Mozilla Firefox Security Bypass Vulnerability (CNVD-2019-22628)

Mozilla Firefox is a product of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security bypass vulnerability exists in Mozilla Firefox, which could be exploited by an attacker to bypass...

Logic Flaw Vulnerability in China Merchants Bank App Activity Business

China Merchants Bank APP is the center of gravity for China Merchants Bank to build a digital financial service platform, which is the carrier and platform for China Merchants Bank to connect users. There is a logic flaw vulnerability in the active business of China Merchants Bank APP. An attacke...

IBM Cloud Private Cross-Site Request Forgery Vulnerability

IBM Cloud Private is a set of enterprise private cloud solutions from IBM USA. The product is built primarily on Kubernetes and container technology. A cross-site request forgery vulnerability exists in IBM Cloud Private. An attacker can exploit this vulnerability to perform malicious unauthorize...

HPE Intelligent Management Center (IMC) UrlAccessController Authentication Bypass Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. An UrlAccessController authentication bypass vulnerability exists in HPE Intelligent Management Center IMC...

Microsoft Dynamics On-Premise Security Bypass Vulnerability

Microsoft Dynamics 365 is an ERP business solution for multinational organizations. A security bypass vulnerability exists in Microsoft Dynamics On-Premise. An attacker could exploit this vulnerability to bypass certain security restrictions and perform unauthorized operations...

Unauthorized Access Vulnerability in Acme CMS

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. Acme CMS has an unauthorized access vulnerability that can be exploited by attackers to conduct unauthorized operations...

WPA encryption problem vulnerability

WPA is a set of Wi-Fi access protection schemes from the Wi-Fi Alliance USA, including security protocols and security authentication procedures. There is a security vulnerability in WPA. An attacker can exploit the vulnerability to bypass security restrictions and perform unauthorized operations...

Siemens SINEMA Unauthorized Access Vulnerability

Siemens is a leading global technology company providing solutions to customers in the areas of power generation and transmission and distribution, infrastructure, industrial automation, drives and software through innovations in electrification, automation and digitalization. An unauthorized...

IBM BigFix Platform Unauthorized Operation Vulnerability

IBM BigFix Platform is a dynamic, content-driven messaging and management system from IBM, USA. A security vulnerability exists in IBM BigFix Platform versions 9.5 through 9.5.11. An attacker could exploit the vulnerability to upload files to the server with elevated privileges and perform...

SAP Netweaver Process Integration Access Control Error Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications, of which Process Integration is a suite of enterprise application integration software. An access control error...

Design/Logic Flaw

Roxy Fileman 1.4.5 allows attackers to execute renamefile.php aka Rename File, createdir.php aka Create Directory, fileslist.php aka Echo File List, and movefile.php aka Move File operations...

CVE-2019-7174

Roxy Fileman 1.4.5 allows attackers to execute renamefile.php aka Rename File, createdir.php aka Create Directory, fileslist.php aka Echo File List, and movefile.php aka Move File operations...

Apache HTTP Server Access Bypass Vulnerability

Apache HTTP Server is the United States Apache Apache Software Foundation of an open source web server . An access bypass vulnerability exists in Apache HTTP Server. It allows an attacker to bypass certain security restrictions and perform unauthorized operations...

Apache httpd Security Bypass Vulnerability

Apache httpd is the U.S. Apache Apache Software Foundation, an open source HTTP server developed and maintained specifically for modern operating systems. Apache httpd suffers from a security bypass vulnerability. Allows an attacker to bypass certain security restrictions and perform unauthorized...

Apache httpd security bypass vulnerability (CNVD-2019-08942)

Apache HTTP Server is the United States Apache Apache Software Foundation of an open source web server . A security bypass vulnerability exists in Apache httpd. Allows an attacker to bypass certain security restrictions and perform unauthorized operations...

Apache HTTP Server Remote Vulnerability

Apache HTTP Server is the United States Apache Apache Software Foundation of an open source web server . A remote vulnerability exists in Apache HTTP Server. An attacker can exploit the vulnerability to perform unauthorized operations...

Apache Hadoop Security Bypass Vulnerability

Apache Hadoop is a set of open source distributed systems infrastructure of the U.S. Apache Apache Software Foundation. The product is capable of distributed processing of large amounts of data and is characterized by high reliability, high scalability, high fault tolerance and so on. A security...

Moodle Security Bypass Vulnerability (CNVD-2019-35823)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security bypass vulnerability exists in Moodle, which can be exploited by attackers to bypass security restrictions and perform...

Baidu UEditor suffers from unauthorized access vulnerability

UEditor is a web editor developed by Baidu web front-end research and development department. An unauthorized access vulnerability exists in Baidu UEditor. An attacker can exploit the vulnerability to log in to the system without an account password and perform unauthorized operations...

CVE-2018-7366

ZTE ZXV10 B860AV2.1 product ChinaMobile branch with the ICNT versions up to V1.3.3, the BESTV versions up to V1.2.2, the WASU versions up to V1.1.7 and the MGTV versions up to V1.4.6 have an authentication bypass vulnerability, which may allows an unauthorized user to perform unauthorized...