which allows remote attackers to bypass intended access restrictions via a crafted platform app...

CVE-2016-0069

Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Explorer Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0068...

Google Chrome Instant Feature Security Restriction Bypass Vulnerability

Google Chrome is a web browsing tool developed by Google. A security vulnerability exists in versions prior to Google Chrome 48.0.2564.109 due to the Chrome Instant feature not ensuring that NTP navigation targets are in the most frequently viewed or suggested list. A remote attacker can exploit...

Multiple OpenStack Products Access Bypass Vulnerabilities

OpenStack Identity Keystone is a project developed by the National Aeronautics and Space Administration and Rackspace in the United States for authentication, providing identity, token, directory and policy services. OpenStack keystonemiddleware formerly known as python-keystoneclient is one of t...

The vulnerability of the Internet Explorer browser, which allows a hacker to bypass the protection against cross-site scripting attacks

The vulnerability of the Internet Explorer browser is caused by errors in the processing of HTTP responses. Exploiting this vulnerability allows a malicious actor to bypass security measures against cross-site scripting attacks from a remote location...

The vulnerability of the SAP Mobile Platform, a platform for developing mobile applications, allows a perpetrator to obtain confidential information and bypass authentication procedures.

The vulnerability of SAP Mobile Platform’s serverlets for developing mobile applications is related to deficiencies in access control to files. Exploiting this vulnerability can allow a malicious actor, operating remotely, to bypass authentication procedures, obtain confidential information, or...

CVE-2016-0012

Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Visio 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Visio 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 20...

PT-2016-3713 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 9.4.1 through 9.5.1 Description: The issue allows remote users to bypass an intended DCERPC-only ACL by sending arbitrary network traffic. This is related to the DCERPC Inspection featur...

CVE-2015-7249

The provided connected sources document multiple CVEs (CVE-2015-7248 through CVE-2015-7252) affecting ZTE ZXHN H108N R1A (and related ZXV10 W300 variants). Affected components include the webproc CGI module and related pages, enabling: information exposure (credentials/config data in web sources ...

UBUNTU-CVE-2015-6770

The DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-6768...

CVE-2015-6365

Cisco IOS 15.204M and 15.403M lets physical-interface ACLs supersede virtual PPP interface ACLs, which allows remote authenticated users to bypass intended network-traffic restrictions in opportunistic circumstances by using PPP, aka Bug ID CSCur61303...

The vulnerability of the Radia Client Automation program allows a hacker to circumvent existing access restrictions.

The vulnerability of the Radia Client Automation user automation program is related to errors in security settings during default configuration. Exploiting this vulnerability can allow a malicious actor to circumvent existing access restrictions remotely...

OpenStack Image Service Access Restriction Bypass Vulnerability

OpenStack is a cloud platform management project developed by the National Aeronautics and Space Administration NASA in collaboration with Rackspace, Inc. in the U.S. Image Service Glance is one of the projects that can store, query, and retrieve virtual machine Image Service Glance is one of the...

DEBIAN-CVE-2015-5235

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving applet execution via a crafted web page...

UBUNTU-CVE-2015-5235

IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving applet execution via a crafted web page...

The vulnerability of the iOS operating system, which allows a hacker to circumvent existing access control rules

The vulnerability of the WebKit component of the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass existing access control rules remotely...

chromium-browser: information leak in PDF viewer

The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages and API exposure, which allows remote attackers to bypass the Same Origin Policy via an unintended embedder or unintended plugin loading, related to pdf.js and outofprocessinstance.cc...