The vulnerabilities of Internet Explorer and Microsoft Edge browsers stem from security flaws in their URL validation mechanisms. This allows attackers to circumvent existing security restrictions.

The vulnerability of Internet Explorer and Microsoft Edge is related to deficiencies in security mechanisms for checking URL addresses. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the Intune MAM Policy implementation mechanism allows a perpetrator to circumvent existing security restrictions for internal corporate communication and Yammer for Android.

The vulnerability of the Intune MAM Policy implementation mechanism for corporate internal communication and Yammer for Android lies in insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

CVE-2019-6005

Smart TV Box firmware version prior to 1300 allows remote attackers to bypass access restriction to conduct arbitrary operations on the device without user's intent, such as installing arbitrary software or changing the device settings via Android Debug Bridge port 5555/TCP...

CVE-2019-5397

A remote bypass of security restrictions vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

Authentication flaw

A remote authentication bypass vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

CVE-2019-5397

CVE-2019-5397 affects HPE 3PAR Service Processor prior to 5.0.5.1. The vulnerability is a remote bypass of security restrictions (no user interaction required) that could allow an attacker to compromise confidentiality, integrity, and availability. CVSSv3 base score is 9.4 (CRITICAL) with network...

CVE-2019-5397

A remote bypass of security restrictions vulnerability was discovered in HPE 3PAR Service Processor versions: prior to 5.0.5.1...

CVE-2018-6161

Insufficient policy enforcement in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

UBUNTU-CVE-2018-16074

Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass site isolation via a crafted HTML page...

UBUNTU-CVE-2018-16073

Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass site isolation via a crafted HTML page...

DEBIAN-CVE-2019-5803

Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page...

DEBIAN-CVE-2019-5799

Incorrect inheritance of a new document's policy in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page...

UBUNTU-CVE-2019-5799

Incorrect inheritance of a new document's policy in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page...

Siemens S7-1200 Series PLC CPU User Program Block Protection Remote Bypass

Binary data 142.prm...

CVE-2019-1686

Summary of CVE-2019-1686: Cisco IOS XR on ASR 9000 Series ACL processing vulnerability allows an unauthenticated, remote attacker to bypass ACL protections. Root cause: incorrect processing of the ACL applied to an interface when Cisco Express Forwarding load balancing uses the 3-tuple hash algor...

The vulnerability of the SAP Fiori Client’s mobile execution environment, related to deficiencies in access control, allows a perpetrator to bypass the authentication system.

The vulnerability of the SAP Fiori Client mobile environment is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to bypass the system’s authentication process remotely...

G DATA Software Total Security Security Feature Issue Vulnerability

G DATA Software Total Security is a suite of antivirus software from the German company G DATA Software. The software is anti-phishing, anti-virus and anti-spam. A security feature issue vulnerability in the gdwfpcd.sys file in versions of G DATA Software Total Security prior to 2019-02-22, which...

GHSA-5GVM-HRW5-H6XF Improper Authentication in org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service

The LDAP implementation in HiveServer2 in Apache Hive before 1.0.1 and 1.1.x before 1.1.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, mishandles simple unauthenticated and anonymous bind configurations, which allows remote attackers to bypass authenticatio...

Google Chrome DevTools Navigation Restriction Bypass Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. Devtools is one of the development and debugging tools. A security vulnerability exists in DevTools in versions of Google Chrome prior to 66.0.3359.117, which stems from the program's failure to handle URLs correctl...

PHP Scripts Mall Advance Peer to Peer MLM Script Access Control Error Vulnerability

PHP Scripts Mall Advance Peer to Peer MLM Script is an online MLM Multi-Level Marketing system from PHP Scripts Mall India.Admin Panel is one of the admin panels. An access control error vulnerability exists in PHP Scripts Mall Advance Peer to Peer MLM Script version 1.7.0 in the Admin Panel, whi...