Microsoft Powershell Tampering Security Bypass Vulnerability

Microsoft Windows 10 and others are products of Microsoft Corporation, U.S.A. Microsoft Windows 10 is a suite of operating systems.PowerShell Core is a cross-platform command-line script execution environment built for heterogeneous environments and hybrid clouds. A tamper security bypass...

Microsoft Windows JScript Local Security Bypass Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A local security bypass vulnerability exists in Microsoft Windows. An attacker could use this issue to bypass certain security restrictions and perform unauthorized operations. This could facilitate...

CVE-2018-7358

ZTE ZXHN H168N product with versions V2.2.0PK1.2T5, V2.2.0PK1.2T2, V2.2.0PK11T7 and V2.2.0PK11T have an improper change control vulnerability, which may allow an unauthorized user to perform unauthorized operations...

Improper access control

ZTE ZXHN H168N product with versions V2.2.0PK1.2T5, V2.2.0PK1.2T2, V2.2.0PK11T7 and V2.2.0PK11T have an improper change control vulnerability, which may allow an unauthorized user to perform unauthorized operations...

CVE-2018-7358

ZTE ZXHN H168N product with versions V2.2.0PK1.2T5, V2.2.0PK1.2T2, V2.2.0PK11T7 and V2.2.0PK11T have an improper change control vulnerability, which may allow an unauthorized user to perform unauthorized operations...

CVE-2018-1850

IBM Security Access Manager Appliance 9.0.3.1, 9.0.4.0 and 9.0.5.0 could allow unauthorized administration operations when Advanced Access Control services are running. IBM X-Force ID: 150998...

Zenar Content Management System Cross-Site Request Forgery Vulnerability

Zenar Content Management System is a Zenar team of open source content management system CMS. A cross-site request forgery vulnerability exists in Zenar Content Management System version 8.3. A remote attacker can exploit this vulnerability to perform unauthorized operations...

DESTOON B2B Cross-Site Request Forgery Vulnerability

DESTOON B2B is a PHP and MySQL based open source B2B e-commerce website management system . A cross-site request forgery vulnerability exists in DESTOON B2B version 7.0. A remote attacker can exploit this vulnerability by using the admin.php URI in the action=add request to perform unauthorized...

Security Bulletin: IBM Security Access Manager Appliance is affected by a security vulnerability (CVE-2018-1850)

Summary IBM Security Access Manager appliance is affected by a security vulnerability that could allow unauthorized operations when Advanced Access Control services are running. Vulnerability Details CVEID: CVE-2018-1850 DESCRIPTION: IBM Security Access Manager Appliance 9.0.3.1, 9.0.4.0 and...

GE iFix Unauthorized Operation Vulnerability

iFIX is a GE Intelligent Platform GE-IP providing automation hardware and software solutions. A security vulnerability exists in the Gigasoft component of GE iFix. An attacker could exploit the vulnerability to perform unauthorized operations...

Debian DLA-1513-1 : openafs security update

Several security vulnerabilities were discovered in OpenAFS, a distributed file system. CVE-2018-16947 The backup tape controller process accepts incoming RPCs but does not require or allow for authentication of those RPCs. Handling those RPCs results in operations being performed with...

Microsoft Windows Device Guard Security Bypass Vulnerability (CNVD-2018-24938)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote security bypass vulnerability exists in Microsoft Windows. An attacker could use this vulnerability to bypass certain security restrictions and perform unauthorized operations. This could...

Hefei City, a new software development limited liability company a new housing provident fund series of software with ultra vires access vulnerability

Hefei City, a new software development limited liability company is a computer software development, promotion and provide business management consulting services based on high-tech companies. A vulnerability exists in the Hefei Yixin Software Development Limited Liability Company's Yixin Housing...

Philips e-Alert Cross-Site Request Forgery Vulnerability

Philips e-Alert is an electronic alert solution for MRI systems from Philips in the Netherlands, which is used to monitor and alert on MRI system performance. A cross-site request forgery vulnerability exists in Philips e-Alert R2.1 and prior versions. An attacker could exploit this vulnerability...

FlightAirMap Cross-Site Scripting Vulnerability

FlightAirMap is a free, open source application developed using PHP for displaying flights on a map. A cross-site scripting vulnerability exists in the GET variable on the Registration sub-menu page in FlightAirMap 1.0-beta.21 and earlier versions. A remote attacker can exploit this vulnerability...

Microsoft Windows ADFS Security Bypass Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A security bypass vulnerability exists in Microsoft Windows. An attacker could exploit this issue to bypass certain security restrictions and perform unauthorized operations...

Oracle MySQL Server Component Unauthorized Operation Vulnerability

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. A security vulnerability exists in the Server: Options subcomponent of the MyS...

Google Chrome Same Origin Policy Bypass Vulnerability (CNVD-2018-17051)

Google Chrome is a web browser developed by the American company Google Google. A same-origin policy bypass vulnerability exists in ServiceWorker in Google Chrome. An attacker can exploit the vulnerability to bypass security restrictions and perform unauthorized operations...

Google Chrome Same Origin Policy Bypass Vulnerability (CNVD-2018-17046)

Google Chrome is a web browser developed by the American company Google Google. A same-origin policy bypass vulnerability exists in ServiceWorker in Google Chrome. An attacker can exploit the vulnerability to bypass security restrictions and perform unauthorized operations...

CVE-2017-0919

GitLab Community and Enterprise Editions before 10.1.6, 10.2.6, and 10.3.4 are vulnerable to an authorization bypass issue in the GitLab import component resulting in an attacker being able to perform operations under a group in which they were previously unauthorized...