Duo Network Gateway Authentication Bypass Vulnerability

Duo Network Gateway DNG is an access control software for accessing internal Web applications from Duo Corporation in the United States. An authentication bypass vulnerability exists in DNG. A remote attacker could use this vulnerability to bypass the authentication mechanism and perform...

Novell libzypp Security Bypass Vulnerability

libzypp also known as ZYPP is the U.S. Novell-sponsored open source set of manageable engines, drivers eg: Linux applications YaST, Zypper tools. A security vulnerability exists in libzypp. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized...

Linux Kernel Local Security Bypass Vulnerability (CNVD-2018-06547)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local security bypass vulnerability exists in the Linux kernel. An attacker could exploit the vulnerability to bypass security restrictions and perform unauthorized operatio...

Apache Cordova For Android Security Bypass Vulnerability (CNVD-2018-03755)

Apache Cordova For Android is the United States Apache Apache Software Foundation of a set of HTML, CSS and JavaScript can be used to develop mobile applications based on Android platform , but also to drive the core engine of PhoneGap. A security bypass vulnerability exists in Apache Cordova 6.1...

CVE-2017-15091

An issue has been found in the API component of PowerDNS Authoritative 4.x up to and including 4.0.4 and 3.x up to and including 3.4.11, where some operations that have an impact on the state of the server are still allowed even though the API has been configured as read-only via the api-readonly...

Directory Traversal Vulnerability in Shun.com Wireless Routing

Shunnet Wireless Route is a management tool for preventing idle users from rubbing the Internet when WiFi is shared. A directory traversal vulnerability exists in Shunnet Wireless Route, which can be exploited by attackers to conduct unauthorized operations on Shunnet Wireless Route...

CODESYS Runtime plclinux_rt Multiple Authentication Bypass Vulnerabilities

CoDeSys is a powerful PLC software programming tool, which supports IEC61131-3 standard IL, ST, FBD, LD, CFC, SFC six PLC programming languages. CODESYS Runtime plclinuxrt has multiple authentication bypass vulnerabilities. An attacker could use these issues to bypass the authentication mechanism...

IBM Jazz for Service Management Cross-Site Request Forgery Vulnerability (CNVD-2017-37866)

IBM Jazz for Service Management JazzSM is an integrated service management product from IBM that provides visibility into the service management environment. A cross-site request forgery vulnerability exists in IBM Jazz for Service Management version 1.1.3. A remote attacker could exploit this...

IBM Jazz for Service Management Cross-Site Request Forgery Vulnerability (CNVD-2017-37857)

IBM Jazz for Service Management JazzSM is an integrated service management product from IBM that provides visibility into the service management environment. A cross-site request forgery vulnerability exists in IBM Jazz for Service Management version 1.1.3. A remote attacker could exploit this...

OpenSSL Security Restriction Bypass Vulnerability

OpenSSL is an open source implementation of SSL used to implement strong encryption for network communications. A security restriction bypass vulnerability exists in OpenSSL version 1.0.2, which can be exploited by an attacker to bypass security mechanisms and perform unauthorized operations...

Mozilla Firefox Private Browsing Mode Security Bypass Vulnerability

Mozilla Firefox is a popular WEB browser. A security bypass vulnerability exists in Mozilla Firefox Private Browsing mode, which can be exploited by a remote attacker to submit a special WEB page that can be tricked into parsing by the user, bypassing security restrictions and performing...

Multiple Vulnerabilities in Pivotal Cloud Foundry cf-deployment

Pivotal Cloud Foundry CF is a suite of open source Platform-as-a-Service PaaS cloud computing platforms from Pivotal Software in the United States, which provides container scheduling, continuous delivery, and automated service deployment, among other features. cf-release is a release version of...

Fortinet FortiWebManager Security Feature Bypass Vulnerability

Fortinet FortiWebManager is a web application firewall. A security feature bypass vulnerability exists in Fortinet FortiWebManager, which can be exploited by an attacker to bypass certain security restrictions and perform unauthorized operations...

Hitachi Vantara Pentaho Business Analytics Platform Cross-Site Request Forgery Vulnerability

Hitachi Vantara Pentaho Business Analytics BA Platform is an open source Business Intelligence BI system from Hitachi Vantara Japan that provides data integration, OLAP services, reporting, dashboards, data mining, and ETL capabilities. A cross-site request forgery vulnerability exists in Hitachi...

SAP KERNEL Trusted RFC connection security bypass vulnerability

SAP KERNEL is a set of basic technology platforms written in C from SAP in Germany. The platform is a support platform between the underlying layer and the business layer.32 NUC and so on are different versions of it.Trusted RFC connection is one of the RFC connection components. A security...

Security Bypass Vulnerabilities in Multiple Adobe Products (CNVD-2017-36612)

Adobe Acrobat DC, etc. are the United States of America Auduby Adobe company's products. Acrobat DC is a desktop PDF solution; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF.Classic and Continuous are Acrobat DC and Acrobat Reader DC product download center provides...

SAP HANA Extended Application Services Security Bypass Vulnerability

SAP HANA is a high-performance real-time data analytics platform from SAP, which provides data query functions that allow users to directly query and analyze a large amount of real-time business data.Extended Application Services XS is a development environment for application servers, Web server...

Multiple Dahua Product Access Validation Vulnerabilities

Dahua NVR50XX and so on are network hard disk camera products of China Dahua Dahua company. A security vulnerability exists in several Dahua products. The vulnerability can be exploited by an attacker to perform other operations by forging json messages...

CMS Security Bypass Vulnerability in Joomla!

Joomla! is a content management system. A security bypass vulnerability exists in Joomla! CMS that could be exploited by remote attackers to submit a special request, bypass certain security restrictions, and perform unauthorized operations...

chromium-browser content security bypass vulnerability

chromium-browser is an open source web browser project started by Google to provide source code for the proprietary Google Chrome browser. A content security bypass vulnerability exists in chromium-browser. An attacker can exploit the vulnerability to bypass security restrictions and perform...