Mozilla Firefox Security Bypass Vulnerability (CNVD-2015-01194)

Mozilla Firefox is a web browser developed by the Mozilla Foundation in conjunction with the open source community. A security bypass vulnerability exists in Mozilla Firefox, which can be exploited by attackers to bypass certain security restrictions and perform unauthorized operations...

Elasticsearch Groovy Scripting Engine Sandbox Security Bypass Vulnerability

ElasticSearch is an open source , distributed , RESTful search engine built on Lucene . A security bypass vulnerability exists in the Elasticsearch Groovy scripting engine sandbox, which can be exploited by an attacker to bypass certain security restrictions and perform unauthorized operations...

NTP 'ntp_io.c' Authentication Security Bypass Vulnerability

NTP is a protocol used to synchronize computer time. An authentication security bypass vulnerability exists in NTP 'ntpio.c', which can be exploited by an attacker to bypass certain security restrictions and perform unauthorized operations...

Drupal Path Breadcrumbs Module Access Bypass Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. An access bypass vulnerability exists in the Drupal Path Breadcrumbs module that could allow an attacker to bypass certain security restrictions and perform unauthorized...

Cisco IOS Security Bypass Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security bypass vulnerability exists in Cisco IOS that allows remote attackers to bypass security restrictions and perform unauthorized operations...

Cisco Prime Infrastructure Cross-Frame Scripting Vulnerability

Cisco Prime Infrastructure is an all-in-one package that provides complete infrastructure wired and wireless and mobile lifecycle management provisioning, monitoring, troubleshooting, fixing, and reporting. A cross-framework scripting vulnerability exists in Cisco Prime Infrastructure that could...

Apache WSS4J Security Bypass Vulnerability

WSS4J is a Java implementation of the OASIS Web Services Security WS-Security specification framework. A security bypass vulnerability exists in Apache WSS4J due to the program failing to adequately process user-supplied input. An attacker could use this vulnerability to bypass certain security...

LG On-Screen Phone Security Bypass Vulnerability

LG On-Screen Phone is a service program that allows you to remotely view and manipulate your cell phone through PC keyboard/mouse input. A security bypass vulnerability exists in LG On-Screen Phone, which can be exploited by attackers to bypass certain security restrictions and perform unauthoriz...

Unspecified Vulnerability in PHP wdsl Extension

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. An...

MIT krb5 kadmind security bypass vulnerability

MIT krb5 also known as MIT Kerberos 5 is a set of network authentication protocols developed by the Massachusetts Institute of Technology MIT in the U.S. It adopts a client/server structure, and both the client and server side can authenticate each other i.e., double authentication, which prevent...

phpBB Cross-Site Request Forgery Vulnerability

phpBB is phpBB group developed a set of open-source use of PHP language development of Web forum software . The software has support for multiple languages , support for multiple databases and customized layout and so on. phpBB cross-site request forgery vulnerability allows attackers to exploit...

Freesmartphone.org Local Security Bypass Vulnerability

freesmartphone.org is a free wireless optical communication software. A local security bypass vulnerability exists in freesmartphone.org that could be exploited by attackers to bypass certain security restrictions and perform unauthorized operations...

Linux Kernel Crypto API Local Security Bypass Vulnerability (CNVD-2015-00752)

Linux is an open source computer operating system kernel. A local security bypass vulnerability exists in the Linux Kernel Crypto API, which can be exploited by an attacker to bypass certain security restrictions and perform unauthorized operations...

Apache Qpid Security Bypass Vulnerability

Apache Qpid Open Source AMQP Messaging is a cross-platform enterprise communications solution that implements an advanced message queuing protocol . A security bypass vulnerability exists in Apache Qpid due to the program failing to adequately process user-supplied input. An attacker could use th...

Security Bypass Vulnerability in Multiple KDE Products

KDE is an open source graphical desktop environment for UNIX. A security bypass vulnerability exists in several KDE products, allowing attackers to bypass security restrictions and perform unauthorized operations...

Juniper Junos Security Bypass Vulnerability (CNVD-2015-00384)

Juniper Networks JUNOS is an operating system that runs on Juniper Networks' line of border routers and more. A security bypass vulnerability exists in Juniper Junos, which can be exploited by an attacker to bypass certain security restrictions and perform unauthorized operations...

Multiple Security Bypass Vulnerabilities in Jenkins Session Cookies

Jenkins, formerly Hudson is an extensible continuous integration engine. Multiple security vulnerabilities in the Jenkins session cookie allow attackers to bypass certain security restrictions and perform unauthorized operations...

Multiple Input Validation Vulnerabilities in Gecko CMS

Gecko CMS is a content management system CMS based on PHP and MySQL. Gecko CMS suffers from SQL injection, cross-site scripting, and HTML injection vulnerabilities because it fails to adequately filter user-supplied input. Exploitation of these vulnerabilities allows attackers to perform...

Django Security Bypass Vulnerability

Django is an open source web application framework written in Python . Django suffers from a security bypass vulnerability that can be exploited by an attacker to bypass certain security restrictions and perform unauthorized operations...

Local Security Bypass Vulnerabilities in Multiple BlackBerry Products

BlackBerry is a cell phone that supports basic features such as multiple email systems, multiple formats of attachments, email filtering, and remote clearing of email data. Multiple BlackBerry products have security vulnerabilities that allow local attackers to bypass security restrictions, perfo...