CVE-2016-1905

The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a crafted patched object...

Design/Logic Flaw

Cisco Identity Services Engine ISE before 2.0 allows remote authenticated users to bypass intended web-resource access restrictions via a direct request, aka Bug ID CSCuu45926...

CVE-2015-6317

Cisco Identity Services Engine ISE before 2.0 allows remote authenticated users to bypass intended web-resource access restrictions via a direct request, aka Bug ID CSCuu45926...

CVE-2015-6317

Cisco Identity Services Engine (ISE) versions prior to 2.0 are vulnerable to an unauthorized access flaw where a low-privileged, authenticated user can bypass web-resource access restrictions by requesting resources directly. The root cause is improper filtering of web resources for administrativ...

CVE-2015-6317: Improper Access Control

Cisco Identity Services Engine ISE before 2.0 allows remote authenticated users to bypass intended web-resource access restrictions via a direct request, aka Bug ID CSCuu45926...

PT-2016-3705

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE versions prior to 2.0 Description The issue allows remote authenticated users to bypass intended web-resource access restrictions via a direct request. Recommendations For versions prior to 2.0, update to...

Information disclosure

The importScripts function in the Web Workers API implementation in Mozilla Firefox before 43.0 allows remote attackers to bypass the Same Origin Policy by triggering use of the no-cors mode in the fetch API to attempt resource access that throws an exception, leading to information disclosure...

CVE-2014-8912

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF18, and 8.5.0 before CF08 improperly restricts resource access, which allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated b...

RedHat Update for jakarta-taglibs-standard RHSA-2015:1695-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Flash Player software is related to the ability to access resources through incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Flash Player software is related to the ability to access resources through incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Flash Player software arises from the ability to access resources through incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by manipulating data types...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Flash Player software arises from the ability to access resources through incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by manipulating data types...

The vulnerability of the Adobe AIR software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the Adobe AIR software platform arises from the ability to access resources through incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by manipulating data types...

The vulnerability of the Adobe AIR software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the Adobe AIR software platform arises from the ability to access resources through incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by manipulating data types...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Flash Player software is related to access to resources through incompatible types. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Flash Player software is related to access to resources through incompatible types. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability of the Flash Player software is related to access to resources through incompatible types. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2015-0694

Cisco ASR 9000 devices with software 5.3.0.BASE do not recognize that certain ACL entries have a single-host constraint, which allows remote attackers to bypass intended network-resource access restrictions by using an address that was not supposed to have been allowed, aka Bug ID CSCur28806...

Design/Logic Flaw

Cisco ASR 9000 devices with software 5.3.0.BASE do not recognize that certain ACL entries have a single-host constraint, which allows remote attackers to bypass intended network-resource access restrictions by using an address that was not supposed to have been allowed, aka Bug ID CSCur28806...