IBM Security Guardium Security Bypass Vulnerability (CNVD-2017-19559)

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes easy UI customization, report management and discovery and a streamlined audit process builder. A security vulnerability exists in IBM Security Guardium tha...

Hashtopus Cross-Site Request Forgery Vulnerability

Hashtopus is a cross-platform client-server tool for distributing hash table tasks between multiple computers. A cross-site request forgery vulnerability exists in Hashtopus version 1.5g. A remote attacker could exploit this vulnerability to perform unauthorized operations...

Openpgp.js 's2k.js' Security Bypass Vulnerability

Openpgp.js is a library that implements the OpenPGP encryption algorithm in JavaScript. A security bypass vulnerability exists in Openpgp.js. An attacker can exploit this vulnerability to gain access to sensitive information and perform unauthorized operations...

Google Android Secure Display Competitive Conditions Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Secure Display is a secure display component. A competitive condition vulnerability exists in Secure Display in Android. An attacker could exploit this vulnerability to...

Google Android syscall handler buffer overflow vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. syscall handler is one of the system call handlers. A buffer overflow vulnerability exists in the syscall handler in Android. An attacker can exploit this vulnerability to perform...

Google Android Competitive Conditions Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which the TZ API is an interface. A competitive condition vulnerability exists in the TZ API in Android. An attack can exploit this vulnerability to perform unauthorized...

Apache OpenMeetings Security Bypass Vulnerability (CNVD-2017-25613)

Apache OpenMeetings is the United States Apache Apache Software Foundation developed a set of multi-language customizable video conferencing and collaboration system, which supports audio, video and allows users to view each participant's desktop and so on. A security bypass vulnerability exists ...

Apache OpenMeetings Security Bypass Vulnerability

Apache OpenMeetings is the United States Apache Apache Software Foundation developed a set of multi-language customizable video conferencing and collaboration system, which supports audio, video and allows users to view each participant's desktop and so on. A security bypass vulnerability exists ...

Heimdal Man-in-the-Middle Security Restriction Bypass Vulnerability

Heimdal is a Kerberos 5 implementation developed primarily in Sweden. Heimdal violates the Kerberos 5 protocol rules when obtaining service protocol names, allowing remote attackers to exploit the vulnerability to submit special requests, bypass certain security restrictions, and perform...

Microsoft Windows Security Bypass Vulnerability (CNVD-2017-16001)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A security bypass vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

Apache Impala Authentication Bypass Vulnerability

Apache Impala is an open source distributed SQL query engine for Apache Hadoop. When Apache Impala is Kerberos-enabled, a malicious process emulates the Impala backend program, allowing attackers to exploit vulnerabilities to submit special requests, bypass authentication, and perform unauthorize...

Google Android Qualcomm Component Competitive Conditions Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A competitive condition vulnerability exists in the listener routine of TrustZone for Google Android. An attack could exploit this vulnerability to perform unauthorized operations...

Google Android Qualcomm Component Competitive Condition Vulnerability (CNVD-2017-18948)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A competitive condition vulnerability exists in the authentication routine of TrustZone in versions of Android prior to 7.0. An attack could exploit the vulnerability to perform...

Apache Solr Security Bypass Vulnerability

Apache Solr is an enterprise-ready, Lucene-based search server. A security bypass vulnerability exists in Apache Solr. An attacker could use this issue to bypass certain security restrictions and perform unauthorized operations...

Drupal OAuth Module Access Bypass Vulnerability

Drupal is an open source content management framework CMF written in the PHP language, which consists of a content management system CMS and PHP development framework Framework together. An access bypass vulnerability exists in the Drupal OAuth module. Allows an attacker to bypass certain securit...

PostgreSQL PL/Java Unauthorized Operation Vulnerability

PostgreSQL PL/Java is the PostgreSQL development team developed a database can be used in Java code to write stored procedures , triggers and functions of the open source project . A security vulnerability exists in PostgreSQL PL/Java versions 1.4.3 and earlier. A remote attacker could exploit th...

FineCMS Server-Side Request Forgery Vulnerability

FineCMS is a content management system based on PHP+MySql+CI framework. A server-side request forgery vulnerability exists in the application/lib/ajax/getimagedata.php file in versions of FineCMS prior to 2017-07-06. An attacker can exploit this vulnerability to perform unauthorized operations...

Google Android PlayReady API Buffer Overflow Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A buffer overflow vulnerability exists in the PlayReady API in Android, which allows an attacker to exploit the vulnerability to submit a special request to perform an unauthorized...

Google Android WideVine DRM Security Bypass Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability exists in the WideVine DRM in Android, which allows an attacker to exploit the vulnerability to submit a special request to perform an unauthorized operation...

Brother Industries MFC-J960DWN Cross-Site Request Forgery Vulnerability

The Brother Industries MFC-J960DWN is a printer from Brother Industries in Japan. A cross-site request forgery vulnerability exists in the Brother Industries MFC-J960DWN using firmware version D and earlier. A remote attacker could exploit this vulnerability to perform unauthorized operations...